Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File:                     dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier:          onRPYEtPwlhK9med9LKZoVlhduVQV60Ktrw/V/wFs1o=
Subject key identifier:   A2:8F:04:AD:47:C1:E3:C3:43:CA:87:80:08:C5:74:EF:F8:CD:C4:4D
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer:       /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial:       01901CD891AA74959BAF9B901619B9E1AB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number:          0A96
Signing time:             Sat 15 Jun 2024 17:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:13 +0000
Files and hashes:         1: EMJN9bBZT67PwIIuvSKJK8Xxsrs.roa (hash: oV1x4YeyA8lLvR3fTiEzdHY2tbrtoIOg1/0TqXVKXwg=)
                          2: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: /ZS2X81B9JohDlyW3uYJlpeoiYS1P3UKqX8O3fNT1o4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:91:aa:74:95:9b:af:9b:90:16:19:b9:e1:ab:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
        Validity
            Not Before: Jun 15 17:01:13 2024 GMT
            Not After : Jun 16 17:01:13 2024 GMT
        Subject: CN=a28f04ad47c1e3c343ca878008c574eff8cdc44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e1:38:f8:a3:61:78:1f:a0:1d:a3:51:53:5b:
                    19:84:70:0f:13:9e:93:18:61:f4:e4:1b:67:2d:e9:
                    24:8b:4d:21:d4:cf:21:e1:ca:55:aa:9a:2f:f9:53:
                    a1:5f:30:1b:91:8a:cc:a7:8f:40:08:65:9b:90:9e:
                    be:ae:2e:95:94:fb:27:2f:c9:50:6c:9f:ef:93:af:
                    fe:fc:33:a0:3d:4f:02:c2:54:ba:08:1e:3f:7e:38:
                    e0:7e:f3:15:7a:d3:48:44:3c:0a:60:8d:e7:65:fa:
                    b0:d0:0a:ee:83:cf:71:a9:ff:c4:07:86:8a:50:b3:
                    b7:8a:69:de:24:5a:37:94:0d:c9:db:cd:00:6e:7b:
                    a1:56:de:23:8e:aa:4b:8f:0e:e8:7f:f7:77:d5:7e:
                    8c:16:a3:a3:5f:83:ec:50:eb:ee:fe:9f:9c:94:33:
                    07:6f:79:b5:77:ff:a4:83:2b:51:ea:92:b3:1b:56:
                    16:df:d6:42:55:d6:26:0b:c6:d0:78:42:7b:f2:3a:
                    32:17:3f:70:a1:f0:4d:07:3b:24:b0:04:e9:d3:3b:
                    93:d9:eb:e8:62:49:b7:88:d1:65:00:15:0d:84:74:
                    81:d9:9a:17:d1:be:36:59:b8:ea:49:41:69:4b:91:
                    3b:4c:7a:43:b8:28:69:10:df:df:bf:11:7a:a4:4e:
                    c6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8F:04:AD:47:C1:E3:C3:43:CA:87:80:08:C5:74:EF:F8:CD:C4:4D
            X509v3 Authority Key Identifier:
                keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3f:d9:87:9d:22:a9:d4:8b:3c:15:bb:29:75:d6:f4:07:96:
         01:6c:e2:df:7b:80:74:63:e9:9d:b9:f6:fc:4a:47:39:0b:67:
         85:86:52:b7:1b:7a:ff:dd:04:cb:f0:7b:fd:e5:a3:1b:49:4c:
         d3:35:06:f3:63:87:35:99:b6:2a:f3:2a:15:80:f0:1b:49:eb:
         82:de:44:93:49:38:ea:5a:42:d1:6b:29:d1:17:87:1d:c9:c5:
         9c:1d:16:ad:6e:f2:d4:e4:35:23:b1:56:ea:b3:b6:7d:d5:0d:
         0a:7c:89:29:c5:43:bb:b9:bc:23:60:2c:cf:b4:25:ba:3f:59:
         9c:b5:c0:b8:32:47:23:0a:27:77:49:9e:7e:9d:c6:e8:c3:28:
         92:ce:03:ee:9e:ba:c5:d9:6e:96:4f:5a:cb:72:4e:64:cc:7b:
         91:ee:1b:9d:11:80:c8:03:f6:aa:62:c3:f0:30:ca:34:69:cd:
         35:6e:bb:3c:0e:62:87:4f:71:2d:02:0d:fd:9f:46:46:0c:dd:
         d1:f9:26:95:b0:bd:67:96:2e:c4:fd:1b:7c:c5:e4:78:b2:d7:
         28:4e:2b:5e:94:eb:16:0b:a3:84:45:8e:07:8e:5d:f2:0d:b1:
         44:3f:9a:94:73:5e:15:88:1c:96:63:37:02:49:dc:f0:c2:44:
         a1:2f:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:16:30 2024 by rpki-client on console-ams.rpki-client.org