Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File:                     1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier:          zUq9DBXW+vggP9G4TKawkvhboxtjUX5Fxoi3BT3Gb6Q=
Subject key identifier:   02:46:BA:90:3A:C5:D3:D1:5D:2F:02:6E:53:DD:EB:07:1E:C3:74:EB
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer:       /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial:       01901EC679ABC7E1A3238F0B37D116B49D08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number:          0BE3
Signing time:             Sun 16 Jun 2024 02:00:42 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:42 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:42 +0000
Files and hashes:         1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: 0Oi/UfKhg0Sq+U0XsYqswR0xecPeP7jXOf7RIiQ3Zsw=)
                          2: UzHt5wWZJyfglmoovwxftAIEOm4.roa (hash: F5n2TvY5m9QoVL+cZ5B2W01lG7C3mfIueufndhem/dQ=)
                          3: vGbYlGIt_XXaoe5X6XTVTvIpakw.roa (hash: 4RC8iWcfJ/EVAuZJ3bbzKqs9z9k+hjqzNdm9Hn2TIEY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:79:ab:c7:e1:a3:23:8f:0b:37:d1:16:b4:9d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
        Validity
            Not Before: Jun 16 02:00:42 2024 GMT
            Not After : Jun 17 02:00:42 2024 GMT
        Subject: CN=0246ba903ac5d3d15d2f026e53ddeb071ec374eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6e:56:d3:48:01:27:59:6e:0f:6a:79:3c:d7:
                    9d:5d:ae:e2:fc:4a:a1:3a:95:a3:44:c3:4a:fa:d9:
                    53:31:2f:5c:1a:20:3a:27:45:df:ea:1b:aa:9d:05:
                    68:0a:dd:da:37:6a:a4:1c:20:ac:22:9c:47:87:d9:
                    8c:68:65:c7:9f:ed:25:b6:36:21:fe:06:81:a3:61:
                    3d:d5:f8:84:19:a3:c0:22:34:76:5e:9d:7b:4f:96:
                    f1:e7:a7:06:cd:d0:e4:91:a1:1c:f8:42:7b:e2:e1:
                    43:e0:dd:c4:f4:5f:83:a5:8d:8d:5e:65:21:9e:98:
                    a6:7d:d9:55:51:8a:4d:92:57:b0:71:19:89:51:30:
                    6d:ea:10:c6:c0:7d:67:e8:6e:ae:58:37:39:dd:b0:
                    c6:9f:22:1a:30:f4:52:f9:fe:f2:c3:09:2b:01:f2:
                    a8:cf:17:9d:e6:d1:62:96:90:41:4a:d5:8a:71:65:
                    33:71:cd:90:81:e6:c9:65:58:a9:2e:2c:42:94:cd:
                    60:fe:e0:d9:62:89:0b:65:eb:ac:28:44:48:ed:f3:
                    10:c1:ca:bc:28:cd:1c:85:f5:b0:73:07:0f:90:ad:
                    e0:f9:ff:56:18:00:2b:7a:c2:05:35:92:94:af:7c:
                    e3:c2:fb:c3:2f:19:3e:34:49:86:4d:84:bc:8e:b1:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:46:BA:90:3A:C5:D3:D1:5D:2F:02:6E:53:DD:EB:07:1E:C3:74:EB
            X509v3 Authority Key Identifier:
                keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ac:6e:82:8b:bd:6f:a8:8e:a4:18:82:26:51:15:a4:a3:67:
         98:9e:40:23:e4:91:a6:a5:d2:42:b4:33:42:b5:7b:80:59:a8:
         d4:1a:9d:cd:2f:c6:e7:25:30:2f:60:0e:a0:8c:09:c4:dd:15:
         cb:d7:9b:cc:25:38:f0:7c:2b:01:d4:3c:b6:5c:d2:b5:b5:26:
         cb:d4:3d:80:97:01:e9:b2:89:14:d7:ff:9e:df:c9:f5:e0:3d:
         a1:72:09:c5:e4:8f:9f:9e:34:fb:63:3a:47:87:8b:8f:3a:b5:
         42:11:2a:d6:e6:56:85:57:81:8c:19:02:31:5c:0f:b7:29:fc:
         16:1d:e5:f9:bf:34:90:cd:f4:32:b4:ad:ea:6a:18:84:75:15:
         31:29:a4:df:e4:b3:98:9f:7f:c8:04:36:9e:c4:c3:e0:af:9d:
         5b:b4:bf:80:8e:77:63:34:54:8a:2c:7a:0f:3e:01:29:c6:a1:
         71:3d:97:77:75:02:b3:bf:72:9b:0d:ae:3b:65:fe:94:55:63:
         c1:70:d6:b8:da:de:4d:db:84:2f:89:6f:5c:a4:4b:42:7f:95:
         2f:27:5f:06:b9:3e:5f:fc:72:e2:85:23:be:b3:02:24:ac:b2:
         f3:0a:ec:21:6b:6b:58:11:da:43:e4:94:06:4e:f1:fd:5c:fb:
         b8:a1:d0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:05:32 2024 by rpki-client on console-ams.rpki-client.org