Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File:                     HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier:          nkdM14ws7E8Lb5bwa6fWavlixNT03W0ddGptXLi/6eA=
Subject key identifier:   09:E9:D6:98:63:50:B2:6F:41:97:3B:16:B2:52:8F:91:77:D0:ED:55
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer:       /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial:       01901DEBAB03A7E8644CF78803BD6D197C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:01:42 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:42 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:42 +0000
Files and hashes:         1: 1-2WZU3fbhWcuNeWH1w1_U26ixEw.roa (hash: 60Jn8ofi9AncaegXM55YgiP31eQA55X662iACKZgITQ=)
                          2: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: O0SwplZB1US8PclvnXkaZCIbg721A9jUfzyKxG7a1aY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:ab:03:a7:e8:64:4c:f7:88:03:bd:6d:19:7c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
        Validity
            Not Before: Jun 15 22:01:42 2024 GMT
            Not After : Jun 16 22:01:42 2024 GMT
        Subject: CN=09e9d6986350b26f41973b16b2528f9177d0ed55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:a4:87:23:cb:ef:da:22:89:99:7b:44:2b:
                    df:2f:fa:c5:b5:20:1e:c6:de:a3:e6:3b:d0:ce:24:
                    4b:0b:26:0a:fe:d1:31:20:9b:1c:55:47:8f:29:b1:
                    c2:82:25:0f:02:61:23:18:3e:c7:32:7f:68:40:04:
                    7e:d8:73:f6:db:ff:50:32:00:77:a1:71:76:0d:a8:
                    d3:2a:9f:cd:e6:d9:21:8d:7c:0e:68:a5:8c:85:a3:
                    49:05:7e:2d:79:99:6d:ad:84:eb:7c:bc:b5:b1:fa:
                    d8:da:79:d0:ea:42:08:05:5e:47:f1:e4:84:43:fc:
                    7f:2b:13:a1:2c:e5:1b:cf:22:ed:10:9e:dd:c8:f2:
                    1a:78:86:bc:6b:22:ba:74:2f:3b:d0:07:c5:bd:95:
                    72:38:02:3a:4a:e9:38:d8:4f:aa:2b:84:2d:d3:f1:
                    93:50:20:5d:6b:8c:13:8c:64:e1:32:10:ee:e9:3e:
                    bd:e3:95:af:a1:41:8d:bc:c5:88:be:7a:42:a6:63:
                    07:71:cb:70:30:fa:27:ca:2e:36:73:06:ff:13:ca:
                    88:45:7e:a6:e6:0b:e6:1d:7d:36:ea:57:33:74:de:
                    d9:38:07:4c:b7:54:27:ad:4f:b0:33:82:27:79:5e:
                    7e:0d:13:4d:8e:7f:be:e2:b5:98:05:76:9d:37:37:
                    33:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E9:D6:98:63:50:B2:6F:41:97:3B:16:B2:52:8F:91:77:D0:ED:55
            X509v3 Authority Key Identifier:
                keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:06:27:08:f5:f6:01:d2:f9:28:98:94:08:09:87:ae:1d:06:
         cb:86:77:6d:ec:dd:cc:b0:9c:a8:18:9d:99:1c:7d:54:aa:9a:
         90:92:fb:85:87:50:1c:85:97:da:9a:8f:5f:7b:0a:46:a2:40:
         22:2f:93:fe:de:fd:13:6d:09:3d:18:34:41:40:47:fd:4c:d7:
         47:f5:46:d3:a0:5c:62:b7:62:91:90:5f:8c:4b:c2:1d:19:ac:
         ca:96:a3:d1:b4:c6:61:d4:b2:9b:fd:ed:ad:90:2f:18:7c:6b:
         8c:3b:16:02:0e:63:90:a9:75:2a:63:84:55:32:18:29:f9:81:
         02:30:f7:b9:39:09:2a:54:ea:8f:fd:cc:12:df:9f:a8:5d:00:
         7c:13:a5:e3:90:0f:fc:92:3c:69:bd:80:f2:79:a2:f4:b7:20:
         71:27:07:ba:ff:74:e7:4c:5f:55:12:74:a2:dd:85:90:eb:ae:
         46:21:d2:f6:85:a5:2e:a2:90:5b:4d:6f:3f:0d:d4:46:8f:18:
         41:12:73:42:b5:64:da:22:c3:dc:2c:87:ab:86:2a:02:7c:c6:
         ef:33:71:98:48:4d:f8:b0:8f:f0:e7:84:ca:92:ce:a8:78:13:
         54:6b:aa:48:a8:9a:e8:f0:d1:b8:82:89:eb:d2:7d:38:51:f3:
         b7:b1:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:05:44 2024 by rpki-client on console-ams.rpki-client.org