Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File:                     m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier:          T4cjn4Fv32wKmuLGYKL+0JPsrrZ0kbNrc2rg/jd/ZGk=
Subject key identifier:   18:93:77:EA:63:EB:61:EE:4B:62:07:46:F9:5B:1D:11:F6:F6:E5:D0
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer:       /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial:       01901C3354FCD9E34FE0A0DDBCDEDD1FD57A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 14:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 14:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 14:00:44 +0000
Files and hashes:         1: c0pbqffkEdx_ctpKHjp5uDrWReM.roa (hash: /kv5rRirbOvjRoV98oBr3JuMGbfxRsDIxAZmRNSQ3Ms=)
                          2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: 3g4Ad9VTxuzYvHbcHAY2QWmirhfyHZscpdywWmmXWso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:33:54:fc:d9:e3:4f:e0:a0:dd:bc:de:dd:1f:d5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
        Validity
            Not Before: Jun 15 14:00:44 2024 GMT
            Not After : Jun 16 14:00:44 2024 GMT
        Subject: CN=189377ea63eb61ee4b620746f95b1d11f6f6e5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:05:e2:98:17:f4:be:2a:24:87:7a:4c:16:
                    7e:b7:53:d5:af:8f:28:d9:d7:97:de:b3:84:e9:24:
                    7d:7d:0d:50:c5:92:31:6d:0f:9b:52:40:b0:19:68:
                    91:50:8a:46:1e:2e:e8:b5:15:e0:e1:ae:ec:98:a1:
                    64:bb:02:9c:64:84:85:5f:72:bb:32:4e:f7:9f:b0:
                    23:c1:c2:9b:87:0b:c1:d8:6b:41:7d:0c:e0:40:bd:
                    70:f7:8a:4e:85:53:43:bd:85:d6:b5:24:4f:6c:db:
                    50:a8:b0:9d:8a:9e:95:bc:8d:d9:c9:8d:ad:99:38:
                    41:87:c5:5d:d6:99:d8:f7:13:8b:d9:89:67:6c:a4:
                    4b:ef:e0:c8:a9:18:bd:fc:4a:6f:42:cb:7f:b1:56:
                    3d:5b:68:33:0e:62:7b:29:ba:32:67:e7:b8:ca:cf:
                    8d:e7:e2:b6:99:ca:e7:c5:b7:cf:1d:56:b5:2c:db:
                    b2:ec:a9:8e:2d:4b:1b:b6:54:ee:16:c9:98:56:58:
                    47:36:31:6a:b9:0a:11:52:57:24:3c:24:0e:4f:5e:
                    b3:2d:f0:f7:09:43:c7:0d:85:f2:7e:a8:6f:4e:14:
                    ce:a8:cb:3f:07:16:97:a2:0a:b0:f7:2c:7b:ed:bb:
                    c6:82:3e:4f:1c:7c:ae:56:d4:08:b9:5c:47:cf:ea:
                    11:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:93:77:EA:63:EB:61:EE:4B:62:07:46:F9:5B:1D:11:F6:F6:E5:D0
            X509v3 Authority Key Identifier:
                keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:68:66:8e:8c:af:45:29:cc:71:7d:04:91:d2:e3:4b:1e:7e:
         5f:73:6b:0b:d2:44:df:5d:39:f6:40:b4:87:c8:85:f0:43:64:
         d7:f9:94:df:5a:f0:d1:ae:f7:2c:e0:72:7b:19:c2:99:91:61:
         dc:3e:e1:81:28:5a:c8:0c:d0:c3:71:78:4d:8e:95:3c:5d:ed:
         07:35:21:df:6c:48:4c:b5:8c:dc:59:41:ef:96:ab:e0:96:22:
         4b:81:d4:90:e0:49:8e:0d:fe:30:5b:f2:e8:31:d8:fa:a3:44:
         32:c0:68:90:39:a6:d7:92:4a:41:62:f9:51:a2:84:fe:a9:e9:
         3a:cb:4f:c0:95:a8:77:88:4f:5d:b9:87:28:89:aa:62:8d:80:
         d5:1b:70:34:76:97:f2:5b:b8:ae:b8:a5:ac:b4:c2:8d:52:76:
         d1:1e:33:db:c9:0c:9e:6d:32:3e:74:79:be:c1:50:af:dc:18:
         94:54:07:61:91:db:03:c4:7c:23:14:db:5d:39:b4:9f:79:e6:
         d4:13:96:4c:52:3f:43:02:c8:68:fe:75:f4:f6:f2:b6:a6:6c:
         9f:ca:c5:bd:91:30:8e:02:6e:44:e8:c3:0a:c1:6f:d1:7b:9a:
         08:7e:35:cb:6e:51:fd:9a:c4:7b:65:02:bd:bd:28:0a:68:c4:
         50:b1:48:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:59:06 2024 by rpki-client on console-fra.rpki-client.org