Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
File:                     2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json)
Hash identifier:          fR3UIv6ewC50OtfVd48oMfN0pQhCRqANDmq2CPnjNZY=
Subject key identifier:   30:03:9B:AE:A5:02:6B:9D:C6:C5:D9:72:49:F7:4F:6B:6E:1F:12:16
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Certificate issuer:       /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial:       019044F872C43C4ABB600E00AD589419EC46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
Manifest number:          11E0
Signing time:             Sun 23 Jun 2024 12:00:51 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:51 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:51 +0000
Files and hashes:         1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: rkvtDgJIb1lmoVE3deuimENxUv05/JLlDOTThLqZH8A=)
                          2: DTmiPPiU2WHwcNqn_Z7oV3XIarY.roa (hash: frsu4m4kMvx1QWuEX2tzbpyDc+A1k9++EJWLIKs+iBw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:72:c4:3c:4a:bb:60:0e:00:ad:58:94:19:ec:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
        Validity
            Not Before: Jun 23 12:00:51 2024 GMT
            Not After : Jun 24 12:00:51 2024 GMT
        Subject: CN=30039baea5026b9dc6c5d97249f74f6b6e1f1216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cb:56:ed:0a:bf:3d:69:28:2d:81:6d:a1:14:
                    ac:d5:7f:a3:6e:08:1a:c2:da:e1:22:ab:96:8a:6a:
                    f8:17:87:9f:4b:b2:11:32:dc:04:73:b7:13:23:c1:
                    d6:46:c1:d8:1e:9d:e5:63:11:b4:b5:46:17:f6:48:
                    71:17:f8:a5:7d:e6:ee:9e:4b:6f:a4:f3:61:51:d5:
                    d0:5c:a1:60:37:bf:24:61:d7:83:4d:91:61:f3:2c:
                    d7:20:c7:0e:f0:c8:20:90:11:d5:ec:0e:3b:98:d5:
                    c3:53:01:f8:87:8d:22:74:89:16:c2:69:43:35:08:
                    72:f5:92:43:4b:c0:f5:48:af:f2:99:2b:ce:f0:ea:
                    22:b9:ff:29:93:9d:a3:b8:b5:65:26:8f:22:05:90:
                    b2:31:52:f9:46:80:98:83:06:38:a7:30:65:79:b6:
                    5c:0e:ef:f8:2c:0e:0a:13:0f:c6:42:fc:92:85:a2:
                    f4:cd:02:69:b9:78:b2:f1:00:6c:a7:b8:66:80:b7:
                    d9:91:cd:7e:e4:25:7e:3e:40:3c:06:91:14:25:41:
                    ea:be:9a:47:85:f6:7a:32:a0:29:37:34:8d:71:11:
                    6b:96:e5:f3:c8:2e:c4:9f:6f:f5:a5:fb:1c:3e:ba:
                    17:83:89:8e:4f:cb:c3:26:ec:95:8d:c6:4f:13:08:
                    0b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:9B:AE:A5:02:6B:9D:C6:C5:D9:72:49:F7:4F:6B:6E:1F:12:16
            X509v3 Authority Key Identifier:
                keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:11:ac:1c:3d:03:48:19:ad:9b:0d:4f:d7:96:1d:f0:3e:77:
         5b:de:23:be:96:b4:5c:e9:cb:bc:bc:fc:25:20:21:63:90:a5:
         7a:e6:de:9e:2a:53:61:0e:d9:32:f9:0c:78:59:f0:30:4d:39:
         75:0d:54:ac:bf:07:03:e2:c8:7a:f0:39:b5:b6:8a:8c:97:81:
         b7:f5:d8:fd:e3:c1:98:7a:50:a7:88:aa:ef:c0:f4:2c:03:6f:
         03:3c:b9:1e:85:c4:5e:ef:fa:2d:a9:55:c1:de:35:f6:db:3b:
         db:01:d2:a1:2d:da:bc:5b:b9:e7:97:73:84:5a:31:97:46:c7:
         52:a4:5d:68:53:ce:43:fb:d7:ca:7c:70:f6:16:d7:4f:3c:03:
         1d:ef:d1:8d:6b:26:50:ad:a0:f1:4f:ce:36:48:5d:3b:62:65:
         6a:e4:40:cb:69:bb:ae:31:5a:20:51:ac:ae:26:91:79:29:8e:
         0e:05:bc:1e:b7:73:fb:fa:2e:f9:a4:eb:cf:b5:06:f4:25:ca:
         5e:5f:f2:d7:93:bf:b9:8c:24:4d:13:d1:0f:1f:a7:00:41:5e:
         92:62:b7:24:e8:d7:b1:4a:f6:1a:3d:c6:39:b5:99:22:f4:5f:
         9a:e8:53:7a:31:de:b0:d8:9b:f4:2e:6c:3c:9e:db:22:90:da:
         fc:4b:4c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:58:26 2024 by rpki-client on console-ams.rpki-client.org