Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File:                     xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier:          GE/TbNrWViDrsozo/DJvPUss8pdUA0CiYIdq/iOXmwM=
Subject key identifier:   08:FD:A0:56:AF:A7:D6:3D:EA:80:B9:14:99:16:0F:73:D3:AE:03:BC
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer:       /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial:       01901D0F7B3D8E720219D82BB12BF8DF4033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number:          11C9
Signing time:             Sat 15 Jun 2024 18:01:11 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:11 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:11 +0000
Files and hashes:         1: jlejG3jO_CJz0zanFnKFjCx_xDk.roa (hash: Nmj8gDotfzDwKGgYTC+6Nx+zUWTsFgf8qvo24v+paEk=)
                          2: n9GxiV-GozGmqC4P3JY20N1-jS8.roa (hash: KuRvJ6t+7RhxKbGqWgmPx8sd1SEQ/Tf/uCdlKANKWqY=)
                          3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: SyIDMofuKA8Dnmnh1b8pucWL5INGWe79slhm2cbKCsc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:7b:3d:8e:72:02:19:d8:2b:b1:2b:f8:df:40:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
        Validity
            Not Before: Jun 15 18:01:11 2024 GMT
            Not After : Jun 16 18:01:11 2024 GMT
        Subject: CN=08fda056afa7d63dea80b91499160f73d3ae03bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:6b:3f:a4:b7:bd:6d:10:f6:47:36:9d:cc:
                    b9:74:c2:d5:de:86:bf:d6:59:22:46:d8:b5:06:fe:
                    57:20:80:33:1c:bc:b0:4f:7c:01:27:3c:d5:dd:62:
                    0d:77:94:dd:fc:2e:08:31:cc:32:5a:e6:32:aa:a7:
                    46:2d:5b:9c:8a:2e:1a:35:bf:89:50:4c:58:b4:24:
                    d1:b0:65:b6:8e:68:35:f1:cc:0e:54:f4:62:bc:73:
                    42:c5:d4:f7:ee:22:fd:57:99:3b:85:14:c6:15:08:
                    34:c5:a5:72:26:f7:45:fe:5d:bd:cc:ac:94:27:c0:
                    35:ff:d6:a0:ef:d7:60:f1:5e:68:d7:63:ad:bb:e7:
                    a3:33:70:35:cd:0c:00:82:eb:46:d8:97:40:38:f8:
                    94:fb:f2:9c:93:a2:7a:ff:87:be:f0:03:e9:f2:16:
                    8d:1e:18:c8:00:88:87:9b:fc:a8:1e:cf:2e:43:0f:
                    c1:40:ef:2f:b0:94:88:35:ca:98:c4:3f:e9:a3:19:
                    20:9d:3e:67:89:bd:6f:4b:4b:f2:50:a8:c5:cc:d9:
                    53:59:dc:08:33:33:13:33:17:92:7e:77:b3:7e:8b:
                    cc:47:02:67:f4:56:5d:04:53:96:17:87:44:38:76:
                    bb:16:8b:6e:e2:aa:87:8b:2e:bd:63:10:eb:5c:0e:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FD:A0:56:AF:A7:D6:3D:EA:80:B9:14:99:16:0F:73:D3:AE:03:BC
            X509v3 Authority Key Identifier:
                keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:77:17:be:3e:aa:2d:45:7d:bd:83:fe:24:52:6e:14:d6:f5:
         f5:bf:99:bf:26:4a:a2:93:ac:68:8f:1d:5c:ec:93:a8:6f:b6:
         a9:09:48:d4:bd:ec:4c:07:5c:76:2a:52:5f:09:ad:b1:ee:a2:
         89:38:e9:02:88:59:87:4f:6a:1d:fb:f3:08:9d:f0:63:1f:55:
         a4:c8:be:76:d0:ed:4b:a8:94:81:bd:1f:c9:a6:1a:db:82:a5:
         2b:a6:70:88:55:c8:c8:db:59:32:05:69:84:79:df:fc:69:18:
         af:fb:c9:01:13:54:3a:fe:08:54:88:18:91:af:4c:55:80:db:
         7e:72:52:07:da:3f:39:3f:2e:0a:bd:b6:88:a6:38:da:9d:a6:
         b3:7d:0f:8f:2e:99:6e:74:14:47:95:54:22:44:3a:d0:d2:98:
         32:67:27:6d:62:5e:b8:c4:3e:51:a3:96:81:d5:a9:8b:81:47:
         53:bc:77:f4:34:53:68:3d:7d:4b:f4:a9:d1:0b:d1:87:b5:7c:
         92:73:b8:33:b0:ea:43:07:0e:0c:e1:0d:cf:db:89:58:bb:44:
         bc:32:c5:df:e3:45:63:80:3a:02:61:ea:c8:bd:99:08:22:59:
         7e:0f:d0:04:8b:81:92:01:5f:e5:86:e9:c1:a9:9e:17:b2:c9:
         4d:73:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:01:25 2024 by rpki-client on console-fra.rpki-client.org