Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
File:                     2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft (raw, json)
Hash identifier:          4v9ltJHqFthziBjqXuBpKyX3lafSPH+GD5cbgdkl8VQ=
Subject key identifier:   09:D3:12:AC:29:22:3F:F8:19:3F:2F:71:D4:B6:4E:E1:07:23:32:71
Authority key identifier: DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59
Certificate issuer:       /CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
Certificate serial:       01901D0F2D3C80661427E509B2F1113906C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
Manifest number:          0954
Signing time:             Sat 15 Jun 2024 18:00:52 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:52 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:52 +0000
Files and hashes:         1: 2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl (hash: dPQ5EFTnzPmrPZIw+1iB+70ztQuqZmFFX94FumJqoY0=)
                          2: _okLsSWcMbS96PXkiZ06tGdd-CM.roa (hash: 8PA7n6BjrsHCz67BujMVIT1+55lp0qo6wzbCDBy9pXY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:2d:3c:80:66:14:27:e5:09:b2:f1:11:39:06:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
        Validity
            Not Before: Jun 15 18:00:52 2024 GMT
            Not After : Jun 16 18:00:52 2024 GMT
        Subject: CN=09d312ac29223ff8193f2f71d4b64ee107233271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e3:bb:c4:cf:29:f4:af:2b:3e:03:41:6d:17:
                    1a:9e:32:e0:91:7a:03:fa:ee:41:fe:72:0d:4f:45:
                    16:4d:fc:84:01:cd:cd:7f:e2:38:40:ff:13:8e:6e:
                    7d:52:26:84:df:54:c2:6d:30:3e:2e:d8:3c:4d:4c:
                    44:f6:bb:7f:68:16:66:2a:f1:83:c5:60:60:40:b1:
                    e2:d0:dd:5a:77:c7:74:18:d6:86:32:ed:01:2d:db:
                    63:36:bc:67:a9:13:44:a6:61:6b:9d:ac:38:7b:88:
                    30:12:11:83:63:3d:61:59:f3:aa:e8:3f:00:e6:8c:
                    8d:e3:dc:d5:f9:de:16:71:75:fb:d6:5d:1d:27:c3:
                    20:4a:07:67:22:44:40:f6:2d:99:bd:f2:29:98:e8:
                    9c:f9:c7:13:45:45:78:92:fa:87:fa:9f:f9:cc:60:
                    5f:87:ec:64:8c:e9:51:50:bf:dc:e9:0e:84:2f:4e:
                    8b:e7:91:37:e9:d9:9c:7b:a5:00:e3:2b:7c:e4:b7:
                    91:6a:8d:82:d0:ee:0a:53:71:21:85:ce:2f:a9:d1:
                    c7:24:a0:23:0c:b4:51:4c:00:3b:d5:c2:b0:73:7a:
                    5d:7d:78:3b:66:dd:b9:4a:88:9b:a5:13:44:68:11:
                    74:b7:9d:4d:54:c9:37:1c:25:25:52:b6:bf:c7:d8:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D3:12:AC:29:22:3F:F8:19:3F:2F:71:D4:B6:4E:E1:07:23:32:71
            X509v3 Authority Key Identifier:
                keyid:DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ae:d6:4b:08:b4:4b:3e:66:9b:8d:b2:36:b4:ae:f3:32:31:
         53:7a:e7:cb:b5:c0:a4:3b:df:f8:b7:88:fc:66:2d:c8:4f:49:
         ac:5a:db:4e:3b:e9:6d:c1:14:22:34:f9:46:e7:21:77:8f:f7:
         78:57:5e:35:3e:ae:42:11:26:13:fd:47:34:76:50:d3:71:92:
         d1:83:6c:bd:54:9f:7e:c6:c5:a3:3e:a4:31:bb:f3:4a:c4:85:
         19:1b:c0:74:c4:a6:51:8b:60:ed:a9:89:52:54:fe:9d:8e:92:
         c7:d5:7a:c3:9a:2a:d1:3c:15:74:ca:4e:07:83:d3:80:47:be:
         4f:11:d2:98:47:f6:0d:af:82:c2:17:52:0f:4e:62:db:31:dc:
         1f:7e:76:3a:9e:8c:af:88:a8:37:4c:a0:d0:16:d9:1a:3c:6a:
         dc:ea:48:b7:1f:56:a8:08:78:b9:bb:b6:83:03:67:a7:a9:fb:
         2f:e9:65:75:32:07:6a:b2:c0:ba:85:8a:00:46:b8:ac:f0:05:
         75:76:bc:47:d3:9b:e6:23:a7:a4:e1:a7:86:2d:52:21:90:51:
         d2:67:eb:a6:17:b2:2f:8b:65:ab:38:07:11:9c:22:62:ab:af:
         15:55:73:7e:ad:d2:b3:07:d4:5a:dd:0d:d1:c8:58:2e:e7:df:
         9d:ef:14:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:23:16 2024 by rpki-client on console-ams.rpki-client.org