Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File:                     b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier:          Et5IxPXWnHYnAUnbYjT0c1AsbzcDvEHNFQhZiWr0KJQ=
Subject key identifier:   8B:30:E4:9A:4E:58:D8:D5:17:B4:7A:3A:D7:4F:B9:4F:41:AA:F1:5A
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer:       /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial:       01901EC70F5F6EA120BF83D60F2670A1FE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number:          11D4
Signing time:             Sun 16 Jun 2024 02:01:20 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:20 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:20 +0000
Files and hashes:         1: 0IRXch5xrrymMlZRrLL9p8N1T8s.roa (hash: XwUArmz80Z2+gw5eaoBDvNOJyGQpQlf8BxfeRsllcgw=)
                          2: 0IeTzmJpmWKZc6xvxa4RlAmm0rI.roa (hash: exXD7RfrRpSX/Uur6huQ59W/6TI/6ineX+S84OjGr/k=)
                          3: IgzCQvY9BfdX_PNz7GdTvDXaAQM.roa (hash: QQ1tAF1gXPo11EWRq9Ik/x7mxCepKz+Xw2RUEEvVRDw=)
                          4: JxN8aFVykcA-39CGItS6YlnUJ5o.roa (hash: m2bFYD3CJSZqj8xisMrB71iYAunnSfsJx/hUNW1cUjY=)
                          5: YqbCfbjfBbQY7aiSewNCscdQdgY.roa (hash: Y+/2NfmHz0hITKTKf7ajHO278OF3qroahj/vgxfDBAw=)
                          6: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: fjvL8N6keuVMVsuA4o5cJfoxEshUZ9RX23i5m8DO9Hs=)
                          7: x4PnlupFTtlXun3V7bBaO7KWIGM.roa (hash: pm0pdKJVpq+6BkbabE1HetYHidWqEqctUcgBNhXrjKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:0f:5f:6e:a1:20:bf:83:d6:0f:26:70:a1:fe:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
        Validity
            Not Before: Jun 16 02:01:20 2024 GMT
            Not After : Jun 17 02:01:20 2024 GMT
        Subject: CN=8b30e49a4e58d8d517b47a3ad74fb94f41aaf15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:16:0e:e1:21:9d:63:6f:52:05:ce:8a:87:
                    96:8b:ca:12:c2:db:d2:eb:76:6f:b2:75:84:1d:1c:
                    3e:b3:28:3e:75:57:b0:e2:25:10:c3:07:9a:0d:9c:
                    cf:d3:58:f3:7e:02:32:2f:b0:73:15:9b:7e:2a:5f:
                    0a:f9:ca:9f:01:07:4a:e7:00:11:03:20:4a:dd:53:
                    f9:9a:b1:75:83:b5:8e:54:38:5e:94:09:f8:ac:c9:
                    74:23:ed:f9:07:66:08:3b:10:86:e2:de:15:5b:7a:
                    26:fd:7d:9f:f3:53:f5:cb:e3:26:ec:68:25:76:3c:
                    fc:d9:08:3c:56:d4:f7:b3:64:6f:82:4e:35:bc:ed:
                    b3:ed:a7:15:88:5c:03:0a:b9:90:bc:f2:2b:0d:04:
                    5a:a4:33:d6:2c:2e:1a:ee:46:cf:60:f3:ea:93:0d:
                    e8:36:a5:d7:db:46:96:16:1a:7f:71:d3:47:11:9b:
                    7b:6b:06:72:32:c3:1f:b9:13:19:3e:ed:e4:9d:4b:
                    ab:01:74:1e:d0:5c:5b:f4:98:b8:aa:1b:e0:c8:81:
                    a9:aa:23:cc:b6:07:84:61:00:fc:aa:63:02:05:b2:
                    1d:80:aa:7c:20:32:48:59:63:b0:06:17:fd:70:38:
                    2c:ad:28:07:86:f8:46:58:bd:e2:e9:da:84:54:71:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:30:E4:9A:4E:58:D8:D5:17:B4:7A:3A:D7:4F:B9:4F:41:AA:F1:5A
            X509v3 Authority Key Identifier:
                keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:73:1b:39:e1:22:ce:04:87:f3:f2:cd:40:12:3f:94:9d:75:
         f2:43:7c:f1:e8:01:b4:7f:e1:90:4f:8d:6d:77:8c:40:b7:ae:
         97:13:a7:74:55:44:2e:9b:a1:6c:9a:6b:9b:91:3c:51:09:c2:
         b6:95:8d:b9:52:aa:e2:75:08:46:2f:7d:c1:4d:81:2d:4a:b5:
         1a:ea:a3:1e:2c:fe:91:6d:c8:9d:5f:4e:ed:44:49:92:a9:a0:
         a1:ad:ed:a9:46:4d:70:95:66:f8:20:67:ce:7a:ef:38:64:d9:
         0e:f6:f2:6d:21:c5:a2:14:07:e1:42:81:24:ab:f7:4f:2c:ff:
         96:e8:96:2f:1f:bf:48:3c:f6:8a:58:c9:6b:95:b9:4d:c7:f5:
         1e:15:be:37:32:1a:55:75:8d:72:54:0f:a1:6d:5e:91:77:45:
         c1:fb:88:73:60:8f:f8:a2:bf:76:4c:4d:97:37:1e:a2:0c:17:
         11:de:a7:8c:c6:70:61:3a:c3:ca:bd:cd:70:40:5f:7c:f7:fc:
         23:85:cb:fe:81:85:d8:7d:00:5b:7a:b5:33:ff:96:9c:76:05:
         e6:0c:99:b6:82:ee:f8:95:79:fa:e9:c0:41:cd:4a:78:8f:9a:
         29:b8:1c:bd:64:95:fc:be:8a:1c:f9:c2:e5:e2:d0:d2:30:0e:
         62:3b:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:13:17 2024 by rpki-client on console-ams.rpki-client.org