Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File:                     b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier:          VU8KXC7rp0ihPZfVFnt/qE/6C2qREZX4ZU3/qHjpQ1U=
Subject key identifier:   B7:D9:DA:DE:8E:E7:0B:80:B5:82:59:37:B2:61:F9:0A:44:FA:00:2F
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer:       /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial:       019037E1EB8EB94A0E84025D777FB0F537B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number:          11D3
Signing time:             Thu 20 Jun 2024 23:01:11 +0000
Manifest this update:     Thu 20 Jun 2024 23:01:11 +0000
Manifest next update:     Fri 21 Jun 2024 23:01:11 +0000
Files and hashes:         1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: jpo2tfqHLOrjjJcv9GAxgCSiW6pE1WSONuzdReLkUVA=)
                          2: uUWSm5VxIwXwseXJJkBBLZ0GkMw.roa (hash: FkccSqUaO8smuB5t646UhJjUwLBCtf8lDYPB4qzL2b0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 23:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:e1:eb:8e:b9:4a:0e:84:02:5d:77:7f:b0:f5:37:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
        Validity
            Not Before: Jun 20 23:01:11 2024 GMT
            Not After : Jun 21 23:01:11 2024 GMT
        Subject: CN=b7d9dade8ee70b80b5825937b261f90a44fa002f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:42:de:00:39:55:26:fe:c3:75:ac:48:f2:
                    c6:a9:02:3f:ec:2b:da:4e:14:91:69:8e:68:98:e8:
                    aa:64:ef:46:f6:c0:9d:62:14:0b:de:dc:57:19:9c:
                    9c:53:fd:71:e8:6d:c4:a9:65:c7:c5:3f:aa:f2:ed:
                    9c:4f:c6:c1:53:68:7d:45:5e:fa:22:52:ba:65:32:
                    3d:26:03:be:4b:60:42:10:47:11:31:86:07:96:a7:
                    6e:98:99:47:d1:0a:b8:0d:a3:1b:95:0b:c5:e3:f6:
                    e3:06:7e:0c:46:26:d4:99:74:09:e7:ed:84:ff:2c:
                    64:7c:ff:1d:68:0b:20:c3:29:29:7d:67:c2:07:71:
                    24:66:4d:3c:43:22:db:29:41:6d:84:66:05:4d:ea:
                    bf:1f:d9:3d:44:f6:5f:ed:90:94:58:27:ef:5c:fb:
                    32:ae:bf:47:c7:2c:0e:72:55:ee:ba:66:53:99:16:
                    83:02:43:45:66:30:08:e4:c9:1c:64:8f:50:49:eb:
                    bd:da:1b:33:57:dd:4a:2c:89:cf:b9:30:12:e2:80:
                    08:f3:cc:9b:a0:11:9a:81:04:e6:25:a9:de:9c:12:
                    0b:4d:e3:4c:d8:ee:7a:77:08:81:42:ef:72:f0:89:
                    3f:d5:59:9b:4c:f3:c4:11:dd:1a:3c:2b:97:7c:65:
                    99:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:DA:DE:8E:E7:0B:80:B5:82:59:37:B2:61:F9:0A:44:FA:00:2F
            X509v3 Authority Key Identifier:
                keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:c5:3d:b9:a1:a3:7f:17:67:6c:ae:b2:5f:65:d9:d7:f7:
         34:3c:e0:6f:e1:c0:04:43:13:79:b4:3b:ad:cb:50:5a:25:a4:
         64:dd:77:2f:ac:d7:fc:dd:5b:f0:2e:95:61:35:80:c7:19:06:
         fd:0f:21:f0:e3:c9:75:6c:63:81:6e:66:5d:9b:0a:5b:f0:f3:
         e6:e3:fa:81:18:ae:11:52:88:9f:19:6c:f6:03:bd:b1:ae:ae:
         de:70:e3:63:aa:df:ce:fe:76:75:ec:6d:24:c6:b3:9e:29:cb:
         c9:f8:cd:0d:7a:10:fe:aa:95:4e:9e:80:50:02:49:22:dd:24:
         0c:ef:36:1c:5a:c9:f0:c2:0e:97:e7:ea:f6:f6:fa:b9:2a:eb:
         74:ac:d0:86:d2:d1:56:2b:13:c6:9b:53:f5:f5:71:a3:c5:ed:
         1c:0a:3e:15:3e:a0:bf:a8:6b:66:c5:2d:c3:4a:fd:69:4e:15:
         bf:98:01:ca:48:62:73:ca:d2:0c:35:b4:30:be:16:4c:b6:20:
         5a:54:70:6a:9f:7c:d1:81:de:3f:63:14:21:02:d9:47:5f:72:
         78:71:0c:2f:91:38:2e:a8:fd:15:ec:5e:07:37:09:2e:b5:65:
         46:b9:64:3e:d4:b7:81:a6:d2:7c:e7:f6:0e:68:34:1c:6c:62:
         51:2d:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:48:54 2024 by rpki-client on console-ams.rpki-client.org