Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
File:                     CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json)
Hash identifier:          BKrD9qYgr+VVxEOH+bJAfG3mKJFLmo2W9AqCSWpFv5M=
Subject key identifier:   A7:69:B9:E4:5B:5B:9A:2C:83:2E:FE:39:2F:97:9C:30:74:1F:8F:94
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Certificate issuer:       /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial:       01901E8F7E5C18F22CEFBB0DFAD90637B463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 01:00:38 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:38 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:38 +0000
Files and hashes:         1: 0IDMGijA2mHs25og4Qe3XRz2VWk.roa (hash: QnTNxThbbNMNeSHruvEOPciVREXFye3i5JvrmQWiCpI=)
                          2: 0rIrMXMh37xcUhUrrGQ91dOpdCU.roa (hash: +sKNNcmm4irnwP0lKbHwGcEqI5C7cv32RozayTClmj8=)
                          3: 6Y2p32yEpoumy9czEC_atV_jpwg.roa (hash: o13SOdb7f+dtM+e1ffaGMXvs8tR6Mkt+CUQwYfhSC+E=)
                          4: APf-C-jpbEODqhNVaDUbPbopHdU.roa (hash: Q3jHPVVPrkr2BsBIlj7CX900hVNTBVJ1EBCbK6ID+pE=)
                          5: CHO8vqYhRbnIgCpKvlhHJ3x3jE0.roa (hash: hCsjpnZAY6b4J5ENViGyb3IEvlRYLE3u94JILaVey44=)
                          6: CfPD2Ywe52SwwYIKigoFO4bkGqI.roa (hash: Lgv9brbbWb+EXuaGn/gL5ezQANJVuMnXmFWwfvw/Egs=)
                          7: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: 18ZXmtaLpkk5wQJZdDl7Nbu4GDtE3OkWf9sqP6EmTo4=)
                          8: U-oC6f9ImQxX8lCdCCMzcMkvZvw.roa (hash: PXs5eOl/iiqTDJulz/y7Eaf15yF3ArjOHEF5+Djqcqg=)
                          9: V3NmOzfzBSIWdnmQArs4ibM5_0s.roa (hash: dd0bVDwlNTy4OYSLDDUrO/C9cP4mUDCqni1H7migrY4=)
                          10: sRMhEW0dD1HTVmNX5BI1R-xwQZA.roa (hash: weA9cq7xtqRgVZKqI3pg16TzmzLLN4ubF0AtYTO4Fho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:7e:5c:18:f2:2c:ef:bb:0d:fa:d9:06:37:b4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
        Validity
            Not Before: Jun 16 01:00:38 2024 GMT
            Not After : Jun 17 01:00:38 2024 GMT
        Subject: CN=a769b9e45b5b9a2c832efe392f979c30741f8f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:23:a2:d2:cf:14:78:5a:0c:97:a6:3f:ba:
                    97:07:20:33:f5:bf:8c:53:d2:77:3f:96:0c:c7:03:
                    a9:9a:9a:78:2b:dc:23:42:fc:73:6e:e3:45:e8:7b:
                    b4:67:78:b4:c3:57:1d:b3:61:62:e0:76:55:37:2b:
                    17:52:1b:e6:2b:8b:a1:d7:a2:31:58:5c:82:6c:9a:
                    c1:3f:55:99:fb:5d:fc:3f:04:d7:11:e5:2d:b1:ed:
                    43:9a:a2:21:38:ae:52:64:c4:d3:ca:49:dd:d6:db:
                    cf:e0:df:c7:8a:17:ad:9b:27:c3:f4:39:2b:26:ff:
                    d3:6a:bb:ce:e3:fd:fc:b8:5f:43:3f:00:af:fb:6a:
                    f8:32:45:dc:c5:77:51:0c:aa:56:a6:96:f3:c0:4a:
                    e0:b5:20:4b:46:bc:ce:7d:8d:71:87:9b:a7:d1:4b:
                    fd:a4:d3:20:87:35:b8:c0:af:42:23:6e:b6:cd:8e:
                    ff:9c:89:09:3d:5d:9a:25:b2:fb:56:23:71:e8:42:
                    4e:8c:37:3b:2d:3a:8f:1b:f7:10:f0:8c:17:a3:7f:
                    78:d6:e9:85:f8:c2:63:48:02:f5:34:09:e3:61:90:
                    1d:4f:70:ea:32:f9:d8:76:d4:f3:d9:3f:bc:8d:ae:
                    59:2a:36:72:85:a5:dc:22:8b:e2:71:ed:a4:4b:27:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:69:B9:E4:5B:5B:9A:2C:83:2E:FE:39:2F:97:9C:30:74:1F:8F:94
            X509v3 Authority Key Identifier:
                keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e2:1b:52:4f:86:95:e0:e3:d3:90:dd:bf:06:a5:3c:7f:12:
         ba:06:2c:72:5c:45:92:7f:a3:fb:76:89:29:0e:a3:30:9a:fa:
         4a:8d:2a:ae:4d:dd:05:0e:ad:57:88:be:bf:d7:80:8c:dc:bb:
         ba:84:c8:d5:8c:1a:af:02:ff:ba:c5:ac:9f:b9:cc:05:6f:46:
         dc:96:33:7d:d7:63:4c:9a:bf:5c:1b:23:65:72:97:16:2a:d1:
         d5:7b:50:ae:91:4f:4b:d8:cf:e2:bf:9d:f6:81:06:2c:74:83:
         42:f2:11:bc:d1:d7:29:d7:c1:34:b8:67:ce:3d:ac:fd:8b:ca:
         e2:ca:2e:e0:92:9a:6d:2a:f8:fe:12:64:93:6f:c7:33:cd:2c:
         f5:ac:41:bf:d9:ab:00:ab:e2:c4:7d:44:41:63:58:e1:d3:32:
         96:f6:5a:28:5a:30:44:20:51:97:0e:0d:05:cf:02:bc:6e:13:
         76:76:78:bb:ab:e2:32:2c:31:ae:17:ec:ad:7e:0d:55:ba:f1:
         c4:1d:ca:b8:f4:93:14:39:bc:35:f9:6c:da:a9:bf:62:77:13:
         e5:39:60:b1:21:e5:51:3b:83:a3:d6:02:11:4c:bd:4d:9e:9c:
         bd:ff:f6:53:dc:4e:dd:ef:e4:d8:87:8f:0a:37:b8:c4:4f:3e:
         c3:d2:70:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:14:41 2024 by rpki-client on console-ams.rpki-client.org