Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File:                     kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier:          xhtpyh926pcq5T7gpCkmmv/cUpXT1bWsCI13Htbc1/w=
Subject key identifier:   D6:0D:7C:0B:E5:4F:31:7B:03:16:FE:19:8C:48:CB:F4:C2:B7:AE:11
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer:       /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial:       019040B0413D42233796499D6513D89EB27E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 16:03:31 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:31 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:31 +0000
Files and hashes:         1: KcZ5KvPQJwKERZVTZ---hUpk9jU.roa (hash: 5EqFIytwVbKkNt1jOIucWTD3axgMX3HNrJHzmLfmTbo=)
                          2: VeN8KkhM02kbRnECiUHiV1AWrno.roa (hash: LeA/ZN+HMCEOTjyBuZemkynOT1Z2kKvwuyTFKbJL4WQ=)
                          3: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: IrVSuDJC4ImZYJkaqhPHZUKkveyVDECFLVSXHq1cmlA=)
                          4: spGJRuWYPz3fOT-EivFH0mMG6oI.roa (hash: crD3ATpbJvLSv9Ow9XzfWphpa7HQaGKzvUuEc1Cl+nI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:41:3d:42:23:37:96:49:9d:65:13:d8:9e:b2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
        Validity
            Not Before: Jun 22 16:03:31 2024 GMT
            Not After : Jun 23 16:03:31 2024 GMT
        Subject: CN=d60d7c0be54f317b0316fe198c48cbf4c2b7ae11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:3f:78:7c:e4:56:e0:27:bf:61:5b:c0:19:
                    44:1c:7b:0f:28:a6:3f:d5:23:c5:d0:40:d2:21:51:
                    d5:f1:d3:ad:3f:01:f4:29:70:8c:e6:02:02:96:0c:
                    06:2d:41:e6:9a:61:4f:29:06:51:14:f3:15:bb:2a:
                    d0:a0:63:3a:89:73:2f:4c:6b:b7:1f:62:14:f4:0a:
                    39:c1:0f:24:42:aa:86:62:35:a0:56:4d:08:79:19:
                    c0:fc:84:1d:04:62:19:b2:cc:83:83:f8:69:bc:7f:
                    54:91:5d:2d:9f:e9:ac:dc:43:99:5a:2e:eb:24:26:
                    82:0e:18:44:2e:cd:bc:1a:dc:ae:97:3c:8c:9b:13:
                    af:ef:be:5e:5d:52:37:16:d4:c9:d5:9e:c7:ca:92:
                    6a:9b:13:70:6e:46:01:50:6f:cb:87:c7:c6:1a:09:
                    94:90:f6:cc:83:23:97:3d:61:b8:fb:62:d1:44:37:
                    61:97:9d:b0:c1:64:71:b5:6f:fa:55:82:19:5c:e0:
                    bc:66:1b:1c:49:d4:cc:63:df:9b:1f:fd:db:32:10:
                    5e:c4:83:15:92:42:4a:94:a7:25:35:6f:d2:55:31:
                    ab:a3:9a:d9:14:c3:a6:3f:df:a9:3b:f8:31:e1:5a:
                    fc:8a:0b:64:6c:6a:ae:1e:84:36:51:d2:f8:a2:43:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0D:7C:0B:E5:4F:31:7B:03:16:FE:19:8C:48:CB:F4:C2:B7:AE:11
            X509v3 Authority Key Identifier:
                keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:9a:1a:36:2a:2e:60:66:c3:f4:ec:c4:d4:43:b7:af:1c:
         cf:b8:9d:0f:0a:63:34:ba:25:bd:ac:cd:ab:61:14:f3:5d:7d:
         e9:ca:76:cd:54:e3:df:c8:93:ba:0a:e6:3b:08:a2:fc:e4:33:
         3f:2a:05:55:fc:58:52:07:86:2d:4a:c4:86:eb:62:9e:c4:6b:
         41:55:69:8d:6c:69:4e:be:f9:01:77:88:b7:1e:34:95:11:da:
         b0:05:8d:25:04:b4:4d:10:1a:17:f5:9a:d3:ad:bc:1a:ca:d8:
         c2:92:bd:a6:7d:dd:48:38:74:f0:5f:b3:e5:53:31:a5:a6:48:
         71:a5:cc:97:b3:56:69:42:82:37:83:68:a0:d3:e1:52:59:d4:
         49:b1:4a:82:79:55:48:51:47:45:c1:f6:c9:88:99:6b:00:ac:
         2a:25:e8:59:f4:ce:15:fe:04:b1:42:fb:e1:60:9a:f8:0d:25:
         02:3b:83:7b:2f:4d:af:fc:63:5f:ee:11:35:d4:5a:f2:fc:33:
         8c:ba:f9:67:b3:64:47:5a:08:b7:97:06:f1:14:cf:dd:53:fb:
         e6:ae:8f:7e:13:1e:b0:47:5f:e5:d5:a2:e0:03:04:ac:98:24:
         12:8b:d1:86:52:22:91:1f:e9:07:21:6a:31:75:e9:57:15:25:
         28:83:97:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 18:00:09 2024 by rpki-client on console-ams.rpki-client.org