Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File:                     m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier:          bq4touRwXUIi1Trb6z9FAHaVBWibDEumzZJVI6CEZbw=
Subject key identifier:   AE:5A:B4:2C:67:DF:13:32:62:81:13:72:1A:2E:6B:37:A3:DF:5A:D4
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer:       /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial:       019044F855CE5D9850DC7909E73274EF2AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number:          116C
Signing time:             Sun 23 Jun 2024 12:00:43 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:43 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:43 +0000
Files and hashes:         1: Qs_RiRNJiiWWWKRtTd0hw6YZwRU.roa (hash: wNebrkPaIOFXpD2DySn0pmwD36JI9WS8Wq8dkKCPit8=)
                          2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: Dl7Xak4d89mUNBl9GfO5ykA6EizkhFfrgsEmf8bKDcM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:55:ce:5d:98:50:dc:79:09:e7:32:74:ef:2a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
        Validity
            Not Before: Jun 23 12:00:43 2024 GMT
            Not After : Jun 24 12:00:43 2024 GMT
        Subject: CN=ae5ab42c67df1332628113721a2e6b37a3df5ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:9e:88:df:50:40:81:8a:92:5d:12:e2:a0:
                    79:b1:a5:72:bf:58:21:1e:dc:6f:7e:e2:6c:18:b4:
                    ba:ac:3b:38:85:a5:de:1c:80:29:ef:64:f1:8f:6f:
                    92:89:69:97:40:d3:62:89:75:03:3c:9d:9e:10:ba:
                    27:bc:a7:e0:f4:d4:df:5c:c2:95:09:19:46:58:e4:
                    e0:9a:27:31:16:6f:ee:35:2d:79:2c:98:6a:4f:82:
                    92:19:76:c5:07:0d:a2:9d:2a:23:5a:ef:d9:90:2d:
                    09:ef:03:c1:b5:95:87:05:e0:2d:22:fa:8c:8b:cc:
                    c5:d8:68:97:6c:28:52:13:0f:7f:69:cb:11:de:b1:
                    b4:73:32:69:1c:4e:48:19:16:ac:a2:19:f5:50:57:
                    d5:0b:9e:f3:da:3a:4d:0c:61:7d:51:39:fd:8d:fd:
                    9d:72:40:18:40:dd:92:4c:fe:ac:0d:7a:2f:0a:f9:
                    b0:e6:66:78:e6:1e:c3:cd:f9:0f:81:ca:68:71:f0:
                    2b:e7:53:cb:0a:64:8c:ce:82:b1:b5:eb:23:77:40:
                    77:74:23:90:94:99:eb:02:0b:46:09:1a:6b:b8:8d:
                    cd:96:74:d6:6d:9e:69:4a:c9:bf:05:47:a7:5f:d6:
                    f7:01:9e:16:e3:76:05:46:a5:26:e9:32:95:78:d6:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5A:B4:2C:67:DF:13:32:62:81:13:72:1A:2E:6B:37:A3:DF:5A:D4
            X509v3 Authority Key Identifier:
                keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:74:68:4a:0c:d1:aa:5c:7d:aa:05:d4:9a:a3:ef:0b:47:b0:
         c3:e3:75:96:a8:33:92:9a:c1:21:20:cb:ce:73:7d:9c:00:df:
         75:10:fb:cf:1f:d8:2d:e1:aa:a8:a0:fe:22:bb:7e:2e:ea:52:
         32:b9:0f:aa:97:51:62:31:b2:cc:1d:ef:3b:5b:84:53:d3:4a:
         9e:9a:fe:3a:74:07:c3:90:95:0a:c8:0a:60:56:83:26:fa:e7:
         eb:b5:35:3d:69:79:f6:f0:db:58:32:c9:c8:45:35:a0:c1:5f:
         e5:4a:4c:d3:32:4e:37:2a:e8:65:37:ae:68:d1:0f:dc:e1:93:
         25:fe:2b:e1:d5:48:d5:df:b8:3c:55:eb:27:74:38:e3:78:5d:
         18:91:28:cc:ed:33:f7:37:a2:6d:37:34:45:26:a2:13:d7:47:
         e3:89:6e:02:0d:a2:13:36:5e:27:b6:92:6d:15:59:71:ca:f3:
         c2:a7:4a:91:7e:38:eb:6d:85:74:82:91:4a:79:d2:a0:2c:62:
         1d:7a:f1:3f:46:53:5b:44:2a:a1:c0:8a:36:0e:9d:d7:05:0a:
         2e:0f:23:b5:12:f7:01:f0:66:54:45:e3:3d:d7:2a:d0:b5:13:
         23:61:ae:92:54:b6:da:11:ae:8f:fd:5e:15:2a:d5:0b:3a:37:
         e1:9a:43:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:29:43 2024 by rpki-client on console-fra.rpki-client.org