Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
File:                     dvMR7xWBoA5DfNcEtigayGIa_FY.mft (raw, json)
Hash identifier:          y55TbyTKDYbH/1MSKWjiYhNzVIOUUFzZt0oQboZXjM8=
Subject key identifier:   D4:76:6D:31:1F:DD:09:84:A0:1F:8E:95:7A:8E:FA:45:11:F9:BF:E4
Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
Certificate issuer:       /CN=76f311ef1581a00e437cd704b6281ac8621afc56
Certificate serial:       01901DED557B07867BCBF70D2E5999ABC40A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:03:31 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:31 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:31 +0000
Files and hashes:         1: EHxfnIkj6YlKU-R2-WBUbEKWbDA.roa (hash: 5Jx//5o99K0BHxHI0qe6yJbIuIMuUmHNaKWbcDqxLVQ=)
                          2: aN3JMob9x8buefczcd05phYOlf0.roa (hash: kUfCg+wtP+nkX+Rd8xSjjjG2invmTEBDJcMX9x0Xlbk=)
                          3: cDm6JyGbDQ3NBWiMQqoTU3_JGAA.roa (hash: 7OvMkkDf9Rjop0/ikWSgd+hodpuxq8yXRvF4EZr4Gc4=)
                          4: dvMR7xWBoA5DfNcEtigayGIa_FY.crl (hash: z8Sxgx1jQsZmhw+xXw22aI2HfplQPb7TDFTfCLDl/6g=)
                          5: o8RPxWux3cpipeQdFwLl2yNZX_k.roa (hash: clnQqQdgxVcQ///RYqkW7wQaNCxrG1ozEoY2cexakoc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:55:7b:07:86:7b:cb:f7:0d:2e:59:99:ab:c4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56
        Validity
            Not Before: Jun 15 22:03:31 2024 GMT
            Not After : Jun 16 22:03:31 2024 GMT
        Subject: CN=d4766d311fdd0984a01f8e957a8efa4511f9bfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:00:8d:13:d5:6e:06:1c:98:ae:ef:cc:09:
                    90:06:73:bd:47:3c:1c:57:dd:41:77:24:71:02:32:
                    28:d4:f6:75:86:34:a9:56:aa:80:c1:44:44:ab:da:
                    bd:a8:37:67:7e:16:d4:d0:2d:52:08:f0:37:50:7b:
                    43:d3:7b:58:29:ff:35:07:16:09:b7:9c:6b:1a:00:
                    57:e0:9f:3b:b6:72:ca:b3:70:e9:63:86:89:71:a2:
                    d7:69:e0:c7:47:a3:3a:c7:82:65:2b:63:9b:2f:7a:
                    a4:ad:01:74:08:31:68:cf:24:48:b6:6f:87:21:9a:
                    e8:13:6b:f4:89:5f:99:41:2a:92:45:3c:81:b5:91:
                    8c:e8:82:f5:56:d3:07:7a:18:45:cb:3b:76:2a:ed:
                    3f:5e:c2:98:61:90:d3:67:d0:89:9a:93:6c:f6:18:
                    cd:b4:ce:34:de:b9:c0:3f:b5:4f:bd:24:97:21:75:
                    d2:1b:a4:43:0b:02:67:08:b2:37:25:81:32:47:1e:
                    2e:6b:6b:9c:ec:22:06:80:e0:36:41:64:85:14:9d:
                    c1:52:7a:c2:ac:1c:a4:58:bd:7c:63:fc:54:f3:67:
                    45:8c:8b:e6:2b:ee:77:af:90:b4:56:f1:df:f6:e5:
                    64:e3:25:4d:41:8b:40:d6:d7:81:42:3c:87:4f:ab:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:76:6D:31:1F:DD:09:84:A0:1F:8E:95:7A:8E:FA:45:11:F9:BF:E4
            X509v3 Authority Key Identifier:
                keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:04:6b:f9:99:69:75:70:3c:b8:69:c4:80:f8:18:5c:0e:78:
         92:4b:26:b8:ac:a4:e0:48:1d:87:65:b2:fb:23:15:6f:69:eb:
         0a:cb:48:24:8d:ab:d6:dd:a2:c8:71:57:6d:9d:fd:f2:9e:9b:
         42:54:8b:37:0c:9c:2e:00:c1:93:20:38:4d:ed:53:76:5a:5f:
         75:aa:09:c7:01:48:f7:03:a4:ec:2b:36:90:83:ee:5e:29:86:
         72:56:05:c5:f6:af:4b:db:ee:0e:24:17:4d:89:2e:df:11:55:
         82:72:b3:86:3e:04:c6:7d:62:38:5f:e2:1e:1f:92:31:d6:f0:
         31:63:a2:e2:96:07:18:0d:e9:0b:d4:25:a8:6b:c1:d3:be:ac:
         ab:76:f7:66:66:6a:72:ae:92:15:c7:00:4a:78:ca:58:94:74:
         a6:b1:c4:84:c8:0f:44:88:08:3c:64:28:79:43:e2:f3:73:4d:
         fa:8d:d5:dd:29:42:0d:e4:9d:74:32:dd:9b:c9:b7:91:ba:b3:
         94:53:05:32:23:80:e4:26:55:96:7f:8e:9a:ae:b3:3c:bd:a8:
         9d:f5:73:c3:56:70:c0:67:97:2e:03:12:31:d8:5c:5e:a8:90:
         ac:8a:1f:f0:1e:55:b7:06:f2:fd:32:b2:fe:e9:c1:50:99:e7:
         cb:cd:91:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:56:15 2024 by rpki-client on console-fra.rpki-client.org