Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File:                     8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier:          Do68u+Rkr3PTRIlo2jg9tdjK/W0Cf2BBQZdlGbZY7Nc=
Subject key identifier:   03:95:6D:A2:D5:22:3E:19:C3:26:6D:79:52:47:E7:EE:D4:81:BD:6E
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer:       /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial:       01901E594986CC989CAFCBE8B896794B9124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 00:01:26 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:26 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:26 +0000
Files and hashes:         1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: S11HVPjSn8qiXIK9AjCnpruuA66qSLR4L/LKQt4npow=)
                          2: ge5vMssxVPqPPsmfoHbdky0-g04.roa (hash: VUTWBelbzOebwprvXdnYyjXyyDAvmLMloCTwyIMQu40=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:49:86:cc:98:9c:af:cb:e8:b8:96:79:4b:91:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
        Validity
            Not Before: Jun 16 00:01:26 2024 GMT
            Not After : Jun 17 00:01:26 2024 GMT
        Subject: CN=03956da2d5223e19c3266d795247e7eed481bd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:f8:78:fd:cb:63:b6:73:8f:0a:e4:fe:03:
                    ef:14:89:ba:37:84:ce:9c:91:11:82:34:bd:a5:72:
                    94:6e:02:23:f6:f6:83:5d:f3:71:4b:dd:14:b9:5d:
                    cf:73:37:a3:97:01:fe:34:e0:d0:d7:9c:84:c3:2c:
                    29:a7:11:88:ef:ba:5f:71:0f:52:f4:f7:6e:d5:52:
                    38:ea:79:c9:a0:79:34:01:5c:64:f2:cc:b0:3e:08:
                    ad:1d:16:ea:c3:5c:de:24:dd:b5:d8:1b:ed:b9:b7:
                    2a:1d:d9:78:64:2f:57:c6:30:8b:c9:32:f0:6c:5f:
                    db:b5:17:f4:bf:68:2d:23:3c:75:ee:f6:c4:48:29:
                    8b:90:64:16:96:52:62:63:5f:22:17:1a:d8:32:47:
                    6e:a6:77:cc:e2:5f:4e:60:53:c4:83:28:5f:15:1c:
                    a3:8e:aa:8e:31:ea:98:95:39:1e:c2:b5:b0:92:27:
                    4d:b9:40:28:dc:b9:00:f9:85:6b:63:ec:c8:3e:d5:
                    34:3e:03:2d:c9:13:c3:4c:b2:85:ee:12:e8:06:cf:
                    45:02:57:05:81:bf:ce:80:4e:11:9c:58:dc:2a:71:
                    a7:93:4e:fb:1d:e9:fb:4c:35:65:96:f8:9d:63:bd:
                    ef:67:de:89:67:f7:9f:74:a8:e4:91:e3:c3:e6:72:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:95:6D:A2:D5:22:3E:19:C3:26:6D:79:52:47:E7:EE:D4:81:BD:6E
            X509v3 Authority Key Identifier:
                keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f9:9c:b9:37:69:e9:d9:ca:42:a3:a7:d6:81:cc:d4:86:40:
         18:a2:51:ff:89:3f:6c:59:e0:b6:b7:4f:5d:f9:02:b3:fa:a5:
         b0:39:ce:25:76:bf:f7:f0:86:b6:80:65:ca:f0:b6:ca:47:5e:
         72:58:1e:80:5c:85:0c:e9:f2:2f:6c:b3:ef:f7:e7:50:9a:7a:
         ca:80:b7:9f:85:78:e2:9f:44:7f:52:21:2a:03:b0:bc:81:34:
         a6:b0:bd:44:ad:86:ab:42:46:0e:e2:8d:2b:3e:cf:56:92:d4:
         4a:30:f7:63:86:2c:ba:31:03:ea:21:19:da:e9:3c:27:4e:89:
         e0:11:5e:bf:38:d5:56:09:fe:29:c2:67:87:c1:e9:bc:44:c6:
         68:1d:09:75:5a:c3:f6:c8:1c:3f:35:e6:e3:18:b9:e7:44:d5:
         92:65:a0:c4:1b:c6:53:f3:1e:ef:6c:ba:bc:08:f1:0e:f4:7f:
         fd:5a:f4:c8:34:3a:bb:8a:8a:2c:0f:04:01:73:7b:4b:76:eb:
         6a:5d:47:59:17:cf:a5:0d:67:1d:97:c1:df:02:d9:56:f6:a9:
         d1:dd:6e:31:1a:9d:63:6f:a3:e7:09:9c:4d:0b:54:e7:dd:53:
         c0:15:f8:eb:b0:39:2e:cd:6d:f8:ab:f4:36:81:86:e8:d6:32:
         3b:23:c5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:02:44 2024 by rpki-client on console-ams.rpki-client.org