Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
File:                     CKkhe9gwYnyz5lfAuQY8giNN28s.mft (raw, json)
Hash identifier:          0ZJwbZgvqN4mya9tuk5iXUJE1QU5YK4kItK/7AGnkE0=
Subject key identifier:   77:08:AE:C6:7D:D6:AF:86:C2:34:FA:8F:FD:54:CA:69:2C:EF:12:15
Authority key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
Certificate issuer:       /CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Certificate serial:       01901B2113D4A3EF5AA1C1F3A8618C22DD52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 09:01:10 +0000
Manifest this update:     Sat 15 Jun 2024 09:01:10 +0000
Manifest next update:     Sun 16 Jun 2024 09:01:10 +0000
Files and hashes:         1: CKkhe9gwYnyz5lfAuQY8giNN28s.crl (hash: 0tNyEM9IiNYUY881XD8w6A4qI6m+p1tzdQ6vXvkadiE=)
                          2: apILGtQflvaLcBidaVY8RkDjP8M.roa (hash: 6v45IYxoAxgdE3XcrDJdNAI6e1uPTMz7j1Gkkd6Nr6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:21:13:d4:a3:ef:5a:a1:c1:f3:a8:61:8c:22:dd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
        Validity
            Not Before: Jun 15 09:01:10 2024 GMT
            Not After : Jun 16 09:01:10 2024 GMT
        Subject: CN=7708aec67dd6af86c234fa8ffd54ca692cef1215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:4b:fc:04:66:1f:8d:be:e3:3b:08:fc:38:
                    d2:f9:90:0e:28:fb:33:ea:47:a6:74:de:82:1a:b5:
                    8a:f6:c7:a2:c2:c0:fd:34:06:9b:80:e8:98:67:02:
                    4c:55:8a:08:75:2e:f3:ae:5b:db:4d:be:44:27:49:
                    b7:c0:1a:af:79:17:05:c6:a0:cb:4c:0a:46:71:65:
                    93:7c:ad:d3:69:15:40:27:de:28:6b:5d:0d:05:1e:
                    b1:4f:d5:5f:6e:df:6e:df:d4:69:e6:fb:c3:b4:67:
                    c4:73:ec:d6:9d:ee:4d:3e:04:c3:25:41:fc:e7:61:
                    67:28:55:25:7b:e4:3e:da:1b:69:a4:21:63:74:ba:
                    12:a4:51:77:9a:11:ab:e9:7b:55:f4:61:d7:9f:0b:
                    e4:ba:93:d1:f1:e8:82:ed:31:38:0f:25:29:6f:ec:
                    cd:7b:8a:77:76:a9:f8:71:80:e1:2d:f7:01:cc:c1:
                    7f:c0:c7:cb:e1:e2:a6:b5:db:c4:80:08:49:73:37:
                    83:8d:9d:ab:86:05:82:02:28:b5:be:7a:f7:e7:a8:
                    7f:12:b3:d5:5c:04:ec:cc:42:d2:48:69:28:a1:70:
                    76:1e:38:f5:62:3f:3f:6a:9e:e3:13:5c:dd:63:b2:
                    a7:3e:66:3a:bd:f3:fe:a4:0f:b4:ce:42:64:7d:76:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:08:AE:C6:7D:D6:AF:86:C2:34:FA:8F:FD:54:CA:69:2C:EF:12:15
            X509v3 Authority Key Identifier:
                keyid:08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4e:6f:92:00:99:a8:a3:38:68:91:0b:b7:13:06:03:d1:47:
         23:d5:06:e9:5b:65:e7:e4:b3:15:59:e0:19:db:b4:3a:dc:b3:
         89:a8:22:be:91:3f:e9:40:2b:8a:74:da:71:03:a8:28:c3:8e:
         72:ae:b4:a4:a9:af:56:40:37:bf:ca:6a:47:ed:0a:b3:63:f2:
         be:86:b6:18:f2:e8:30:93:f1:79:6b:03:6e:1f:83:1b:96:66:
         f9:a4:7f:f7:da:a6:10:93:1d:e5:ab:68:f6:e4:da:01:00:85:
         0a:c5:59:f8:c0:b8:7a:89:de:32:5d:f5:89:7c:87:fd:d0:ea:
         9f:2b:2a:c9:84:42:09:d4:cc:73:50:66:51:ed:16:52:df:65:
         c1:56:8e:13:1c:be:a8:48:d0:e8:2b:45:91:0b:4c:87:06:85:
         32:8e:46:c7:f5:ce:7c:3b:a2:27:29:ab:55:2c:00:11:07:fe:
         b7:18:2a:c8:15:20:f7:21:61:00:96:2d:86:ec:2a:2f:cd:81:
         a6:55:3d:e3:a7:45:21:29:2d:17:14:84:ad:40:ab:5e:e0:27:
         dc:e8:3a:d2:d1:7f:ce:aa:63:f7:1d:11:c3:4d:e5:84:e9:dd:
         a6:86:04:52:9f:b4:31:d3:88:5f:ba:a0:93:be:9c:50:45:35:
         d1:83:6f:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAbIRPUo+9aocHzqGGMIt1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTkyMTdiZDgzMDYyN2NiM2U2NTdjMGI5MDYzYzgyMjM0
ZGRiY2IwHhcNMjQwNjE1MDkwMTEwWhcNMjQwNjE2MDkwMTEwWjAzMTEwLwYDVQQD
Eyg3NzA4YWVjNjdkZDZhZjg2YzIzNGZhOGZmZDU0Y2E2OTJjZWYxMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMtL/ARmH42+4zsI/DjS+ZAOKPsz
6kemdN6CGrWK9seiwsD9NAabgOiYZwJMVYoIdS7zrlvbTb5EJ0m3wBqveRcFxqDL
TApGcWWTfK3TaRVAJ94oa10NBR6xT9Vfbt9u39Rp5vvDtGfEc+zWne5NPgTDJUH8
52FnKFUle+Q+2htppCFjdLoSpFF3mhGr6XtV9GHXnwvkupPR8eiC7TE4DyUpb+zN
e4p3dqn4cYDhLfcBzMF/wMfL4eKmtdvEgAhJczeDjZ2rhgWCAii1vnr356h/ErPV
XATszELSSGkooXB2Hjj1Yj8/ap7jE1zdY7KnPmY6vfP+pA+0zkJkfXZl0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcIrsZ91q+GwjT6j/1Uymks7xIVMB8GA1UdIwQY
MBaAFAipIXvYMGJ8s+ZXwLkGPIIjTdvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0traGU5Z3dZbnl6NWxmQXVRWThnaU5OMjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83ZGRlNDQtZDdiNS00OGRhLWJjNjgt
MmM1YmFjMzVjMzQ0LzEvQ0traGU5Z3dZbnl6NWxmQXVRWThnaU5OMjhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83ZGRlNDQtZDdiNS00OGRhLWJjNjgtMmM1YmFjMzVjMzQ0
LzEvQ0traGU5Z3dZbnl6NWxmQXVRWThnaU5OMjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM05vkgCZ
qKM4aJELtxMGA9FHI9UG6Vtl5+SzFVngGdu0OtyziagivpE/6UArinTacQOoKMOO
cq60pKmvVkA3v8pqR+0Ks2Pyvoa2GPLoMJPxeWsDbh+DG5Zm+aR/99qmEJMd5ato
9uTaAQCFCsVZ+MC4eoneMl31iXyH/dDqnysqyYRCCdTMc1BmUe0WUt9lwVaOExy+
qEjQ6CtFkQtMhwaFMo5Gx/XOfDuiJymrVSwAEQf+txgqyBUg9yFhAJYthuwqL82B
plU946dFISktFxSErUCrXuAn3Og60tF/zqpj9x0Rw03lhOndpoYEUp+0MdOIX7qg
k76cUEU10YNvhg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 12:51:06 2024 by rpki-client on console-fra.rpki-client.org