Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File:                     oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier:          GuD8L1mFgNgTwq0rV06UjyMfd5p6WBKqxUdwo2m9nz8=
Subject key identifier:   6B:FB:49:11:8A:21:6B:90:56:54:6C:E8:10:67:F7:2C:82:99:5F:53
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer:       /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial:       01901DEB9C8F06C23DD2DD3C1E23C46441C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:01:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:38 +0000
Files and hashes:         1: aMW-WYkI4ng2BMOSF5Z3pnPsKtU.roa (hash: hojjMBBqoepApnb8BYVt7GHuigGFUWpXBLG3KjlCrA8=)
                          2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: Hm9ierSaEPxss8tTlMeIc+g8nRDctTLDe5UUhAmlEwQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:9c:8f:06:c2:3d:d2:dd:3c:1e:23:c4:64:41:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
        Validity
            Not Before: Jun 15 22:01:38 2024 GMT
            Not After : Jun 16 22:01:38 2024 GMT
        Subject: CN=6bfb49118a216b9056546ce81067f72c82995f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b5:a2:e6:ee:df:38:3a:64:c3:c3:5f:cd:f0:
                    88:02:0b:c3:47:ff:1c:b1:6b:36:89:15:db:9c:74:
                    ea:d1:32:ae:13:e1:43:4a:8f:1b:a5:4a:5b:b1:02:
                    89:ee:84:7f:37:e3:e0:66:6e:1f:24:89:b2:f0:40:
                    40:05:03:6f:3e:a6:0d:de:1a:35:0e:72:53:ca:db:
                    24:e5:d6:30:8a:83:be:85:4f:4d:cf:1d:45:ce:73:
                    b7:3a:e5:0d:aa:79:88:6c:ca:26:65:ea:4d:c2:ad:
                    81:ee:ad:15:5c:61:d5:58:7a:74:82:01:43:2e:9d:
                    73:9c:87:02:bf:bf:75:e2:b1:f5:a3:f1:cf:6b:b1:
                    8a:0d:bc:2a:35:2e:82:c9:70:72:d7:d2:53:2f:c1:
                    1b:2f:47:c3:fe:60:7e:63:75:85:64:8f:94:4c:6d:
                    39:56:a6:a7:bf:1a:27:f4:c3:9c:df:46:01:a4:f7:
                    ca:55:7c:18:0f:b4:a0:2f:7a:7b:6a:b9:73:ea:b5:
                    09:79:d1:72:0b:42:62:25:30:43:ff:98:38:ab:28:
                    02:ae:28:81:76:48:d4:b0:46:f3:7d:9d:7d:ab:34:
                    c0:22:61:bb:da:f9:dc:cb:3d:03:8e:ad:66:dc:d9:
                    10:d8:5f:61:64:16:2d:ac:12:cd:50:7d:64:13:f1:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FB:49:11:8A:21:6B:90:56:54:6C:E8:10:67:F7:2C:82:99:5F:53
            X509v3 Authority Key Identifier:
                keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:cd:54:a7:f6:25:57:f8:a9:3e:7a:5d:46:31:c6:dc:ec:2e:
         76:e2:01:0a:90:1d:e9:ec:45:49:f2:bd:c7:78:b4:60:a5:9e:
         5d:4d:83:eb:af:87:f4:f4:a6:ec:b8:7b:f3:c9:16:1b:01:e1:
         7b:7a:27:a9:3a:fd:1a:8a:19:e9:6b:a2:e1:0c:b0:ba:f3:43:
         9c:bc:78:5f:de:2b:a5:61:b4:d4:24:d5:77:d2:f8:e2:9a:6e:
         34:d9:28:cf:09:7f:e1:6b:40:ec:a3:70:ce:b6:d7:df:32:5c:
         ca:1e:65:df:9b:fa:22:10:3b:1e:9f:11:a0:11:83:34:f0:77:
         97:63:15:76:84:45:eb:59:c9:d8:9c:df:d4:2b:7b:34:e7:31:
         48:02:07:2e:d9:c4:4c:d9:20:18:6b:ff:43:2f:b5:38:49:e9:
         93:2c:f4:7c:3b:ad:14:2e:96:33:cb:bf:52:24:bb:5c:d6:11:
         58:e2:91:7d:46:39:af:6f:1b:5f:c7:3d:ce:38:5b:b9:4d:7e:
         b0:68:fe:75:a1:5b:93:df:a5:2e:ab:85:7c:32:a5:b3:7b:9c:
         1b:4d:c4:29:32:f2:9e:3a:a8:27:0a:82:46:03:0c:05:69:fb:
         75:b2:22:fb:94:db:76:12:2c:f8:a6:ec:23:80:6f:32:42:87:
         04:a8:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:16 2024 by rpki-client on console-fra.rpki-client.org