Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File:                     mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier:          k3SqOK2s+AqbqwT7BiHxCR2Lm2ChLuYAe+z4sPY5Kok=
Subject key identifier:   AE:62:61:3C:CE:C7:67:3E:C0:63:1D:8A:60:1F:B8:AE:D7:29:55:9C
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer:       /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial:       0190663A5B1BA9E80F61C18F5D820507AFDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number:          11ED
Signing time:             Sat 29 Jun 2024 23:00:18 +0000
Manifest this update:     Sat 29 Jun 2024 23:00:18 +0000
Manifest next update:     Sun 30 Jun 2024 23:00:18 +0000
Files and hashes:         1: ZeZZI0Oqx_wPoG02gJzNBw0DEUo.roa (hash: su9F4RMwOIh8ZVTFg+nPm2kNBAhLqLv+eOgCvF4K4kE=)
                          2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: cAnf37pVCkLnom95KZTMF2Kn9f/qI6Oq73NSrG75OUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 20:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:66:3a:5b:1b:a9:e8:0f:61:c1:8f:5d:82:05:07:af:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
        Validity
            Not Before: Jun 29 23:00:18 2024 GMT
            Not After : Jun 30 23:00:18 2024 GMT
        Subject: CN=ae62613ccec7673ec0631d8a601fb8aed729559c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:08:33:c1:f9:ff:3a:20:bb:6e:fc:29:69:
                    68:27:4a:83:56:e6:46:f5:5d:8e:a7:b1:ae:d9:68:
                    b4:e9:43:b6:eb:e6:31:87:05:53:4b:22:ec:5a:e1:
                    72:b0:7d:c9:74:51:c5:bf:46:5a:71:9d:20:ea:76:
                    3c:8a:61:88:f3:c0:81:79:70:27:11:76:b5:f4:ff:
                    a5:a2:89:f2:c8:95:a3:dd:49:15:84:e0:6e:2d:a2:
                    02:f4:58:33:88:27:97:db:94:a9:fc:70:da:01:2a:
                    6a:7a:58:a1:8b:34:01:74:02:7e:90:ad:99:26:35:
                    60:f3:9a:0d:30:73:2e:94:fc:ff:b7:16:9a:89:01:
                    df:9f:11:f6:d6:6d:5e:c9:e9:c2:d0:35:31:50:c9:
                    78:e6:39:4a:cf:fe:9b:a6:97:12:1f:c9:5c:b6:18:
                    75:f0:1a:5e:43:da:e3:8d:79:eb:f3:bd:23:bf:a4:
                    63:43:c0:a0:b5:61:c6:10:de:f7:c0:3c:41:2c:64:
                    40:45:b8:15:35:c4:c6:5a:c9:27:13:95:26:73:ca:
                    62:87:80:ac:8b:cb:09:4e:39:22:60:f6:94:9c:78:
                    f2:04:a7:64:45:f1:c2:e0:1d:c4:37:94:19:e2:f5:
                    af:3c:04:3c:72:df:ba:13:7c:9a:42:04:f8:32:3e:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:62:61:3C:CE:C7:67:3E:C0:63:1D:8A:60:1F:B8:AE:D7:29:55:9C
            X509v3 Authority Key Identifier:
                keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c6:ae:1e:e5:05:a7:c2:0b:98:f3:8d:20:3f:6d:75:d2:08:
         b6:bc:18:60:92:b1:36:3b:ff:21:d0:54:d8:ea:9f:9d:f0:d5:
         1a:71:44:6d:f2:fa:32:ff:b7:96:c1:72:31:ea:00:d7:f3:10:
         47:6e:88:e2:1c:c6:70:97:a3:e6:db:d6:32:4b:7f:d1:05:73:
         54:13:7a:fb:34:79:8f:89:50:ab:80:44:5d:e2:a6:ab:75:f6:
         e7:e1:50:42:5e:fd:df:ac:23:5f:9b:2f:91:10:76:b1:7b:74:
         55:f0:d8:26:c3:ba:3a:29:4c:87:5a:2e:52:a4:3c:79:81:fc:
         0e:87:3b:da:07:06:5b:68:3e:2b:43:82:23:08:1e:ac:7d:1e:
         db:56:35:8d:cd:5c:16:05:0c:96:70:1e:70:24:54:ec:83:8a:
         d2:34:76:0a:76:01:a1:5f:a6:db:be:6f:37:04:4a:e6:3f:ed:
         e4:52:b4:a9:07:2d:af:a2:a9:c2:6b:13:ef:d0:1a:92:65:3d:
         d2:f4:18:a9:2f:05:40:52:f1:d9:6e:46:20:67:57:4f:60:8b:
         74:77:f3:b1:89:36:39:29:62:82:19:e7:4e:fc:ba:0d:e5:dd:
         02:ff:22:40:52:5b:9f:7f:89:d4:e9:ad:28:ef:bc:8f:0b:41:
         75:60:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:49:41 2024 by rpki-client on console-ams.rpki-client.org