Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
File:                     ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft (raw, json)
Hash identifier:          CVYvW71ri+a/LZFj9Y8C3hPTvbaEhKpnCvTHrXayr2Q=
Subject key identifier:   74:C3:13:FA:35:0F:B4:5D:A0:22:B4:14:ED:91:82:45:B1:3A:DB:CF
Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
Certificate issuer:       /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Certificate serial:       01901E590109D2125F61EF0F82D4C56B4B55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 00:01:07 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:07 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:07 +0000
Files and hashes:         1: GvvvNiQnAqifg2WQ-5obc1bRcFw.roa (hash: vbhWvlWd7tg3IoA/tPRW/KMnBc95Ju6hxXfWr5Xa6uQ=)
                          2: ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl (hash: VAJXs8yl0TYS8fGwk1tPKwM92hsTWD83xxPpbXxM7Ag=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:01:09:d2:12:5f:61:ef:0f:82:d4:c5:6b:4b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
        Validity
            Not Before: Jun 16 00:01:07 2024 GMT
            Not After : Jun 17 00:01:07 2024 GMT
        Subject: CN=74c313fa350fb45da022b414ed918245b13adbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:e7:95:8d:73:25:67:e3:63:87:ce:89:54:
                    eb:ad:ee:b5:86:67:d9:10:b9:63:9b:4c:bf:02:48:
                    b8:7f:28:02:24:87:b8:c7:e8:46:0f:42:1b:81:45:
                    1f:c3:d8:5f:d9:29:1a:84:8a:76:f4:ee:8b:06:9d:
                    10:b7:e3:e0:3e:39:8f:c9:d6:4c:a9:f3:be:a7:6f:
                    13:c7:ab:f3:79:5c:dd:b1:94:a0:00:aa:f8:d9:4c:
                    3f:0c:e8:de:00:11:a4:2c:af:71:5d:3c:df:da:83:
                    22:3f:31:0e:56:4c:42:94:7a:3b:31:43:00:58:0f:
                    ed:a8:14:4c:e4:f7:6c:f4:da:d1:d7:00:8d:67:95:
                    b2:23:ca:90:a0:90:34:e5:c3:c0:f6:40:8c:40:69:
                    8b:78:8d:87:d4:04:8c:20:7f:79:e7:ec:db:36:c5:
                    5e:1a:00:65:e3:30:50:33:bc:dd:d2:7d:79:7b:c5:
                    07:00:11:64:ce:81:bc:fe:9e:12:ea:4e:91:0b:4f:
                    ee:17:20:1f:54:85:58:0f:d6:5b:4d:98:48:96:45:
                    fd:fb:42:c6:b0:72:1d:41:5f:93:17:02:66:25:52:
                    e5:ef:c3:48:c8:17:b6:3e:82:cc:a6:43:76:20:e4:
                    7c:94:48:de:0a:9f:7e:48:3d:44:b8:89:6b:4f:a2:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C3:13:FA:35:0F:B4:5D:A0:22:B4:14:ED:91:82:45:B1:3A:DB:CF
            X509v3 Authority Key Identifier:
                keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:72:c8:e8:8c:de:71:a2:55:1c:73:d5:aa:0d:7c:c8:1b:14:
         e8:df:3e:24:13:03:e0:d5:c3:c5:43:02:96:8e:36:d0:b0:e6:
         e4:cf:48:90:8f:a0:92:ef:00:73:c6:a9:4e:ed:e3:c2:0a:8a:
         01:3a:5d:5e:e4:92:57:ed:85:b6:23:1f:d6:a4:dc:f3:83:ec:
         9f:68:a8:1b:28:58:13:cf:e1:63:97:73:d7:57:e2:75:ea:ef:
         f5:02:f9:fc:b7:bc:57:05:69:65:0f:62:9e:45:11:5d:03:53:
         0b:df:33:4d:dc:eb:79:8f:c4:2d:62:ff:24:27:63:9d:e6:42:
         a0:31:08:22:e0:9f:70:7f:fe:ba:38:05:37:bc:8e:fc:7e:1b:
         78:72:08:b3:c8:4b:98:7f:7c:56:74:55:5a:43:7a:57:54:ca:
         d2:04:2d:da:24:a2:e7:3d:7d:07:fc:1c:5c:be:ba:2f:37:3c:
         8a:59:e3:1f:4a:bb:ec:e3:d8:69:0b:74:11:e1:4b:44:99:3d:
         c7:94:0e:8e:21:03:2b:72:fc:a6:e8:a3:67:a2:ef:f6:5d:81:
         8b:cd:9a:aa:8c:c0:e5:0c:de:43:c6:d9:39:9d:f2:73:ba:f5:
         01:aa:20:20:06:85:c5:27:f2:04:7e:01:19:a1:f2:cb:96:01:
         04:3e:28:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:03:09 2024 by rpki-client on console-ams.rpki-client.org