Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
File:                     L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft (raw, json)
Hash identifier:          eq9pQHOYvtsS4+PyoRXboa+Rgky7hCa2SrSEDOrrs9A=
Subject key identifier:   2E:FF:9C:77:C3:36:B5:48:D0:01:6A:C6:9A:23:F6:EE:DD:17:7E:E6
Authority key identifier: 2F:F0:E1:D9:78:0F:C9:22:EB:C2:25:90:38:0F:28:07:07:DD:CF:BB
Certificate issuer:       /CN=2ff0e1d9780fc922ebc22590380f280707ddcfbb
Certificate serial:       01901DEB227D69AFAC10316E52A70D9E9C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
Manifest number:          011E
Signing time:             Sat 15 Jun 2024 22:01:07 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:07 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:07 +0000
Files and hashes:         1: L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl (hash: FiQ87RTa1jDuTdA4+893sTc1UAt3U8exZ2fPwlgQloc=)
                          2: pTTXmjRmjQvvYJ5mgf7-KuTgpCc.roa (hash: zxaJVXwD3IYH+EmaTEeDHSSO56WWcVfs/JBiIzGvMn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:22:7d:69:af:ac:10:31:6e:52:a7:0d:9e:9c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff0e1d9780fc922ebc22590380f280707ddcfbb
        Validity
            Not Before: Jun 15 22:01:07 2024 GMT
            Not After : Jun 16 22:01:07 2024 GMT
        Subject: CN=2eff9c77c336b548d0016ac69a23f6eedd177ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:45:9b:2f:22:9e:ba:e5:6d:78:1a:af:61:34:
                    f5:f6:08:31:35:90:5d:43:51:fe:10:fe:44:7d:44:
                    7c:0d:49:1b:73:2b:c7:00:11:fc:28:99:c2:00:e8:
                    4f:42:27:7e:fe:9a:ae:ae:ac:2f:8f:6e:08:94:1b:
                    9c:19:2e:b8:ff:13:5a:bd:a5:77:06:4c:28:d3:f6:
                    70:ea:1d:a6:3e:a4:30:a4:18:ff:89:46:66:90:74:
                    77:1a:80:5a:a9:b7:68:27:d8:62:f3:1a:33:a8:d0:
                    c7:d3:05:52:78:74:dc:80:ff:14:a6:4b:b8:82:1e:
                    8d:3d:6d:30:8f:62:94:41:df:9b:7d:a6:77:6c:bb:
                    aa:b4:bb:cf:09:83:03:f9:14:4a:9a:89:ed:23:f2:
                    9c:9a:61:ed:67:c2:8b:78:37:72:08:73:00:c8:b7:
                    4c:8c:e6:ac:4e:6c:77:44:bc:a3:cf:ad:3e:bb:eb:
                    03:a6:34:96:7a:bc:25:df:5a:4e:27:ff:e5:43:05:
                    22:76:4e:e8:be:8b:23:42:41:31:33:81:18:e2:a4:
                    a5:bc:44:55:a6:cd:38:ce:13:2f:4e:7e:ca:68:45:
                    34:96:6f:0e:e4:de:b0:d7:7d:22:c5:dd:5b:65:40:
                    0e:18:7d:0f:13:29:0e:6a:1b:2b:79:c5:f2:5f:0f:
                    a8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FF:9C:77:C3:36:B5:48:D0:01:6A:C6:9A:23:F6:EE:DD:17:7E:E6
            X509v3 Authority Key Identifier:
                keyid:2F:F0:E1:D9:78:0F:C9:22:EB:C2:25:90:38:0F:28:07:07:DD:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0e:50:bb:e1:01:e1:23:51:52:99:35:78:65:76:a0:a3:35:
         59:f0:65:60:96:b0:ca:e5:ed:08:2e:67:74:34:e6:53:8f:66:
         a5:6e:c0:29:6b:76:c3:2f:32:bf:24:cd:66:3c:57:03:05:51:
         41:5b:d7:36:9a:cd:d9:41:b0:20:b7:1c:4e:52:67:62:7a:e4:
         46:ff:03:c0:7a:bf:65:57:11:2f:ab:0f:64:08:81:96:23:52:
         8c:09:7d:bc:21:15:67:5d:8e:00:72:10:80:0b:76:6e:b4:69:
         75:7c:61:37:26:9c:0b:77:ce:52:f4:58:75:52:65:4b:70:50:
         21:22:2d:14:46:7a:23:59:87:1c:75:3d:bd:ca:9f:f5:05:a3:
         2e:5e:51:d9:6f:8b:74:e4:c5:54:43:55:ab:c9:cd:5d:3b:c2:
         fc:a5:3f:b4:e6:b9:fe:bb:91:84:87:42:03:3f:bb:bb:44:0c:
         0e:15:80:60:f6:c6:36:ea:eb:e9:f3:29:59:86:b7:23:e2:1f:
         55:76:db:e5:ae:79:54:97:82:fd:2d:74:3c:a3:9b:83:9d:c3:
         41:2a:56:93:3c:dc:0e:40:bb:e6:0d:a5:f8:73:b4:e2:99:75:
         ec:f0:af:d2:99:d7:f2:d2:67:e2:f5:3e:66:42:6d:67:0d:77:
         37:5e:d3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:43:44 2024 by rpki-client on console-ams.rpki-client.org