Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File:                     m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier:          dS2FMs5VON3ZOH6T4SGc+YEq8EWiAoyTH6irkYSUhdI=
Subject key identifier:   F1:C5:83:8B:0E:A5:E2:7A:98:65:45:74:26:0F:BE:70:99:E6:4B:A0
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer:       /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial:       019052112D6A9D19A389CC4836FACC2F00BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number:          09CA
Signing time:             Wed 26 Jun 2024 01:02:55 +0000
Manifest this update:     Wed 26 Jun 2024 01:02:55 +0000
Manifest next update:     Thu 27 Jun 2024 01:02:55 +0000
Files and hashes:         1: kITelxQZCK0zJ285nAb-61cYtIQ.roa (hash: JZFMbIvsf/g9HL/MFMoFsW4lH7wQ5dyMef2SIs08IJM=)
                          2: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: lyLmeqzD6/UFcPl9XEU13nB99YENJLiUdqBVvBX+SBU=)
                          3: zm3QO4yHBoxSHT6d1htEV1w8hsU.roa (hash: +o1Rles2nvYUTWX/hXZ9kvvlH/fzlTDy2dp4l/1e+QA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 01:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:11:2d:6a:9d:19:a3:89:cc:48:36:fa:cc:2f:00:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
        Validity
            Not Before: Jun 26 01:02:55 2024 GMT
            Not After : Jun 27 01:02:55 2024 GMT
        Subject: CN=f1c5838b0ea5e27a98654574260fbe7099e64ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:24:d9:93:57:66:6e:8f:9e:be:e3:f5:15:
                    31:31:3a:9c:2b:76:41:39:88:11:10:9d:c2:ea:32:
                    69:9d:fc:31:bc:6c:40:a2:8d:c4:8a:4f:ed:3f:3e:
                    e6:15:2b:ab:e1:23:81:72:dd:cd:e9:f6:36:81:55:
                    34:f8:13:2c:91:09:71:26:80:96:f8:61:69:4d:75:
                    ab:3e:5d:bf:a1:c1:e6:9a:69:d4:a0:28:fc:6c:47:
                    54:0e:3a:14:1f:09:4e:13:08:20:85:db:f9:75:a2:
                    ba:e9:e8:d3:de:e0:7c:f9:c5:06:11:ff:c4:a5:8c:
                    f7:1f:80:cf:63:8d:c2:83:0a:d6:3f:6a:b0:14:dc:
                    ba:ed:a8:f1:17:55:15:38:8d:88:63:76:dd:37:58:
                    2f:6b:e5:10:90:ba:ca:36:21:52:72:e3:30:7b:8c:
                    d1:78:3e:c0:b2:b0:40:c3:fe:ae:7e:46:f1:75:50:
                    bd:76:53:40:09:99:97:bb:65:83:bf:47:b0:70:66:
                    ad:09:e1:97:e5:90:01:32:40:a0:73:ca:55:c0:10:
                    3c:da:f4:07:8b:7e:08:82:39:9b:8c:27:a0:9d:42:
                    41:70:2b:37:ab:45:65:ef:f6:d8:7d:f5:07:ba:2f:
                    45:3e:be:a5:68:65:d9:e5:77:d2:14:30:c5:0e:cc:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C5:83:8B:0E:A5:E2:7A:98:65:45:74:26:0F:BE:70:99:E6:4B:A0
            X509v3 Authority Key Identifier:
                keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8a:61:7f:38:a6:19:9d:a8:48:45:0f:e5:18:13:16:bb:a5:
         34:8b:c1:6c:77:b8:9e:39:49:df:67:26:0a:97:da:1a:49:be:
         a1:ee:ea:4a:3e:22:ce:8b:5a:35:7c:59:0a:b6:96:fb:57:11:
         5a:60:f5:c8:8c:1a:ed:97:2f:a4:ec:9e:86:7a:cb:a7:80:34:
         ae:e5:af:51:e6:82:c6:68:43:e6:4d:b3:c5:74:04:cd:d8:09:
         36:b4:eb:7f:34:33:2b:d7:66:37:74:b5:7f:e4:41:07:bd:2a:
         e4:98:f5:d0:91:0c:82:21:89:89:bb:2e:74:44:35:b5:7b:85:
         2a:9c:ba:36:bb:c3:63:52:b0:29:fe:2f:75:b5:f3:89:ef:54:
         94:d2:63:b2:0a:24:77:9b:22:34:a9:b3:ff:73:93:71:fc:4f:
         be:e7:ee:b6:b2:d1:02:c0:86:e0:e7:8a:4f:c9:0f:a1:71:52:
         40:3e:eb:d1:67:98:23:ba:db:5d:fc:f4:a1:75:8b:48:47:bd:
         c5:50:aa:22:55:af:f1:7d:90:16:95:28:e8:22:10:95:95:50:
         74:71:1f:a8:1a:b1:c0:02:b3:f3:ae:0c:57:f3:c9:56:68:d6:
         df:90:9c:ca:e1:66:18:0f:44:2a:47:6b:76:15:3b:7f:db:8f:
         28:9f:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:41:01 2024 by rpki-client on console-fra.rpki-client.org