Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File:                     XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier:          Rw9SBA4iUNUPscq9YFLUd5F67ZaX/Iv9B+FWLaTgU8k=
Subject key identifier:   06:A4:F7:00:D9:E8:BA:0D:B5:A8:4C:AA:49:FA:62:C0:92:D9:12:BD
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer:       /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial:       01901EFD75337BD5C82BA6489B21893A3A06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 03:00:45 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:45 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:45 +0000
Files and hashes:         1: MUsz8Z61qNPFN1Gn9BRh66pPIQE.roa (hash: 3e3vaxDQXnoq2XCaNnVIlSbcb9sEGLDxR6jNwVtN6nY=)
                          2: WE86tzBEYbvOR4Bblq1PcGur_OY.roa (hash: GwqTorbvNEcbmIf4kED3VVtV65f2CeQeK4xO9LS7lSU=)
                          3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: E4gjYgmG7jsr73hYBa5L3A2PatDVdWngNsbE96dvkzo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:75:33:7b:d5:c8:2b:a6:48:9b:21:89:3a:3a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
        Validity
            Not Before: Jun 16 03:00:45 2024 GMT
            Not After : Jun 17 03:00:45 2024 GMT
        Subject: CN=06a4f700d9e8ba0db5a84caa49fa62c092d912bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:55:7c:6b:8d:e4:17:cd:26:3a:14:12:2f:
                    be:80:fc:44:fe:53:48:4e:79:e2:af:8f:89:f8:2f:
                    78:38:bb:ef:0d:fd:7a:59:35:4f:75:0e:ed:e2:e3:
                    ae:0d:e7:f0:6b:14:67:66:36:69:b7:31:78:f7:cb:
                    ff:90:16:1c:fe:3c:8b:2f:07:45:c0:f7:51:43:d4:
                    fa:f2:9b:da:e3:b0:ce:12:15:4f:bc:62:ac:50:20:
                    d3:0c:53:bd:bc:c5:52:d8:bf:b5:8e:b9:eb:8d:de:
                    d7:51:90:63:29:e2:5f:ae:3e:88:e2:ae:8a:48:9c:
                    f8:0b:ca:cf:a5:b1:59:3b:0f:f8:60:e0:fc:a8:d7:
                    70:a0:c1:ba:27:27:72:62:29:28:3c:1c:7d:f0:f5:
                    ba:d7:ab:04:64:05:da:88:a6:20:0f:83:1e:60:98:
                    37:ad:2e:b9:a5:1b:bb:e1:90:25:72:ea:50:34:19:
                    ff:b7:5d:bb:db:46:44:8a:b3:b9:a6:7d:b0:9b:1d:
                    3d:6d:ba:cd:f1:08:0c:b4:2f:98:07:cc:5f:52:dc:
                    f2:7e:ef:e4:cd:56:99:04:40:df:7d:2c:4a:1d:08:
                    50:59:00:ce:84:ca:15:c1:5d:ca:2d:91:11:3c:b2:
                    db:78:dc:fb:a4:62:c7:66:0a:09:66:84:f0:03:9a:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:F7:00:D9:E8:BA:0D:B5:A8:4C:AA:49:FA:62:C0:92:D9:12:BD
            X509v3 Authority Key Identifier:
                keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:35:84:4e:06:5c:b4:a0:04:f6:da:ac:65:93:32:cf:e2:eb:
         9d:98:74:df:70:46:9b:43:a5:af:b2:ca:f9:69:0a:82:b2:92:
         a9:3b:15:40:62:76:13:a2:c0:cd:62:d9:ef:a0:8c:ef:56:18:
         10:0c:77:ce:d9:40:a2:6a:77:33:6a:3f:2b:1c:7e:b6:8e:ac:
         f8:9a:f6:03:86:33:cc:98:9e:df:93:01:a3:83:a9:ff:99:f4:
         20:65:56:8e:d2:35:0e:da:29:d6:9e:3d:0c:30:e2:03:23:da:
         17:e7:9d:1e:ed:9a:a9:6e:d6:4d:ac:ba:4b:ef:fb:0a:0e:e2:
         bc:f4:bb:19:14:20:bc:47:0d:de:54:00:17:19:ba:aa:a9:92:
         af:53:e6:31:2f:e3:34:f3:df:b6:67:dd:ff:84:1c:e3:95:d4:
         5d:9f:cf:bc:5c:1c:25:06:8b:0c:80:1d:76:88:e0:28:de:40:
         c4:61:d7:8e:e4:0d:42:dd:62:58:7a:71:6c:dc:e1:9e:99:c8:
         35:c0:54:90:a5:f7:7d:bd:6d:e9:96:a7:ea:f6:96:4b:19:b5:
         1e:54:f6:93:7c:32:13:aa:cc:12:6d:35:19:6d:3e:a9:89:53:
         d5:a4:38:1f:d2:08:0d:dc:86:f8:9c:93:88:78:81:bf:14:a9:
         20:af:ac:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:50 2024 by rpki-client on console-fra.rpki-client.org