Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
File:                     6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft (raw, json)
Hash identifier:          I/2N6hFKhyq5zlRScw2ryg1f5EHilnfpN0qlF4291bw=
Subject key identifier:   02:98:4A:FE:EE:66:6F:23:70:0A:9D:CA:34:BA:69:9A:E0:15:58:49
Authority key identifier: EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
Certificate issuer:       /CN=ea827b9556d540da536b8046c65ff95b06ee4963
Certificate serial:       01903705ABF2C29246305D66658C48976148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
Manifest number:          11D2
Signing time:             Thu 20 Jun 2024 19:00:36 +0000
Manifest this update:     Thu 20 Jun 2024 19:00:36 +0000
Manifest next update:     Fri 21 Jun 2024 19:00:36 +0000
Files and hashes:         1: 6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl (hash: iPmmUY4K1oQOsW6sTjTRtMYXUOzI9UMFUvHlAbcO8AU=)
                          2: ZRHlVUpxIHApVf8x84eFnA-eCGU.roa (hash: AZpnDYfn//tMSVgCK5haFMvQAT9kPcrL/OrntI7TkNo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:05:ab:f2:c2:92:46:30:5d:66:65:8c:48:97:61:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea827b9556d540da536b8046c65ff95b06ee4963
        Validity
            Not Before: Jun 20 19:00:36 2024 GMT
            Not After : Jun 21 19:00:36 2024 GMT
        Subject: CN=02984afeee666f23700a9dca34ba699ae0155849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:43:c3:4a:95:ab:de:3b:29:d6:78:7a:93:
                    df:e9:8f:e7:bf:b0:61:d1:be:de:03:c9:f6:2a:84:
                    23:83:4a:39:20:d7:39:fa:04:32:af:14:55:8d:6d:
                    19:ed:d9:0d:c7:67:89:30:38:3b:17:da:cd:29:1b:
                    45:4a:16:bf:fd:00:f5:fd:ce:1a:18:00:0c:70:5d:
                    a5:97:ca:f2:da:c8:d2:7f:28:9b:6d:b0:a3:c3:35:
                    c5:a6:4f:83:5e:c5:26:e0:f3:87:f6:83:8b:89:c3:
                    df:b4:2f:0a:72:ff:e5:fe:ae:13:e5:d9:a0:36:d1:
                    1a:9e:12:8a:ba:08:04:ef:a2:7e:d9:38:4a:1f:5a:
                    5d:f8:87:11:e5:b3:a8:1a:45:27:4d:57:73:11:39:
                    46:d2:97:cf:e4:9e:2c:82:f6:10:db:e6:e2:46:d4:
                    d6:67:8b:7d:59:54:25:39:0a:7f:83:31:c6:3e:4a:
                    fa:af:0e:52:1c:8b:6e:2e:67:09:dd:64:92:63:c3:
                    3a:f1:b2:53:44:13:5a:e5:f5:16:6e:67:a2:94:b3:
                    6f:87:8c:79:70:95:ca:31:2b:9c:1c:4f:e5:9a:54:
                    6f:8a:1d:0a:ed:4e:59:46:9b:18:08:a8:2c:c0:90:
                    38:23:ae:90:e1:ba:6a:b5:83:0c:c4:e5:5c:47:9d:
                    6b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:98:4A:FE:EE:66:6F:23:70:0A:9D:CA:34:BA:69:9A:E0:15:58:49
            X509v3 Authority Key Identifier:
                keyid:EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:68:30:19:ff:d7:c3:46:a6:78:1f:11:2e:fb:f2:c9:e1:1a:
         5c:4b:66:3a:81:85:ec:2d:1b:24:49:49:09:32:cc:1c:2f:42:
         33:62:e7:fb:79:c7:e6:7a:38:e2:3b:24:85:b7:7c:45:42:ac:
         e2:be:25:35:2e:72:91:15:88:41:5f:cd:2d:c6:61:b9:56:4d:
         56:50:6c:f1:fe:a3:ec:15:d3:6d:b2:39:57:f5:27:8b:15:fb:
         2b:0a:f2:45:db:d2:6f:65:08:fe:08:07:78:cb:ae:eb:91:b9:
         4d:84:b7:54:0a:b7:89:26:c1:e6:e0:a2:6f:86:b6:65:a9:8b:
         c0:df:5e:19:0b:fc:6f:15:7e:d7:1d:84:fc:d8:37:89:d2:51:
         99:95:d5:10:27:61:30:ab:ed:28:da:0a:ac:83:70:a5:76:04:
         85:8f:6f:19:67:40:2c:72:8b:62:ed:a4:19:79:3f:17:01:59:
         1c:1c:8d:f2:83:44:01:67:a7:79:a6:91:91:e3:70:0f:e6:86:
         02:75:57:4d:0d:1f:30:ad:ea:4f:d8:64:b4:80:2a:ab:f4:86:
         43:a4:8b:7f:60:81:c8:29:47:05:75:31:61:b9:bd:83:84:b6:
         1f:0e:33:cd:ad:c8:5e:70:15:44:1d:cb:9c:58:08:60:20:29:
         ae:c0:31:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:54:53 2024 by rpki-client on console-ams.rpki-client.org