Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File:                     lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier:          iPK6Z0aRJa1gRoZa4Rd1XQe3kwjE3TGmEISmHmyAC9I=
Subject key identifier:   E4:D7:7C:DB:DC:5D:03:0A:D3:9E:49:5B:44:3D:A2:7A:CD:08:C9:40
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer:       /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial:       01901DEAC023A5E768058E5FF06BEA73EEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:42 +0000
Files and hashes:         1: 5qqADF7xXAE0vGXAS2yMAC0m-jo.roa (hash: afC0o7pauI1PgnxWpkbqoTCoF6fTTjzatCF4va5W4GA=)
                          2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: Y7ltDsTq3Jg3vqIBH+iUUfib+hA/37tq70a0SeY+n1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:c0:23:a5:e7:68:05:8e:5f:f0:6b:ea:73:ee:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
        Validity
            Not Before: Jun 15 22:00:42 2024 GMT
            Not After : Jun 16 22:00:42 2024 GMT
        Subject: CN=e4d77cdbdc5d030ad39e495b443da27acd08c940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:c5:b2:5a:9d:65:9d:8b:5d:e7:35:34:8b:
                    ad:ea:bb:a2:c5:98:47:30:ca:dc:42:1e:d3:b7:c8:
                    ef:0c:b3:6b:6a:6a:02:85:7a:24:7b:20:22:59:5a:
                    84:32:dc:bb:a5:6e:9b:2f:f9:e9:bb:73:0d:ad:72:
                    e1:82:65:a9:99:57:cf:bd:a9:e2:6c:fe:cf:7a:54:
                    99:71:81:b6:91:0d:85:4a:8c:52:2a:3f:f7:f1:4b:
                    f9:ca:b3:6e:57:71:44:09:7a:55:02:f5:23:f4:a9:
                    ff:59:d1:93:62:b0:83:e9:09:06:44:e8:dd:c1:01:
                    f2:f1:45:78:03:5d:34:b2:a5:ac:8d:b2:11:d8:78:
                    c8:48:1d:6d:0b:a7:0f:6b:7b:92:6b:37:04:81:73:
                    4c:2e:c4:bf:ad:c7:1e:1e:a8:88:27:7a:dd:97:ec:
                    28:1a:d2:18:e5:24:ab:bf:70:65:7c:63:1b:55:7c:
                    27:2b:c7:1e:54:6b:b0:8c:33:66:39:8f:91:0e:28:
                    a4:b5:c3:fa:89:20:79:69:40:ed:b8:51:23:e8:74:
                    ca:89:21:d6:3a:64:36:24:17:71:22:db:df:d2:92:
                    b3:3c:32:a5:c3:cb:74:b9:52:2d:7d:96:ef:8d:20:
                    b4:ec:bd:b8:a8:db:a1:50:ff:ec:ba:2d:3f:7f:11:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D7:7C:DB:DC:5D:03:0A:D3:9E:49:5B:44:3D:A2:7A:CD:08:C9:40
            X509v3 Authority Key Identifier:
                keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5f:78:89:0e:17:34:e5:20:a7:4d:e0:3f:eb:77:0e:68:2d:
         4a:14:fc:ee:f8:bf:5c:82:83:d1:76:54:69:8e:f6:c0:98:5f:
         b6:1c:00:3c:da:1c:32:01:a0:0a:46:9d:70:82:7d:13:43:e3:
         c0:a1:6e:af:f1:67:84:3a:48:81:4d:df:dc:3f:8c:66:80:32:
         f8:54:b3:0f:14:0d:e3:56:6e:be:d0:a4:6d:04:94:e8:c8:b5:
         51:fa:52:af:9e:18:28:6e:e6:96:f5:e4:3e:56:64:d1:9e:1b:
         48:71:02:29:ff:8e:ea:d5:4e:17:ea:3c:52:8e:b8:fa:0c:1b:
         e9:a0:29:b4:84:62:9b:6f:5b:2f:9f:42:df:a5:6d:94:d7:c8:
         d7:3b:30:cc:19:82:2c:c8:86:52:94:be:06:c5:4d:69:64:db:
         b5:49:f5:77:32:e6:56:22:df:75:82:5d:43:66:70:1f:74:d5:
         ac:1f:25:f2:39:d3:eb:ca:af:3e:42:78:4b:e4:5a:e5:66:6c:
         2b:f6:61:05:5b:87:ff:03:9f:38:0a:fe:5c:9b:6a:eb:1c:2e:
         4b:ca:40:cf:97:6c:f7:e6:96:e9:fa:f9:12:ca:e6:92:a0:15:
         e8:62:4e:1c:58:90:e6:1e:ea:4d:2b:38:59:96:c9:6b:d6:76:
         75:91:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:21:00 2024 by rpki-client on console-ams.rpki-client.org