Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File:                     yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier:          sqfMWyWSAWDD2AZdeoQX0BT83/cjn1UqRsfyVzQjfRw=
Subject key identifier:   DC:F5:66:3F:6E:19:5B:08:21:76:32:A4:97:15:9F:82:1D:C5:88:FE
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer:       /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial:       0190448D24F15610F14CCF3430589652DFC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 10:03:39 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:39 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:39 +0000
Files and hashes:         1: oHDG3ql9huSDQQpItY7KNmojymE.roa (hash: 8FCfGSfv0WMuJ3QNazOngY2x96DrMYtArh6g+ZuOFRQ=)
                          2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: 15I/AIF6x9qEtGIWw4YL+O/1s7PA2d8Xrf/oqdR/D48=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8d:24:f1:56:10:f1:4c:cf:34:30:58:96:52:df:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
        Validity
            Not Before: Jun 23 10:03:39 2024 GMT
            Not After : Jun 24 10:03:39 2024 GMT
        Subject: CN=dcf5663f6e195b08217632a497159f821dc588fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:5c:1b:22:0c:5c:2c:f2:6b:6c:b5:c5:3d:
                    a4:44:3e:ce:75:82:b5:f0:9e:0b:67:1a:69:d6:7b:
                    40:67:67:c2:c4:2b:30:3d:cc:62:47:ef:54:17:2f:
                    97:b4:be:70:66:52:24:3b:3c:9d:b4:7a:73:96:40:
                    86:44:cb:e3:6b:78:7d:30:18:9b:d0:5f:34:a0:e6:
                    07:c0:5f:ec:2f:e0:ae:d8:fe:bb:b3:47:09:90:d1:
                    a8:43:a9:0c:75:76:a5:04:eb:a5:cb:62:fa:ac:6b:
                    cd:ed:a9:ae:b3:60:b7:55:60:e4:23:af:22:e8:4c:
                    26:4f:8c:a4:76:31:5f:7e:d5:21:74:d3:bd:25:d1:
                    ea:3b:8a:2c:cb:a2:7b:25:99:be:0c:a9:11:92:0f:
                    5c:f7:92:f9:ff:a8:91:b7:1b:06:0a:f2:08:62:18:
                    e8:91:cb:86:ff:fc:03:8f:8d:b0:24:33:c7:6f:c9:
                    52:df:82:c3:d2:99:56:38:8b:8a:f0:92:58:01:d3:
                    50:8d:2d:27:1f:c8:05:a9:48:b7:b4:45:29:8e:60:
                    30:9d:3c:bd:aa:19:26:7c:f5:bc:6f:53:25:2b:6f:
                    69:fc:2a:8f:94:4a:c6:8c:db:f2:b0:da:ce:fb:bf:
                    9f:1a:5c:44:18:4a:b6:8c:28:43:f1:17:24:88:76:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F5:66:3F:6E:19:5B:08:21:76:32:A4:97:15:9F:82:1D:C5:88:FE
            X509v3 Authority Key Identifier:
                keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ed:b8:b5:8d:84:90:b9:25:29:29:45:79:e3:96:e9:fc:68:
         21:48:ae:fa:05:c9:23:c8:07:06:39:c4:f2:56:21:16:17:b1:
         17:ab:41:c9:52:07:29:79:4d:e5:b1:ce:56:ff:68:aa:61:12:
         34:63:d7:3a:af:0f:c7:09:22:b4:20:7d:e9:79:38:e7:3d:14:
         e7:62:3f:9a:72:ef:0b:57:b4:48:5c:e3:c2:27:4b:e1:dc:1e:
         08:1c:83:1e:4e:a6:fb:b0:e4:40:c2:fc:4a:d2:ae:9e:b0:7d:
         95:d9:35:55:cb:94:fa:ab:bf:95:a9:0f:93:79:44:c0:5c:e6:
         e5:73:c9:71:ae:81:2f:94:07:1e:34:da:e5:62:69:ec:52:13:
         1b:6a:96:33:8a:eb:e7:bc:b6:e8:5c:79:20:8f:18:99:53:f0:
         9d:87:11:8c:d1:83:cf:9c:b8:68:23:3f:62:2a:d6:25:30:24:
         e5:d8:c5:9e:ac:b1:47:5b:1b:71:b3:1f:5a:70:09:f8:3b:af:
         68:cf:15:36:83:d0:c8:cd:48:d5:30:90:01:98:8c:64:38:1c:
         75:33:fd:e2:fc:24:50:1f:db:9d:aa:de:58:0d:b9:f6:39:f9:
         d1:5d:91:28:a2:aa:d1:15:ed:b7:67:98:26:dc:82:7b:ea:4b:
         44:32:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:34:15 2024 by rpki-client on console-fra.rpki-client.org