Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File:                     1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier:          ocWDO+CdqGNUzL8GoJ2rTd5m2U1UaC/ODK352M+sQSg=
Subject key identifier:   FA:DB:2C:81:27:20:E3:A9:11:F9:4C:DC:7F:53:06:0A:36:CE:DA:A5
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer:       /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial:       01901F348D32175748432923E49C23FD6E43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 04:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:55 +0000
Files and hashes:         1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: qHQ3J4pEKpd+un8Mo0TY2EZJ0O4udaPsoMXTlYwHlls=)
                          2: JPT0IliCUzMXphM0NVGfT_WvNYI.roa (hash: LY2opO6HdvHrbJtYPsL11chstZUDX1Jxhcqp1Z0bZ0U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:8d:32:17:57:48:43:29:23:e4:9c:23:fd:6e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
        Validity
            Not Before: Jun 16 04:00:55 2024 GMT
            Not After : Jun 17 04:00:55 2024 GMT
        Subject: CN=fadb2c812720e3a911f94cdc7f53060a36cedaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:6d:13:b6:60:19:12:d6:d0:35:5f:5e:ef:
                    b2:eb:d3:8b:f4:07:6c:23:1f:8e:2e:fd:b3:08:67:
                    88:fb:ce:00:5f:58:04:60:87:2d:ac:b9:8f:71:4b:
                    78:dd:0a:6f:aa:27:8f:ac:fc:23:fa:06:8f:79:b8:
                    8c:da:40:6e:39:99:60:96:f9:e2:ae:58:64:e8:e7:
                    14:07:af:38:41:d3:c6:d2:3f:7d:e1:c9:04:fc:f3:
                    19:4b:46:ba:f2:6f:0a:fa:e4:16:4f:ee:64:58:34:
                    4f:d1:f1:3e:cb:cc:7b:30:8c:6e:81:0c:34:57:0e:
                    bd:10:49:f0:2e:22:7f:a7:78:10:51:d7:04:04:1e:
                    e8:f8:1d:e9:d6:82:98:56:b9:f2:47:d2:f5:92:01:
                    a7:75:d4:52:68:35:5b:70:22:a2:01:2d:c1:51:5e:
                    dc:5e:22:fd:e7:58:7f:a5:02:44:ab:f3:69:e2:5b:
                    89:b6:8e:81:ce:99:d1:41:c9:3d:e3:fb:9c:64:09:
                    38:21:64:d5:f9:7c:cb:ba:b8:55:07:23:70:e3:60:
                    3a:59:c0:11:fb:45:cd:2b:c4:6e:9f:61:ba:fa:13:
                    4c:3d:6f:d9:74:18:b8:aa:70:7c:7c:b3:70:a2:4f:
                    ad:07:3f:77:fa:75:41:df:13:de:07:bf:32:78:4f:
                    f3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DB:2C:81:27:20:E3:A9:11:F9:4C:DC:7F:53:06:0A:36:CE:DA:A5
            X509v3 Authority Key Identifier:
                keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:56:d8:d8:e5:55:6e:96:25:79:8b:fb:e9:4a:25:b5:fe:22:
         89:ff:41:d7:8d:87:52:7f:f1:a1:5b:6f:03:62:b7:00:8a:59:
         74:8a:b3:cb:b3:a1:27:8a:d3:2d:39:d8:7a:34:22:00:f4:c7:
         57:b4:06:a2:26:fd:eb:78:59:b8:7f:1c:5e:10:e1:3e:f0:1b:
         47:0b:62:09:3d:28:f4:16:78:f7:2f:66:d1:c0:65:87:89:25:
         f9:d4:91:13:5b:f2:53:93:9d:1a:d6:75:2e:b2:ab:e2:45:5e:
         8b:ab:74:4d:17:c8:a3:7d:03:b4:36:9b:de:2f:3b:83:f8:da:
         04:c5:02:b1:83:b9:fd:a4:cf:c9:7f:bd:79:2e:29:79:e1:fe:
         71:17:80:b2:e8:f9:0d:0a:6a:3b:ee:64:6e:b8:dd:8e:85:d1:
         ef:1a:67:48:33:64:6c:b2:ab:9c:63:29:9c:ec:23:9e:e9:cd:
         cb:84:a9:7c:8f:c2:41:4b:3e:78:96:51:b3:12:65:09:6a:fa:
         61:a9:40:9d:08:d0:16:d0:83:bc:8f:43:c8:09:4b:40:ef:2b:
         aa:46:b9:44:6c:20:8e:c6:fb:0a:91:1f:4a:f4:ec:9f:d8:79:
         8e:c7:55:01:f0:71:b7:38:17:42:fd:06:28:7e:a0:da:e6:21:
         9b:29:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:50:02 2024 by rpki-client on console-fra.rpki-client.org