Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/EXa5JJcZYIXW-71fHJkpzyuCMKg.mft
File:                     EXa5JJcZYIXW-71fHJkpzyuCMKg.mft (raw, json)
Hash identifier:          FcKAdW8yrwqaiJjvIbDgSLZ4nbOeSQ5k637SAxQ2wfg=
Subject key identifier:   6C:82:15:6A:C5:E5:35:1D:B4:FA:8B:06:6A:12:B8:1F:86:27:3E:3B
Authority key identifier: 11:76:B9:24:97:19:60:85:D6:FB:BD:5F:1C:99:29:CF:2B:82:30:A8
Certificate issuer:       /CN=1176b92497196085d6fbbd5f1c9929cf2b8230a8
Certificate serial:       01901E58D354D8E42EF406E8555CCEB84E44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EXa5JJcZYIXW-71fHJkpzyuCMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/EXa5JJcZYIXW-71fHJkpzyuCMKg.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 00:00:56 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:56 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:56 +0000
Files and hashes:         1: EXa5JJcZYIXW-71fHJkpzyuCMKg.crl (hash: O0UwUSBY/C80hMlfc4h5BvHyx1bmHazpZU4x7isz25I=)
                          2: UApIjDVbl7LGmffFEHba-3Suiwo.roa (hash: f6YFpxfAgDD9hKvi8ZqGTV20e7r8JkVFOP1LBNxQzKk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/EXa5JJcZYIXW-71fHJkpzyuCMKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/EXa5JJcZYIXW-71fHJkpzyuCMKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EXa5JJcZYIXW-71fHJkpzyuCMKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:d3:54:d8:e4:2e:f4:06:e8:55:5c:ce:b8:4e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1176b92497196085d6fbbd5f1c9929cf2b8230a8
        Validity
            Not Before: Jun 16 00:00:56 2024 GMT
            Not After : Jun 17 00:00:56 2024 GMT
        Subject: CN=6c82156ac5e5351db4fa8b066a12b81f86273e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:b1:7d:16:99:36:9a:11:9e:56:18:d9:b0:
                    02:8b:d1:27:cc:85:a6:fc:3e:ab:e3:ca:8d:f9:c4:
                    65:c6:ee:f8:32:9a:67:24:07:17:e5:e0:c0:c6:b6:
                    7a:d1:05:ab:23:f6:99:e3:ae:60:6b:6f:93:30:9a:
                    25:b3:01:cd:ca:09:bc:10:fb:4e:bb:05:e5:c0:d1:
                    9f:98:6d:36:40:44:31:46:97:b9:9d:24:d5:05:94:
                    44:44:b3:bc:de:64:77:20:e2:e5:a3:98:88:71:b2:
                    c4:91:e2:74:70:63:19:31:4e:f8:70:00:3d:e2:5d:
                    1c:51:d7:d6:fa:7d:0f:64:b2:0e:aa:db:85:8d:43:
                    f9:63:ea:f9:29:8f:ea:59:e7:89:4d:41:6e:03:97:
                    07:d9:8f:2d:f4:d3:1b:2e:a6:6f:36:10:22:12:f8:
                    f7:04:65:2e:0d:17:88:57:ab:fb:bc:8d:3e:85:47:
                    82:28:f4:fe:43:22:61:08:c8:40:a9:52:81:70:a1:
                    3f:65:37:de:51:02:57:ff:e5:40:a8:03:38:64:c0:
                    30:57:3c:03:bd:ba:f7:3b:f2:6e:56:52:c9:ec:e8:
                    e6:27:41:3f:b1:91:83:82:bf:a8:3d:77:ce:4f:cb:
                    b2:0e:37:61:b0:0c:60:2e:30:86:be:5c:03:dc:ee:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:82:15:6A:C5:E5:35:1D:B4:FA:8B:06:6A:12:B8:1F:86:27:3E:3B
            X509v3 Authority Key Identifier:
                keyid:11:76:B9:24:97:19:60:85:D6:FB:BD:5F:1C:99:29:CF:2B:82:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXa5JJcZYIXW-71fHJkpzyuCMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/EXa5JJcZYIXW-71fHJkpzyuCMKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/EXa5JJcZYIXW-71fHJkpzyuCMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a4:ed:e1:59:22:e7:2c:b0:c0:95:ff:b0:31:89:40:00:86:
         73:de:e6:d6:77:36:5e:10:e0:98:76:60:0a:a1:0b:d2:5b:55:
         cc:fa:6f:68:5b:fb:eb:75:69:ba:ed:58:3d:72:90:d7:37:44:
         03:f3:7c:56:7e:b1:58:16:4d:79:e0:18:2c:c5:1c:bb:0b:b8:
         98:08:b5:bc:6f:55:39:13:b1:0a:a3:3b:21:30:ed:b2:c7:b1:
         aa:de:a6:8f:8d:59:16:ed:6f:77:9c:8c:68:b8:1e:56:5c:13:
         21:a8:d4:06:8e:6b:19:6e:33:43:f9:4d:02:31:f8:67:e5:db:
         9e:5a:02:9a:92:b7:5c:93:92:cf:91:94:36:9d:5a:cd:5d:76:
         94:c2:92:c8:60:a3:2b:04:74:fc:c7:b0:5e:45:e2:53:f9:7a:
         2c:46:25:aa:52:50:e6:1a:e7:c0:8a:c3:10:6d:a1:1d:42:99:
         38:25:00:d6:cf:44:f8:79:36:f8:19:26:57:fc:ba:fe:1e:33:
         84:e5:3f:3f:fd:2b:00:5f:6e:19:5c:e3:ec:fe:a7:6a:d6:90:
         6a:25:f4:e3:d0:3f:e7:a5:f5:1a:71:a6:55:19:12:2e:28:0b:
         5c:84:b2:56:87:b1:3b:96:4e:b3:3c:99:be:0b:2f:f6:ab:c3:
         73:b2:5f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:11 2024 by rpki-client on console-fra.rpki-client.org