Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File:                     XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier:          0DiTkOe1NL7A8wQAgNHlzfauW3PIKfVyHgWkD5DJoNs=
Subject key identifier:   D7:6A:7D:32:64:14:EF:D2:82:AF:50:60:53:7B:F1:06:05:E1:AB:4C
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer:       /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial:       01901DEAD7E0671CF14A9F5EA88D563D3F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number:          0D32
Signing time:             Sat 15 Jun 2024 22:00:48 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:48 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:48 +0000
Files and hashes:         1: FVfD7pKI9EDphgRb5bcpSDsd1XY.roa (hash: uoWgWsK4IYDhWjqSK4hdD0UD9T2QB60GkBJhMgPBxpU=)
                          2: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: jw7Hnj3d3FL0JJxfiBMWba/TTwY2Qazmp4lJpvkNLtQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:d7:e0:67:1c:f1:4a:9f:5e:a8:8d:56:3d:3f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
        Validity
            Not Before: Jun 15 22:00:48 2024 GMT
            Not After : Jun 16 22:00:48 2024 GMT
        Subject: CN=d76a7d326414efd282af5060537bf10605e1ab4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d7:df:c6:c3:3c:15:c0:17:03:96:62:39:85:
                    db:f6:46:d9:88:2a:e9:8a:a4:e9:40:08:a6:d9:03:
                    96:6e:23:3b:c1:dc:79:5f:ed:73:d3:48:97:26:01:
                    10:60:88:4a:1f:9b:ca:e4:54:b0:6b:4c:d4:68:42:
                    84:62:87:78:cb:0b:4c:9c:d0:66:d6:d4:40:7b:16:
                    d0:a1:57:10:6f:ff:00:f7:fa:72:cc:8d:a6:29:92:
                    64:12:59:32:0b:f4:47:65:62:29:39:98:a6:5d:67:
                    ae:9e:ee:01:87:c4:d7:d2:7b:c3:fa:bc:78:6f:11:
                    4d:b5:82:b5:c7:94:3c:17:d6:c4:43:a3:df:f8:bb:
                    eb:68:13:dd:e2:a3:4e:67:88:01:8c:a8:e6:f4:f8:
                    64:d4:bf:3d:1c:0c:1a:e7:38:0b:cd:18:4d:27:17:
                    ef:a2:4a:d4:93:b3:02:30:67:47:fa:27:b1:d9:d0:
                    df:5f:e0:95:b9:78:40:e7:71:cf:03:65:29:4f:a3:
                    2a:f2:a8:02:8f:12:86:5e:ad:3f:f1:44:9f:e8:13:
                    2f:0d:b9:89:f4:37:5a:06:86:f0:51:b9:30:45:db:
                    64:37:2b:55:8c:c9:3f:9e:0e:1f:fa:6b:e8:64:da:
                    df:fc:95:92:84:f8:eb:95:e4:ea:d3:2c:6e:db:1f:
                    ac:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6A:7D:32:64:14:EF:D2:82:AF:50:60:53:7B:F1:06:05:E1:AB:4C
            X509v3 Authority Key Identifier:
                keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:47:c9:6a:cb:7f:2c:cb:8a:33:37:13:af:ec:69:6b:dd:
         77:11:a4:9a:29:b6:95:d4:bf:b3:81:12:c5:f4:e5:90:35:4d:
         06:d6:ef:3d:0b:83:bd:1b:0a:41:f6:4e:33:5f:cc:f2:68:63:
         8f:dd:cb:32:62:fd:03:6f:68:be:29:0b:6f:8d:33:b6:15:56:
         60:be:58:8a:f7:0f:32:0b:9d:b0:d6:e2:bc:5a:39:87:da:17:
         98:2b:53:a1:07:04:b2:ac:60:b3:b9:73:57:d8:a3:69:7f:f9:
         c9:59:5a:db:4a:a4:96:03:89:9e:b9:7f:0c:a4:cc:a3:1a:a4:
         e9:7f:ce:de:3e:44:4f:c1:ce:b1:eb:ba:a0:94:34:68:e1:ba:
         6e:b7:de:38:b9:f9:9f:d6:d5:6d:41:52:4d:29:81:41:70:ff:
         93:39:10:d6:54:65:68:ff:8f:d0:c9:db:28:e3:5a:ed:4c:00:
         b3:b3:ed:84:88:d7:0b:02:18:f7:5d:e9:52:28:24:7d:44:73:
         7d:7c:a2:19:43:56:eb:69:3a:8c:a3:28:53:22:b9:50:b4:28:
         b6:b4:1d:37:cb:83:e4:46:12:d4:6f:b8:12:bd:82:91:e3:5b:
         d9:27:f2:95:26:79:48:d3:79:51:35:f8:7c:0c:97:44:62:bf:
         f0:81:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:12 2024 by rpki-client on console-fra.rpki-client.org