Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File:                     bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier:          jnfKVoQ0n1YNKd2wSNMeG8pcp6N7FMEN0D8x8ttaUoI=
Subject key identifier:   66:0C:2B:54:08:F2:50:8A:13:9F:67:AC:07:BF:51:23:EB:AF:8D:D3
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer:       /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial:       01901BFE79BF08FDD6FC702D798D75B7CBB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 13:03:00 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:00 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:00 +0000
Files and hashes:         1: GuYk0aQA0pgEw3N0C-v50Ls9Jpc.roa (hash: SznoNB6LAigw17DW19M9EYVuTCRz/FY3elEsd4ZSwDk=)
                          2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: Q/ki6jGvm0Ib9pxOkATpkX3jPxGS1/0MRuO3y2SEFUA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:79:bf:08:fd:d6:fc:70:2d:79:8d:75:b7:cb:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
        Validity
            Not Before: Jun 15 13:03:00 2024 GMT
            Not After : Jun 16 13:03:00 2024 GMT
        Subject: CN=660c2b5408f2508a139f67ac07bf5123ebaf8dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0d:95:ac:ec:7b:67:15:23:67:bc:aa:72:e6:
                    40:ab:d1:ab:0c:93:7f:99:76:c3:5f:53:ed:d6:93:
                    ca:8d:48:19:cd:65:f3:ee:af:98:d5:53:26:66:08:
                    34:4c:e2:75:f2:0e:9d:a8:29:82:7d:dc:33:f7:af:
                    bd:67:48:e3:9f:e3:e6:a8:a2:8d:14:bc:6f:70:ec:
                    81:ed:68:34:e2:f4:a9:f4:f5:25:7a:d9:4a:94:35:
                    e0:2b:b7:8e:7c:fa:27:ae:c5:c9:41:06:7a:8e:4d:
                    b6:24:91:d0:8d:c7:c1:8d:c2:e2:d6:08:b4:18:d6:
                    9a:04:bd:6c:45:91:e6:1b:6c:01:c1:bf:ac:8c:e5:
                    12:4e:2e:cf:66:0d:fe:a9:44:83:da:2b:91:45:0e:
                    61:93:13:7e:ff:0d:f5:4e:32:c3:e8:55:c3:1f:86:
                    94:64:78:63:aa:9c:f4:bd:0b:89:36:46:98:73:dd:
                    67:86:50:df:16:f7:4d:ac:94:53:79:44:bd:bc:a7:
                    c3:ea:1c:6f:ca:46:ec:27:af:0a:90:18:0a:13:14:
                    40:32:94:c3:55:db:a6:33:87:41:81:15:55:89:f7:
                    f1:44:1e:ee:05:8d:1d:89:1f:cd:4e:bb:04:fe:66:
                    7c:8b:b8:b1:38:10:78:23:80:ed:5e:9c:ee:ba:fd:
                    1e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0C:2B:54:08:F2:50:8A:13:9F:67:AC:07:BF:51:23:EB:AF:8D:D3
            X509v3 Authority Key Identifier:
                keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:02:be:39:c3:a3:45:97:1d:c1:1f:8f:5b:2a:85:66:8f:ee:
         66:0b:1b:95:b4:d4:10:09:dc:13:42:59:bc:42:fb:c4:28:a9:
         fb:1f:58:19:56:82:93:97:6f:17:57:0b:69:e6:70:20:69:8f:
         68:9f:4f:cc:9d:e4:78:cd:5e:ec:64:cd:dd:42:33:f6:49:b5:
         d1:99:6b:83:da:e6:1e:7e:0f:27:44:29:d5:0c:c3:48:32:5c:
         44:2a:4c:f0:f6:47:77:92:8b:1b:d2:67:29:5b:c1:cc:af:f2:
         7f:b9:5a:a0:bb:e9:5f:f5:23:98:b9:e3:ae:ee:dc:d0:24:5f:
         ce:0a:0a:99:8e:1f:63:5c:e3:d9:c0:1b:d0:a1:20:af:58:34:
         64:85:35:ac:30:48:95:af:12:64:27:2d:1e:c8:52:72:6a:f8:
         f2:bf:83:f4:e4:0f:31:3a:b3:0d:14:eb:ff:b4:73:5a:73:f1:
         da:19:05:14:90:01:c5:01:11:6a:b5:83:14:d0:e8:39:a0:03:
         41:67:03:3f:e6:80:e3:a1:a5:60:4f:cd:8f:2e:1b:77:d2:50:
         79:d9:79:2b:dd:53:04:10:ea:9e:ae:33:d2:0c:4d:df:52:85:
         a7:5a:e3:00:9e:4a:bd:99:53:96:6d:58:c4:e3:b1:8d:51:03:
         e7:55:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:56:29 2024 by rpki-client on console-ams.rpki-client.org