Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
File:                     pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json)
Hash identifier:          fBQ2Q0Pspt+j9wfxT9NQWUhNqe/gEprRy3xaFCwcSWQ=
Subject key identifier:   DF:A1:0A:22:3A:A2:D6:93:7C:B3:70:7A:67:0E:45:A5:4E:28:A3:C7
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Certificate issuer:       /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial:       01901D7CE3744896BD6ADA9C859145F49A61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 20:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:42 +0000
Files and hashes:         1: CKQJiW_Obz0BPYdJ9ju-U5ArGUQ.roa (hash: TzVHl0A9PDQHcOVGibTeXITOZ7VIyd+/unKvzfDV0ms=)
                          2: oYINVcZLN0kcaeeycLyJdAtF8fk.roa (hash: 2OKeLXMk+0IfqKOGtXy45pxTb39fHFSrB8l5Sk4NOc8=)
                          3: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: nYqsFgYJ4+P2q3X/B7weHai7aSVs7Tyqyl6/RA0/hck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:e3:74:48:96:bd:6a:da:9c:85:91:45:f4:9a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
        Validity
            Not Before: Jun 15 20:00:42 2024 GMT
            Not After : Jun 16 20:00:42 2024 GMT
        Subject: CN=dfa10a223aa2d6937cb3707a670e45a54e28a3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:52:8b:cf:34:00:17:73:f3:ef:17:99:1d:a0:
                    70:65:e7:8d:33:d7:20:b6:aa:fc:e4:83:8e:08:62:
                    f4:44:a0:f0:61:5e:a9:36:4a:24:eb:8c:2c:ca:88:
                    22:9e:70:29:73:7f:9c:5b:0e:3c:72:75:9d:6b:78:
                    3e:82:d0:fd:12:8c:9d:da:ba:d3:b2:6f:e2:5f:e7:
                    eb:c2:bd:62:fa:f3:fb:9e:22:3f:f3:c7:e0:39:68:
                    6b:69:9c:2d:5b:ba:e6:df:36:6a:7e:4b:f7:e1:ef:
                    e0:c5:bc:60:b8:40:c7:24:66:96:6d:ed:63:5a:aa:
                    c8:0c:1d:5e:a9:75:68:fb:da:65:c5:ae:e0:5c:49:
                    bb:57:8e:b4:d8:7e:67:5a:84:d1:89:b8:77:a4:3e:
                    e3:26:c0:d7:33:78:c3:ff:f8:6f:3c:df:e4:f4:20:
                    1e:b3:e9:ab:04:7a:81:fa:bd:c6:86:62:ff:ea:3b:
                    68:f7:5b:f4:b8:d5:ed:ca:4b:90:a8:46:54:2a:ce:
                    17:28:b7:d7:9d:47:d5:fe:f1:ba:59:56:ba:f1:de:
                    de:ad:0a:b9:db:4e:1b:cf:98:79:b4:49:ac:5f:68:
                    a8:8a:94:9a:79:7c:81:65:25:11:4b:f6:ec:92:05:
                    69:a3:27:a7:94:4c:a5:69:60:d8:6a:25:13:46:8d:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A1:0A:22:3A:A2:D6:93:7C:B3:70:7A:67:0E:45:A5:4E:28:A3:C7
            X509v3 Authority Key Identifier:
                keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8a:b0:75:9f:13:77:0d:d4:6a:59:33:d7:36:34:59:9c:dc:
         72:50:25:7c:12:20:10:c2:23:8e:04:8a:97:c3:26:2b:14:3e:
         64:bf:24:91:41:f7:80:01:34:58:88:a6:ed:a5:66:94:82:3b:
         f5:91:de:58:c6:c9:c0:7e:13:ec:f9:94:f8:05:a1:03:ea:be:
         9d:8e:cf:47:5d:3d:fa:3c:04:bd:f8:31:43:94:9c:55:7e:ab:
         c4:df:27:53:94:ef:70:1d:84:5e:27:21:27:f8:4c:4e:e4:0e:
         a6:c1:78:bf:92:b4:d0:06:fb:2f:65:5b:c0:66:59:fa:88:15:
         1b:34:dc:91:78:97:c3:7d:f9:df:4e:30:b7:21:b8:a2:bc:62:
         1c:fe:68:95:a6:4d:b5:ad:36:d0:40:33:00:31:4b:4d:ac:27:
         51:a5:e2:9a:b7:12:96:6a:3c:a1:07:44:40:bc:50:22:d6:61:
         8a:af:92:4e:ab:a3:21:78:bd:58:72:4c:30:99:12:a0:df:ce:
         d1:e5:8b:af:13:70:ef:ad:ab:6f:f2:1d:d6:ea:26:a0:b4:ac:
         55:ba:d8:3a:0a:f9:b7:71:90:38:72:70:b7:93:a5:7f:90:ba:
         eb:2d:c0:e4:49:57:b3:a4:8f:9c:e6:2d:5c:dd:90:5e:5b:aa:
         f7:b7:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:45:04 2024 by rpki-client on console-ams.rpki-client.org