Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File:                     fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier:          0yNcbhyOrhq/TNU3Rpbrs/QShPGBCeuFmzceDZ0BTGY=
Subject key identifier:   D3:3A:02:65:D1:34:69:E1:91:D3:F5:17:D2:E3:F7:B1:C8:E1:64:AE
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer:       /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial:       01901C6A6A19E9926C900582836E62AC0209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number:          0E70
Signing time:             Sat 15 Jun 2024 15:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:54 +0000
Files and hashes:         1: 16X_1LHoGrsyolbPIJhRZRwpZ90.roa (hash: QrITIlPtPK8BBQKjD/UENeIsxG74ep6HxEq1HvmUpC8=)
                          2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: pxGgHGhTQp4yLUaAu8Ub4gzmEBoV8ZC/N4vFbzniMc0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:6a:19:e9:92:6c:90:05:82:83:6e:62:ac:02:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
        Validity
            Not Before: Jun 15 15:00:54 2024 GMT
            Not After : Jun 16 15:00:54 2024 GMT
        Subject: CN=d33a0265d13469e191d3f517d2e3f7b1c8e164ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:14:c2:41:f4:38:19:2c:58:25:73:dd:8e:
                    a8:61:06:16:4f:94:b4:d1:3e:b4:25:06:e9:d4:f5:
                    02:c1:75:9a:96:d7:68:ec:62:fc:fa:10:cb:be:a1:
                    2a:27:8f:6a:26:51:e7:65:c7:fc:fa:35:f0:87:9d:
                    2a:8a:eb:44:3e:04:9b:2b:c7:3f:5e:1f:24:d9:46:
                    6a:39:76:b2:80:74:d3:68:27:91:27:18:1f:0f:49:
                    0e:fd:a6:bf:19:03:8c:ce:76:9c:51:e7:04:5d:10:
                    62:fc:29:ee:39:d3:32:e7:d8:0e:86:0d:32:62:e3:
                    a3:d7:c8:f2:b2:33:43:6f:4a:d8:18:71:f6:b7:72:
                    11:fc:c0:6a:7a:21:73:b3:2a:0c:b5:1d:9a:55:1c:
                    c8:eb:8d:e0:f4:3d:91:3d:e7:0e:20:0a:4c:99:db:
                    f9:a0:28:23:21:8c:1b:da:d7:2f:0d:81:1a:96:19:
                    64:02:09:9f:76:c9:8c:ff:08:82:27:90:4f:78:4f:
                    b7:b7:81:44:f9:33:36:75:09:65:16:10:a6:92:60:
                    77:94:2e:d7:60:2f:77:d3:52:79:45:03:96:b3:c2:
                    b7:a6:16:73:8b:4b:fc:68:1f:e9:8e:25:19:4e:a2:
                    5d:65:39:8d:a3:79:a0:c7:8c:f9:1a:0d:58:f3:88:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3A:02:65:D1:34:69:E1:91:D3:F5:17:D2:E3:F7:B1:C8:E1:64:AE
            X509v3 Authority Key Identifier:
                keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:20:ea:b7:63:55:48:da:90:77:53:05:89:c5:95:42:08:
         16:0f:1d:91:f2:0f:d0:43:92:05:e0:b9:ac:bd:8b:e1:72:cf:
         2b:fe:5c:ba:5a:79:e6:40:d5:7f:e3:a3:be:cb:4a:c6:03:6b:
         2c:ee:9e:3d:02:df:ed:18:a8:2f:05:f3:e8:14:11:a8:4d:fb:
         c6:51:9c:92:9c:33:20:73:bb:a8:c5:f1:b6:7f:59:64:b3:c6:
         fe:66:d3:ad:37:88:fc:84:fc:30:8c:af:ff:91:d3:79:c0:4e:
         d4:f9:61:85:68:e9:25:18:6a:9b:71:7c:cb:9b:44:84:dd:82:
         9b:1d:4c:2e:4d:25:f2:fe:6a:a0:ef:99:08:6a:45:44:75:68:
         95:43:1a:8f:69:a7:8d:35:e8:37:82:6f:ff:66:de:b6:3a:2b:
         2e:f6:3f:cf:1b:d1:1c:42:58:64:22:e0:31:d8:c6:1a:66:f2:
         d0:08:57:7f:02:df:82:02:ce:ec:21:f1:c0:67:c9:d7:d2:c7:
         f4:d9:d9:31:ec:43:96:44:ff:39:60:62:e8:7e:e6:91:21:90:
         70:a3:f9:f6:1d:e6:9c:bb:2f:32:31:5c:e4:86:f7:49:d1:c8:
         08:c8:37:5f:d4:7a:8d:3d:e1:21:87:96:ba:cd:ce:6c:97:5b:
         ae:2e:07:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:25:51 2024 by rpki-client on console-fra.rpki-client.org