Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File:                     ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier:          ClJpLU3wSy+eppv9jNty0lrJgj/KGfEp4A1EHo0vSWQ=
Subject key identifier:   E6:61:21:10:24:7A:C4:DE:D5:FA:47:A7:B3:52:53:AB:A7:ED:FF:52
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer:       /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial:       01901BFCBDC12BB41A50C92D33B509553A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 13:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:06 +0000
Files and hashes:         1: RfPDqVQQTn9AP-r-gR4nTbhLcyU.roa (hash: cjf2e72ipmRfxniEZiNvLJqf5Ta8HlIhuQCuB/Kj9XA=)
                          2: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: ba6uuQ/6y6sOe9XT7ASdBR9pj8QjlCGz+Qi3VvPGQYk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:bd:c1:2b:b4:1a:50:c9:2d:33:b5:09:55:3a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
        Validity
            Not Before: Jun 15 13:01:06 2024 GMT
            Not After : Jun 16 13:01:06 2024 GMT
        Subject: CN=e6612110247ac4ded5fa47a7b35253aba7edff52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2c:51:b8:66:9a:d0:7f:13:a6:eb:5b:6a:31:
                    bd:1e:f6:ae:06:c5:ef:be:e9:45:03:66:ce:e9:63:
                    e1:6f:70:e8:fa:d9:25:18:45:c3:1f:32:bb:48:61:
                    85:dc:b6:b9:53:79:03:82:51:f7:87:39:20:1f:92:
                    08:0c:48:6c:9f:b4:13:22:05:6e:22:68:cf:2a:88:
                    80:9d:3e:7c:7b:e4:10:1a:9c:4b:3d:36:3e:2f:4a:
                    53:13:9c:05:fb:77:77:0c:eb:a2:98:5e:ce:f3:c4:
                    7f:01:b6:9f:0c:ed:14:1e:6a:09:7b:c4:a1:17:b8:
                    8a:f8:11:44:65:3c:0b:50:c1:ac:98:24:e3:4f:e2:
                    14:de:da:ce:2b:09:3d:d5:9a:78:d3:ae:e5:0e:35:
                    88:85:69:59:a5:7d:be:b2:65:9e:25:3f:28:72:c8:
                    b1:83:3d:ce:32:05:d5:85:56:fc:2a:b9:fc:1b:d7:
                    71:da:89:46:41:0f:87:8b:b6:94:62:5c:6f:a6:e0:
                    87:9b:1c:67:14:e3:9e:b7:47:53:bf:54:cf:e5:1c:
                    2a:4f:f3:38:74:b9:e4:fd:33:f9:ff:79:9a:3f:22:
                    22:ce:47:4d:71:2f:7c:a9:f3:00:f1:9a:02:9e:73:
                    17:1b:a3:c3:d8:87:9d:76:51:d4:b1:06:4d:98:fa:
                    3d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:61:21:10:24:7A:C4:DE:D5:FA:47:A7:B3:52:53:AB:A7:ED:FF:52
            X509v3 Authority Key Identifier:
                keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e6:16:e8:f5:fc:60:3f:a5:89:7f:e0:d8:53:2b:66:db:80:
         43:c1:df:86:78:de:b2:2c:3f:8a:f4:1b:1f:85:5e:13:bd:36:
         73:fe:03:ae:e2:d5:71:0c:c4:a4:37:0d:49:48:18:7c:b4:7a:
         28:d6:10:16:87:0f:28:8e:c5:1d:e5:dc:2c:92:3b:60:51:bf:
         70:2f:b6:96:71:5e:6a:d8:ba:5e:1b:24:94:a0:80:7d:0d:f0:
         77:3b:2e:45:b3:ff:11:71:b8:f0:d5:f4:a4:f5:fa:7a:8d:24:
         73:20:c5:cc:57:2e:f8:ac:51:6a:18:57:de:20:73:b1:fe:48:
         b5:63:15:19:f3:58:fe:05:81:cf:3e:5d:56:d0:32:f0:8d:d3:
         95:8b:ff:9f:6f:14:e9:3f:71:8f:5e:e9:c1:aa:0c:23:fc:d7:
         66:3d:08:93:bf:b1:ff:8a:30:1d:d4:54:3f:3f:81:83:56:44:
         2c:4e:84:64:28:7d:46:81:8a:26:7f:66:53:f5:fa:a3:94:1b:
         26:aa:14:49:77:91:c5:f3:9d:48:dd:9a:94:ca:de:59:6b:14:
         e4:9d:d5:6b:af:7f:42:81:22:69:c1:4b:8f:bf:73:d2:9e:4b:
         24:21:b3:89:d6:ab:bf:48:6f:82:59:36:ba:1d:2c:96:1f:d7:
         55:84:ec:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:26:25 2024 by rpki-client on console-fra.rpki-client.org