Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File:                     CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier:          4F/UWkhO9KU58qO6M79FG/t2LiQYmFD/3joz2kDir1E=
Subject key identifier:   2A:79:13:C3:04:A7:28:84:CE:94:46:7E:93:2B:43:B1:BB:3F:3A:4C
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer:       /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial:       0190448C4EB964466CABCAC6BB50A186F8D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number:          11D8
Signing time:             Sun 23 Jun 2024 10:02:44 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:44 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:44 +0000
Files and hashes:         1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: HLnduXkdZwX63Ko5+TQ4TJxTa6Pma3P2HquXOztFmx8=)
                          2: qivQ0o2jIE7YKn8W1TFGHLO0ioc.roa (hash: XQKfXsxKUoS2l3c5RD5xwbUVsvpOH/SMlB7CZOOHTf0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:4e:b9:64:46:6c:ab:ca:c6:bb:50:a1:86:f8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
        Validity
            Not Before: Jun 23 10:02:44 2024 GMT
            Not After : Jun 24 10:02:44 2024 GMT
        Subject: CN=2a7913c304a72884ce94467e932b43b1bb3f3a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:26:b0:c7:5a:c6:9d:e7:c2:7c:b8:39:5b:
                    ef:dd:d7:86:73:bb:8f:27:6a:ce:bc:bc:57:16:2a:
                    a9:39:83:74:26:11:eb:f1:4d:97:7f:ee:06:0a:d6:
                    8f:d9:5d:fb:45:bf:f8:d9:00:87:ba:bd:a1:0c:00:
                    9f:cf:79:1e:41:35:c5:9c:28:39:5a:d9:51:65:a3:
                    90:03:ab:32:e9:5f:be:c7:77:94:11:7d:2e:51:f6:
                    77:6e:d0:07:ed:91:4f:bd:82:3b:86:2d:fc:36:38:
                    b6:f6:49:51:a3:dd:e9:a4:be:d8:c8:8b:80:0f:de:
                    a3:f1:45:e8:c2:a0:a4:06:be:0a:bf:9a:56:de:b0:
                    fe:85:74:c3:6c:26:2f:85:c5:86:69:45:5a:4b:a9:
                    a6:03:e4:46:91:36:df:14:e1:90:bb:f1:33:76:bc:
                    b0:f4:21:0e:10:a7:c5:cd:c8:69:d9:ac:4b:6c:a1:
                    13:10:e0:ab:fd:05:ed:35:17:97:7f:db:36:fb:6a:
                    7e:6b:14:6b:2c:29:71:d8:5c:e7:10:5b:52:7b:b5:
                    8c:8a:af:5c:2e:a3:af:62:62:b9:30:9d:35:2f:65:
                    51:f3:aa:58:17:d4:65:05:e5:3a:06:66:32:19:33:
                    fd:a1:e4:96:38:9c:b9:bc:a1:4d:62:45:c8:82:09:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:79:13:C3:04:A7:28:84:CE:94:46:7E:93:2B:43:B1:BB:3F:3A:4C
            X509v3 Authority Key Identifier:
                keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:92:a9:03:92:ed:6e:d6:20:c2:0e:3e:8b:45:4c:4d:d9:
         14:4b:43:75:a6:af:3b:96:60:df:e0:75:43:77:ba:99:56:14:
         0d:77:85:ad:bd:21:2c:ac:fc:e4:91:95:59:1a:b7:c9:1f:2b:
         41:cb:32:11:9c:dc:b7:b6:73:b7:ee:ef:1b:22:8e:39:92:9d:
         4f:dd:43:06:f7:e9:97:b2:59:2c:31:dc:d6:0c:97:10:77:12:
         13:23:fa:a3:3d:96:d3:a0:c7:74:bb:5c:4f:f3:29:cd:d3:60:
         a1:12:c4:90:ca:14:4f:a5:b3:2d:c5:95:0c:9a:fb:b7:ab:26:
         38:9c:fc:4e:f0:8a:56:91:b0:52:1c:8b:c7:1a:20:f4:a4:65:
         8b:4b:f7:bc:ea:22:82:9f:e1:05:a3:00:aa:8d:8c:88:47:83:
         37:6d:50:b8:c8:4e:87:54:a7:3d:1e:64:c1:aa:87:fa:b4:26:
         b5:0f:94:6d:02:9b:80:3d:bd:ce:84:c7:84:81:f4:e5:d7:51:
         26:4d:25:a5:07:a6:4f:bc:a2:b6:dc:49:4e:72:9f:a0:e3:13:
         a4:d9:e0:35:7c:5f:76:a5:ae:e8:c6:20:34:5b:fc:46:c4:db:
         c9:52:f3:cb:23:97:35:2c:09:49:71:a9:7b:8e:08:82:91:bf:
         52:5c:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:39:26 2024 by rpki-client on console-ams.rpki-client.org