Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File:                     eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier:          nf2dALid0QyDmZwcoUglU7vVdtFOAqv2st39XTdrkF4=
Subject key identifier:   72:D9:7D:92:57:C2:3F:9B:CE:96:E8:D3:F7:02:9E:32:B7:FE:95:B2
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer:       /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial:       01901BFDFF2806268E1C684CB498B2E836CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 13:02:28 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:28 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:28 +0000
Files and hashes:         1: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: SMYeTD4Mob/4z04QCPcSMURXb0JFSGVJHQ5tGAdwJ28=)
                          2: yIGQtsrKBjoPVr_LbmpIMThHUX0.roa (hash: Niz4jePAoZCsT6FazHDsKag9dChjHfsKXgLRMxp2Wzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:ff:28:06:26:8e:1c:68:4c:b4:98:b2:e8:36:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
        Validity
            Not Before: Jun 15 13:02:28 2024 GMT
            Not After : Jun 16 13:02:28 2024 GMT
        Subject: CN=72d97d9257c23f9bce96e8d3f7029e32b7fe95b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:42:48:ab:30:f6:2c:0d:8e:d0:80:cd:c5:39:
                    58:e3:f6:96:21:30:75:9a:81:e9:95:a5:a2:fb:c4:
                    2f:99:1d:bb:f0:95:7e:72:d6:0d:1f:08:cc:36:7b:
                    7a:eb:8b:f1:de:80:c0:a2:01:b8:a6:3b:8f:58:eb:
                    b9:bb:57:fe:75:eb:77:a8:99:99:0d:24:e1:ca:a8:
                    36:d6:03:10:38:50:68:b5:17:db:a8:33:56:7c:ae:
                    7a:8b:cb:f3:b2:3b:c3:67:85:78:3b:58:3f:19:17:
                    92:d8:5a:75:92:ca:62:6a:27:6e:11:38:5a:3d:10:
                    81:19:c4:80:82:34:73:c4:a2:2c:39:27:5c:b3:cd:
                    3d:ad:da:15:7f:8f:a4:0c:2d:40:a0:8f:43:b9:83:
                    e0:e0:c2:d4:a3:6d:ba:b0:ed:d9:3d:dc:73:e3:d5:
                    cd:b4:84:33:a0:81:31:d0:a1:c7:9c:7e:cb:14:0d:
                    e3:8d:5a:23:4e:9b:90:ca:16:78:9f:4f:c7:8d:9f:
                    99:5b:fe:31:0c:4d:d3:54:49:b0:f8:d0:06:59:3f:
                    aa:00:27:4d:7e:1a:6e:df:b0:0f:19:34:e7:44:b1:
                    53:e8:13:57:c6:2e:cb:3a:ec:1d:96:ef:12:e7:69:
                    28:3f:a2:b8:fe:82:31:28:9a:82:b1:b9:43:a8:12:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D9:7D:92:57:C2:3F:9B:CE:96:E8:D3:F7:02:9E:32:B7:FE:95:B2
            X509v3 Authority Key Identifier:
                keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:dc:3f:76:45:6f:18:3d:c0:03:de:1a:f3:87:9b:41:51:05:
         9c:a2:09:63:6b:d4:9b:1b:d3:c6:1c:ef:37:88:11:58:a6:fc:
         14:3e:0d:3a:e5:e4:3c:d4:06:8d:ed:db:f0:f1:5b:62:68:c5:
         67:3c:a3:52:f2:e0:7b:be:de:ab:81:b0:00:9c:01:18:f4:96:
         15:11:c8:bc:a8:59:6a:3c:71:91:fa:c0:d8:f5:1c:79:01:d4:
         46:8e:71:83:c1:b4:c0:35:df:4a:37:be:3d:e7:c5:0b:0b:2e:
         d1:04:db:35:cb:8e:81:f6:6b:75:0c:81:b3:ac:f7:5e:b3:42:
         d1:1b:58:fe:37:36:95:8c:b6:aa:60:06:d1:23:e7:c0:82:a3:
         86:18:7c:92:64:66:61:f5:48:c3:b9:1a:19:87:3a:75:c1:f5:
         eb:f1:61:9e:5e:39:0b:8f:47:0f:69:11:8b:c5:68:f2:e7:70:
         6a:31:70:c7:6e:8f:be:cb:82:32:8a:c5:d4:c3:26:5c:7e:2d:
         e1:12:6d:67:9d:b3:47:43:38:9b:20:ce:71:fc:1b:8d:69:af:
         6a:ad:be:ee:d0:69:53:5d:9b:c2:84:f7:7a:44:54:ec:fa:2d:
         ca:7f:89:2f:7a:db:c7:91:cf:e4:14:14:4c:81:9f:6f:35:d4:
         b2:45:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:27:58 2024 by rpki-client on console-fra.rpki-client.org