Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
File:                     s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft (raw, json)
Hash identifier:          j4iUmQE3aNVJgOxEc8bLCWzJg1TByAktfVFSITiNfRo=
Subject key identifier:   C1:DC:D6:3A:68:DF:AA:E9:27:C8:40:7D:5A:6F:45:A1:5F:56:E2:A4
Authority key identifier: B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8
Certificate issuer:       /CN=b3ba47605cf367626263e57f16d0d87916ceddc8
Certificate serial:       019043E64D007EA1A63FA18948B8613B7593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
Manifest number:          05E6
Signing time:             Sun 23 Jun 2024 07:01:24 +0000
Manifest this update:     Sun 23 Jun 2024 07:01:24 +0000
Manifest next update:     Mon 24 Jun 2024 07:01:24 +0000
Files and hashes:         1: 2qDOfbZICzIhoMUglyR1__Cwbms.roa (hash: bx1v1Pi50TYbZ+MVZAOrYRGwddKYfBE11+6k/7BC85w=)
                          2: s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl (hash: JfKPplz05HZvSlGSnjky8tJZxWC8x+5jn4AvupysJ4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 07:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:43:e6:4d:00:7e:a1:a6:3f:a1:89:48:b8:61:3b:75:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3ba47605cf367626263e57f16d0d87916ceddc8
        Validity
            Not Before: Jun 23 07:01:24 2024 GMT
            Not After : Jun 24 07:01:24 2024 GMT
        Subject: CN=c1dcd63a68dfaae927c8407d5a6f45a15f56e2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1a:53:7c:1b:de:14:6e:e7:ea:b0:ef:f8:f4:
                    8e:f1:53:56:40:b6:1a:98:82:9d:d7:01:20:b7:50:
                    8c:fe:cb:52:7d:d3:f4:4c:4c:48:7f:a2:1f:2a:aa:
                    8d:b7:eb:64:f2:de:c7:3c:6a:75:53:2f:f3:ad:bd:
                    ab:c7:a3:16:63:03:cc:27:50:cd:26:97:e3:9c:3f:
                    52:17:9d:e0:da:3b:9c:63:e4:0e:e5:09:e7:72:64:
                    44:1f:c1:e1:d6:92:d0:8d:d6:70:3f:b8:4c:5e:49:
                    34:51:d5:d2:6a:f5:3d:49:4a:a2:f1:99:bb:bd:17:
                    27:3f:90:7d:5d:75:1c:f7:89:19:85:63:e1:d3:73:
                    44:db:c7:93:38:18:13:82:14:a5:47:c5:f6:4c:e0:
                    24:45:da:1f:3d:b3:88:da:e2:64:41:d3:8d:28:89:
                    0d:54:7e:6b:10:a6:43:62:41:b1:ed:e0:e4:d1:25:
                    e8:a3:05:3e:96:e4:e3:4d:dd:e3:fc:d7:91:b3:ec:
                    dc:ed:a5:88:da:a4:32:28:b8:b1:5c:9d:68:b5:ef:
                    8a:86:19:1b:a6:ed:f5:ec:f4:fe:fd:99:46:02:4f:
                    93:9e:ef:73:40:cb:92:c6:f9:ae:75:5b:0e:0e:c8:
                    82:c1:18:73:1a:fc:46:03:a3:fb:b6:07:5c:97:09:
                    16:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DC:D6:3A:68:DF:AA:E9:27:C8:40:7D:5A:6F:45:A1:5F:56:E2:A4
            X509v3 Authority Key Identifier:
                keyid:B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2a:f2:ce:d0:da:4d:6d:08:cd:f7:28:f9:1a:21:74:df:44:
         c7:71:41:f4:9b:29:13:fe:27:db:fa:07:4d:af:dc:2a:7b:9f:
         5e:30:0a:d3:b0:c0:e5:14:c6:89:c8:05:f1:a3:09:a3:14:c7:
         67:9b:98:ee:1e:8d:4e:c6:4a:67:ef:cc:53:04:c4:31:0c:d8:
         aa:dd:06:68:53:79:85:4a:4b:84:f8:30:03:ac:e8:7d:c4:5f:
         58:cc:bd:1f:4b:ef:f4:31:5d:4f:3c:06:e6:24:0a:09:86:52:
         16:be:41:0b:cb:87:37:e7:ba:85:77:a2:6c:43:cc:a6:70:0e:
         04:a2:5f:5b:b6:56:76:b9:ca:00:62:1c:2f:6d:e6:a2:4b:60:
         43:08:41:bd:18:f3:ee:63:7b:cd:29:40:21:5d:ab:c2:92:1d:
         bc:46:f8:8a:84:de:d8:46:b3:c9:92:d1:f1:86:c6:f1:26:df:
         69:70:df:04:3a:45:16:ea:fa:de:f8:ee:34:22:3e:7d:71:29:
         52:54:3d:01:d6:7a:d2:3e:79:ad:c0:46:f0:b3:0e:5b:49:e2:
         5f:39:32:5c:42:e9:ef:4b:f8:9c:83:9c:e8:d5:cc:19:8a:e1:
         ca:56:c8:93:78:31:63:83:96:62:13:3e:d9:23:a1:f7:17:5d:
         23:5c:1f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:50:46 2024 by rpki-client on console-fra.rpki-client.org