Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
File:                     dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json)
Hash identifier:          o9U9wecYW7SylWMMKsiLXxQiTkRKGOnee7f2ZMrvuIo=
Subject key identifier:   6F:5B:04:A0:BF:43:BC:C2:48:9A:9A:94:A3:F8:A4:32:44:BD:A0:40
Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Certificate issuer:       /CN=749ea3b1e58ba060b41fc2a078f6016264759664
Certificate serial:       0190456627AE1BBCB6A8FE0F384E8DACA55D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
Manifest number:          11DB
Signing time:             Sun 23 Jun 2024 14:00:40 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:40 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:40 +0000
Files and hashes:         1: M5vl2H0xyAqk3MUkrH9eLKxeAeM.roa (hash: BemUhDCWxzfBqQ7daWmpHu3fORTQ1HKewbMKD189PFY=)
                          2: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: 3ZrJ6VN+WZqdutynVI+gZFFEQgcnl1/vi9l4qNrofs8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:27:ae:1b:bc:b6:a8:fe:0f:38:4e:8d:ac:a5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664
        Validity
            Not Before: Jun 23 14:00:40 2024 GMT
            Not After : Jun 24 14:00:40 2024 GMT
        Subject: CN=6f5b04a0bf43bcc2489a9a94a3f8a43244bda040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:a0:67:07:2a:b3:fc:38:4a:85:13:aa:71:
                    9c:48:ea:57:fb:95:74:de:8e:d5:3b:3f:2c:70:6f:
                    29:40:c4:6f:e5:b8:96:2f:61:b9:80:a6:41:0b:63:
                    09:d9:89:cf:35:5d:5b:66:7b:11:65:2d:94:f4:90:
                    b7:53:73:9f:6e:49:2b:f9:7d:2c:51:f3:46:6d:76:
                    cb:8f:dc:05:85:a1:19:de:53:80:7a:e9:0c:91:fd:
                    0b:81:a9:66:38:14:c5:6e:22:79:be:06:22:bb:72:
                    46:ef:a6:e7:c7:5c:94:4a:49:91:6d:6f:56:a6:9b:
                    1d:e5:13:86:67:84:ab:30:8d:3c:3f:86:43:76:a6:
                    fe:5c:e3:60:1d:93:0a:ca:21:08:16:ae:7e:8b:23:
                    83:bd:94:0b:b0:c0:74:5e:21:a8:0f:d5:af:07:33:
                    43:66:f1:b2:f0:5c:7d:dc:e1:03:46:7a:a6:c1:4c:
                    ea:3f:a4:2e:80:a2:92:c5:cf:5f:a0:d1:d0:f4:62:
                    50:16:26:c8:90:e4:49:be:d1:f8:46:a9:65:9c:b7:
                    f4:60:5b:e2:30:d6:2d:24:65:9d:13:21:7e:f1:94:
                    13:75:fc:0b:ac:7d:5b:f6:3d:b9:d6:cc:49:99:ea:
                    f3:49:98:bf:57:c4:98:61:3b:a9:58:81:f8:57:ef:
                    ac:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5B:04:A0:BF:43:BC:C2:48:9A:9A:94:A3:F8:A4:32:44:BD:A0:40
            X509v3 Authority Key Identifier:
                keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3d:2d:89:85:93:5e:87:7b:2b:88:94:33:7b:c4:53:8f:b8:
         54:39:79:ac:2c:f4:fd:d7:ca:6f:b7:ae:79:a4:39:68:37:35:
         67:24:1a:e6:5d:49:44:a8:ea:a5:07:5e:03:0e:2c:84:00:30:
         c1:c9:8c:0c:ca:79:15:b1:5e:9d:8b:08:5d:27:58:c7:2f:8e:
         64:f5:87:e9:2e:e8:37:85:0d:b7:0d:3b:da:ba:5f:c8:6e:c1:
         ff:3c:90:bb:8b:43:26:fa:5a:66:6d:b0:64:01:2c:ae:bb:99:
         aa:7b:8c:cd:8c:04:e8:20:d4:4c:c2:50:05:26:85:ab:d3:dd:
         7b:02:40:74:f4:ce:d6:83:ba:e5:43:d7:1a:72:1e:1e:c5:a3:
         87:96:bd:2f:d7:4f:38:51:5e:65:99:ea:d2:82:a4:74:f3:d8:
         06:04:da:50:75:0e:0e:1a:61:89:24:ae:de:f9:45:b1:36:93:
         b0:34:73:1b:a4:1d:3e:7b:3a:57:be:6f:8b:ae:34:99:09:2c:
         48:02:3b:45:3d:37:c3:7a:20:5b:ac:fd:02:9b:5b:94:7d:c4:
         ab:e4:bd:47:39:ea:7b:b7:b5:52:9f:e7:bb:00:fd:38:ac:b6:
         e7:d9:b0:bb:3a:90:77:e1:6d:23:c3:4e:58:2f:a6:bc:bd:ed:
         dc:d0:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:56:18 2024 by rpki-client on console-fra.rpki-client.org