Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File:                     8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier:          jB31vjuR5DI10vhh1DI/qKkwdxEu3LW6ePGhObZ+EJA=
Subject key identifier:   93:6E:D6:2B:88:5E:4E:2B:9B:09:C2:A8:3C:93:E4:31:D4:FF:F4:F7
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer:       /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial:       01906D199DDF04153E73F9390321294BBD13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number:          11F1
Signing time:             Mon 01 Jul 2024 07:01:53 +0000
Manifest this update:     Mon 01 Jul 2024 07:01:53 +0000
Manifest next update:     Tue 02 Jul 2024 07:01:53 +0000
Files and hashes:         1: 5HLYGombSXu1TbsAZMChuHu8PkQ.roa (hash: zK2L9ewspjYTWwC64HvewG2kGVOHUK1t9HFdEAPX1vE=)
                          2: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: juUy039dxnpk2nEJrX9tx4+kkx0yRNH3eKP7hAkT/mI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 07:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:19:9d:df:04:15:3e:73:f9:39:03:21:29:4b:bd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
        Validity
            Not Before: Jul  1 07:01:53 2024 GMT
            Not After : Jul  2 07:01:53 2024 GMT
        Subject: CN=936ed62b885e4e2b9b09c2a83c93e431d4fff4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:39:ac:09:9a:ef:fe:2e:5d:bd:ae:4c:44:
                    bc:b8:b0:31:95:74:d2:b6:22:f2:ef:82:87:f3:be:
                    fd:31:be:81:17:1d:08:e8:86:25:36:48:d9:0e:8a:
                    19:34:72:ff:0a:85:d3:36:8e:bf:aa:4f:e7:b2:0f:
                    ca:53:bd:19:a6:69:b5:3c:c0:06:a0:66:0e:7b:67:
                    4d:72:87:08:a4:af:85:89:32:ea:96:6c:13:48:25:
                    ab:43:1c:61:54:42:02:cd:99:c2:92:aa:a7:6d:31:
                    29:60:e7:a2:3e:4b:cc:6a:ed:36:d7:52:10:71:dc:
                    1b:4d:76:41:4a:81:a3:6b:05:f3:57:c3:77:4b:ac:
                    dc:03:07:31:1c:e1:f4:42:ab:0e:c7:83:63:fc:33:
                    8c:58:10:03:f0:75:87:bb:6f:7a:1b:cc:d8:14:cc:
                    ba:1e:ba:dc:0f:e9:04:c4:fe:37:80:15:3f:57:e9:
                    63:29:3b:8a:f5:1c:f2:4d:66:af:57:d5:00:aa:42:
                    57:dc:06:37:2e:31:af:08:bd:9f:b9:14:e5:ee:bb:
                    75:3d:bf:48:d6:43:c2:96:c3:0d:0c:3a:88:42:d9:
                    c4:b0:99:fa:3d:d4:3c:27:54:e1:b7:4a:2b:24:bb:
                    64:e1:c1:ad:5b:80:76:f9:5b:c1:e4:84:84:26:4f:
                    43:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6E:D6:2B:88:5E:4E:2B:9B:09:C2:A8:3C:93:E4:31:D4:FF:F4:F7
            X509v3 Authority Key Identifier:
                keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:00:3a:ac:63:7e:1f:01:dd:17:02:61:b6:61:02:5c:fe:45:
         1a:c0:4e:e3:7f:08:ef:ab:4f:ab:11:14:04:54:ac:80:b5:6d:
         54:8c:a4:f7:4e:db:0f:f9:2c:e5:7d:51:02:c4:e7:f8:2b:61:
         56:5c:07:e9:57:f6:0b:fa:11:e0:cd:ba:22:7c:40:4b:c2:2a:
         e8:99:67:6e:c5:c9:00:5e:f6:6c:df:db:94:bd:f0:78:62:dd:
         00:52:8e:ba:0c:ee:07:14:8a:b7:e0:d9:f7:f8:b2:00:4a:04:
         d9:bc:ce:79:bd:45:0e:b3:0d:1d:92:8b:54:54:c4:45:fc:37:
         65:26:33:51:6d:e5:77:a6:8b:d8:40:8c:7a:3f:6d:65:c0:7d:
         9b:d5:bc:fd:1d:84:e6:9a:42:dd:eb:7b:84:f8:1f:42:fb:03:
         be:ca:92:30:b5:09:48:52:3b:2a:fb:7a:fa:b8:1e:b5:05:a4:
         ed:8f:8c:4f:22:76:14:17:ae:de:61:aa:39:4e:8c:a5:81:f1:
         35:fc:f2:72:39:2a:8a:4d:8d:7a:7a:ed:da:7b:21:48:73:72:
         fd:c8:70:a7:31:54:d3:7f:9b:41:ba:ce:c7:5d:53:81:88:a5:
         56:12:12:ae:33:4e:03:fc:c2:12:aa:89:8f:36:8e:0b:5a:d1:
         6c:c5:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 09:01:42 2024 by rpki-client on console-fra.rpki-client.org