Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File:                     x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier:          mHA4C8ivV+jymujmQ+EQTQpsFQM90wzbbLZTGc/dKUs=
Subject key identifier:   09:01:FA:CD:66:2A:D6:BA:4D:D7:E8:D2:62:61:0A:93:F5:7F:45:D8
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer:       /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial:       01901F34A6C82F6DD08F7F10EE6AA329B1DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number:          0CD9
Signing time:             Sun 16 Jun 2024 04:01:02 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:02 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:02 +0000
Files and hashes:         1: 2Q_tuRozWUEx38TBwM0ew5JHsFo.roa (hash: /vyitMCrKbko3A5jrIJtYK2MLhuewIE1qPiATnlKrMw=)
                          2: GqvVrTS1D1gVg90jZTPehWtQLRQ.roa (hash: LxVTM1klAU4F47R5N8ESdhoMkw/tOTpHAKU8mCez65o=)
                          3: Yt1un448e_2Nqd2IaYkiSHKZ-8g.roa (hash: fRsLG7Ui9/BFu34e0BnTU7BwRr9lXCPLuYl+6ONI1ZU=)
                          4: od_jYIKCz6QOYYoXsoOtVwQ1Qc0.roa (hash: H9O929sFbIly2ms5v+GCLJbpsp8tXUDoBg4O6oIYzEk=)
                          5: uRZzWrdzvVwK7CXw9hWsfuttkwo.roa (hash: uhulexUSdiSKNwUApSDXwwhoPVWzJNJyB4sGjQQ8+8Y=)
                          6: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: tyG0bzRAYBaOcGkN1aMHHW8s8/2sSi1XjsV+sT4A1p8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:a6:c8:2f:6d:d0:8f:7f:10:ee:6a:a3:29:b1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
        Validity
            Not Before: Jun 16 04:01:02 2024 GMT
            Not After : Jun 17 04:01:02 2024 GMT
        Subject: CN=0901facd662ad6ba4dd7e8d262610a93f57f45d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:f1:e4:db:c8:7d:44:e3:0e:6c:0a:8b:1b:
                    b6:c0:df:69:85:96:04:40:8d:fd:42:61:c0:bf:ee:
                    fb:9f:c3:9c:bc:be:2b:49:e2:c7:0a:b4:30:f4:72:
                    30:4b:41:76:a6:ca:3a:f4:6e:d6:0d:74:f0:e1:b3:
                    ab:b5:4c:09:88:4a:47:a6:86:58:57:d9:7d:62:53:
                    88:39:bc:47:27:22:a6:90:0e:70:fb:28:dd:f2:9b:
                    15:4c:50:e4:33:ed:6f:23:0f:0b:a8:95:25:2d:1b:
                    7b:64:44:da:76:26:2b:d3:0d:31:87:52:b6:12:97:
                    dd:0b:2d:da:68:5c:25:56:c7:57:a0:2a:e7:9e:72:
                    98:27:ae:90:a5:6e:c6:40:18:50:43:e8:1d:c0:8c:
                    5c:f2:85:78:ba:ca:06:11:36:94:ee:bb:63:0a:48:
                    7e:aa:98:9a:a9:19:6a:7e:36:ac:ec:7c:68:0c:e1:
                    5f:11:b0:7f:71:0c:00:a4:45:fd:40:28:71:df:16:
                    ca:8f:24:c7:2a:ce:73:1c:02:a3:2c:58:39:80:d8:
                    7c:03:50:90:d9:c3:cf:a9:d0:a4:4e:73:03:49:cc:
                    3e:99:f7:70:fd:21:cb:d0:db:56:a8:9d:cf:a1:9b:
                    5d:0b:e0:8f:bb:88:e9:e9:77:7d:c6:0a:7a:08:9c:
                    69:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:FA:CD:66:2A:D6:BA:4D:D7:E8:D2:62:61:0A:93:F5:7F:45:D8
            X509v3 Authority Key Identifier:
                keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b7:8a:8d:d6:9c:42:7d:9f:58:d8:17:8c:c8:cb:29:e7:3b:
         6c:e1:76:78:6d:b3:bf:84:62:8f:a7:1a:1f:b1:c1:f2:25:d7:
         51:ab:1d:17:b1:4e:2f:b0:21:cf:53:f1:d2:55:b9:86:d9:93:
         6b:7d:da:27:08:d2:0b:fe:b1:7b:fb:b4:c9:da:19:97:08:55:
         f8:6f:78:47:2a:d2:d6:f3:a1:25:a2:5a:97:e5:12:67:75:f9:
         1b:23:18:66:ee:ba:4e:03:12:2f:af:45:6b:59:b3:dd:bf:7f:
         0c:a4:07:ed:8b:40:01:f3:63:17:1b:4b:a4:88:8b:47:97:0d:
         5f:f4:cd:34:60:8f:2a:56:47:0a:55:d2:25:0b:83:12:2d:ac:
         da:8a:b7:ce:2a:99:25:fb:5a:eb:6b:e7:ea:c6:ea:d4:eb:52:
         8d:05:7b:ec:87:52:01:34:e1:6e:3c:b2:c4:89:8c:9f:28:9d:
         f5:0b:f8:06:cf:a5:45:da:fb:60:0a:eb:f9:5b:42:99:4b:78:
         59:eb:9f:a2:47:91:80:29:9a:b7:38:9d:4f:9c:81:db:9b:60:
         be:83:74:8e:4c:ab:65:47:ee:0e:6b:6b:dc:2c:36:1e:e9:a1:
         b2:65:11:e2:d8:88:b2:6f:bc:c9:2f:25:7e:b1:6b:78:0b:e9:
         10:52:db:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:38:50 2024 by rpki-client on console-ams.rpki-client.org