Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
File:                     p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft (raw, json)
Hash identifier:          ok4o3pWUumsXTibK2lKYxbIjndkFieM/VGHmm1ZQzVM=
Subject key identifier:   02:9C:B5:2F:A3:9D:FF:B4:03:7F:8B:A0:A9:1E:C7:F6:3E:19:47:2D
Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Certificate issuer:       /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Certificate serial:       01901DED8BFA9AA459060D1019C19FC5BA89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
Manifest number:          087D
Signing time:             Sat 15 Jun 2024 22:03:45 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:45 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:45 +0000
Files and hashes:         1: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl (hash: summaoj6rC8HE8RoJ/McPaLCS5BxvGjMhkyZ8RBsHh0=)
                          2: xctHlnXs2EVS3lM3J0-O6PdNbUc.roa (hash: AZVDKoxr/tzbjI4yxUatIj0uMvuCNjez1t0bC4AXOwA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:8b:fa:9a:a4:59:06:0d:10:19:c1:9f:c5:ba:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
        Validity
            Not Before: Jun 15 22:03:45 2024 GMT
            Not After : Jun 16 22:03:45 2024 GMT
        Subject: CN=029cb52fa39dffb4037f8ba0a91ec7f63e19472d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:ae:49:b9:7d:17:f2:4a:89:c8:e9:3d:f1:
                    b5:d8:4e:c4:f1:46:a3:20:a0:5c:a8:b7:05:76:23:
                    d7:c3:56:e1:6b:e8:fe:7c:97:7e:31:29:d1:20:32:
                    5b:81:f6:a3:87:1f:fb:7e:de:b8:ad:1c:64:dc:82:
                    a1:0f:89:ac:81:5d:71:15:11:9f:2a:71:10:9d:35:
                    b5:8b:b7:bd:ba:aa:ed:30:3f:b5:41:55:6d:4f:18:
                    4c:f2:49:35:47:50:a6:96:85:8f:35:b7:ed:c4:f2:
                    ac:8a:92:e4:0a:1b:8f:b5:4c:76:0a:d2:67:17:5b:
                    fd:f0:b7:91:0f:a7:1a:49:87:97:72:6e:e7:5f:59:
                    21:44:b3:a8:65:d0:5a:d3:43:da:77:ea:39:f3:fb:
                    3c:27:9e:9d:c4:e5:22:da:03:99:2f:af:bd:9e:7c:
                    fa:54:89:de:03:d2:8b:32:ed:0c:bd:7a:7b:1c:4d:
                    3d:1c:b1:d6:75:45:20:9f:49:f4:f5:68:56:ef:5b:
                    4f:8f:42:3b:b7:6c:46:78:38:91:1d:e8:53:de:40:
                    c2:29:f2:0f:bd:1a:9f:fa:c9:b0:77:2f:61:aa:ae:
                    2a:91:e7:54:64:1c:85:68:9c:5e:71:18:68:57:f1:
                    8d:f2:19:47:86:f4:16:c0:e5:f4:93:a0:d9:4e:20:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9C:B5:2F:A3:9D:FF:B4:03:7F:8B:A0:A9:1E:C7:F6:3E:19:47:2D
            X509v3 Authority Key Identifier:
                keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:42:e2:19:f0:94:be:03:3c:e8:06:4a:43:ac:f6:75:fa:30:
         2c:41:4e:76:db:cb:de:74:54:0c:fb:59:0d:c3:e9:0a:6e:7f:
         8a:72:27:e5:b2:ec:1a:5d:b5:b2:31:02:a6:6a:5a:ca:91:05:
         6b:b2:fd:c6:c1:6d:90:19:dd:57:7d:3f:1a:20:46:ab:b3:51:
         69:e4:71:14:92:4b:7b:f9:fd:b1:3b:21:8e:7c:2b:f6:d2:83:
         6e:d2:9e:6f:42:21:a4:92:cc:b6:33:27:fb:dd:f5:ad:f9:99:
         ad:58:df:73:8f:e8:7e:92:94:19:0e:05:50:2a:d5:ca:84:c7:
         22:10:70:c4:c9:8f:50:c0:d6:d8:8a:a8:08:bb:c3:e1:e6:f7:
         15:f4:8d:3c:79:10:b7:72:dc:57:41:57:c3:ee:57:35:29:5f:
         a6:86:ed:e2:71:8d:ba:fe:3c:4f:c7:4d:4a:13:86:3a:2c:31:
         c4:d6:ce:0a:35:61:c5:f9:3b:1b:8c:62:05:c3:37:8c:1e:3b:
         28:77:5c:64:13:bd:49:67:2d:ae:24:7c:31:d5:fc:91:fc:9f:
         f0:86:7b:c4:59:bd:d3:fa:fa:2f:3b:e0:20:7a:d4:09:db:11:
         68:65:71:69:93:8f:f4:79:d2:66:6c:3f:f9:51:21:2d:89:02:
         6c:33:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:40:37 2024 by rpki-client on console-fra.rpki-client.org