Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File:                     8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier:          TAYeKeSeUhPLdHHEflvfiuaF2xs5P/cDFkePToT/q3E=
Subject key identifier:   14:98:65:A2:BB:07:88:E6:DE:74:18:73:F6:54:5C:79:A6:E8:15:24
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer:       /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial:       01901DEAB33A41FB154FA2D978E53BFE63A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:38 +0000
Files and hashes:         1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: QUkVJWnPVzdEvPavBNc12Rn60SssHkdeHqyMBtcY0rM=)
                          2: TTkJwDOEGa_qOqQDnu9NVrOJWEI.roa (hash: 4+8ZRksJGKVtzFYMJx2y0TSxI9LTK7gq3i+ZQ0Vjdik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:b3:3a:41:fb:15:4f:a2:d9:78:e5:3b:fe:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
        Validity
            Not Before: Jun 15 22:00:38 2024 GMT
            Not After : Jun 16 22:00:38 2024 GMT
        Subject: CN=149865a2bb0788e6de741873f6545c79a6e81524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:fe:ae:18:ec:15:6d:b0:9c:2d:07:c1:c4:
                    2a:41:8c:65:56:c1:46:ad:0a:57:ab:cd:ee:8f:d3:
                    c1:8b:60:b2:2f:5b:d3:46:e0:58:52:a3:5b:02:20:
                    97:47:54:1a:6d:af:4d:7a:ac:7a:b4:ef:1c:a7:76:
                    c9:f5:88:1f:af:06:dd:f8:d6:a9:8f:34:3d:ca:3b:
                    7a:41:99:94:0f:e2:e2:17:36:7c:ea:2d:fe:50:1f:
                    c9:69:10:6f:72:c5:71:0c:b6:ed:a5:d1:c5:5d:23:
                    13:5a:b5:9a:d7:42:24:89:51:f1:85:5c:f6:b4:ac:
                    23:5d:31:85:4e:a4:ba:c3:bd:45:e4:9f:1c:26:cd:
                    a4:2c:0f:15:37:18:cd:9e:27:ac:8e:72:6f:da:a7:
                    df:2d:9d:85:66:45:60:44:25:33:cc:02:c0:14:4e:
                    ce:26:e3:62:e9:cd:ec:53:4e:fd:3a:e5:65:a3:e3:
                    b6:a7:59:fc:9b:f0:79:82:5a:f2:8e:b7:3d:45:56:
                    78:d9:1b:eb:bf:68:25:84:5b:10:70:a9:b6:62:65:
                    fb:19:c8:31:65:e5:d5:c8:74:df:c2:9c:eb:fb:70:
                    4b:f6:b4:34:61:4b:85:de:93:8b:ff:2d:2c:2f:bd:
                    cd:f1:19:98:ed:ec:5f:1e:fd:83:75:ba:b2:74:da:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:98:65:A2:BB:07:88:E6:DE:74:18:73:F6:54:5C:79:A6:E8:15:24
            X509v3 Authority Key Identifier:
                keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6f:32:5f:33:41:2d:4c:74:3f:e0:b2:b5:ab:03:40:32:e5:
         e7:55:0b:ce:cd:79:ee:2b:1d:0f:fd:05:23:8d:ab:14:fb:30:
         ad:27:8d:de:d1:1e:3c:52:cb:40:a6:7b:fa:af:75:b1:69:3b:
         5a:ab:a8:25:ca:15:04:8b:76:90:03:e1:07:2f:74:48:f6:60:
         69:4f:d5:5d:d3:15:49:a1:b1:30:af:9b:0f:d7:4d:83:8a:47:
         c5:5f:ff:38:76:23:d8:43:be:72:1d:c9:86:a3:da:57:0a:c0:
         75:d6:a4:9f:c0:5d:6a:08:70:6b:00:9d:80:c6:82:42:81:5f:
         d3:dd:ad:5c:cb:7a:5f:dc:d8:37:8f:05:b8:cd:0c:57:cb:ba:
         81:32:4c:b1:91:02:2a:85:3b:03:45:d3:70:f4:02:dc:5a:75:
         6e:83:80:81:f3:6b:4a:6e:bb:09:57:22:df:e3:79:76:a8:30:
         24:bd:e7:e3:cd:12:a8:1f:9c:c4:06:5a:47:4f:6e:2c:d4:0c:
         81:54:91:1b:74:28:b6:dd:b4:68:38:e9:52:88:9f:43:34:0a:
         b8:ba:ac:a8:26:36:57:a2:64:be:03:5a:5f:4a:9f:b1:a8:27:
         3e:f5:d2:dc:39:60:3b:3b:63:c4:1d:50:35:49:23:ed:6a:c9:
         f8:d2:19:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:47:19 2024 by rpki-client on console-ams.rpki-client.org