Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
File:                     stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json)
Hash identifier:          5X7uKqh/w2UU2DUVh0D8DALT6ZBACkFLRPvUmPKreAg=
Subject key identifier:   96:52:8D:EE:29:BE:86:0F:BB:6F:FE:3C:5C:71:23:EC:28:3D:37:ED
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Certificate issuer:       /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial:       01901DED4981029BD3547CA914199FB73408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
Manifest number:          06EE
Signing time:             Sat 15 Jun 2024 22:03:28 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:28 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:28 +0000
Files and hashes:         1: UZM5MeupELXkU5YQNrG3mdIyM6U.roa (hash: 2aFaUtrNYnw7SLvHS9p254TECTnzunyzVAH4DetQWAo=)
                          2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: 6hv06+9HFoBO1XNPHC2cbp6QeqX9HhgGefwc5sxEU9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:49:81:02:9b:d3:54:7c:a9:14:19:9f:b7:34:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
        Validity
            Not Before: Jun 15 22:03:28 2024 GMT
            Not After : Jun 16 22:03:28 2024 GMT
        Subject: CN=96528dee29be860fbb6ffe3c5c7123ec283d37ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b1:38:36:1f:cd:63:6d:87:dc:ea:9b:be:f6:
                    4f:08:7f:82:14:44:e9:4e:50:db:39:53:a2:41:9e:
                    89:f3:69:46:1b:cd:53:db:f5:8f:36:1f:27:45:20:
                    d1:ae:5c:2d:36:25:f0:9c:f1:71:b1:62:22:89:3c:
                    1c:cb:73:ea:cd:9f:9b:e3:e9:9f:be:55:96:6f:e3:
                    a0:a6:9e:cf:94:50:48:5f:7b:67:23:f8:0d:6d:eb:
                    ac:3e:c2:6b:3e:01:4d:b4:b3:6c:f8:c0:57:16:ec:
                    79:42:58:44:a4:d0:3f:32:2f:04:b6:3c:c0:ad:ac:
                    a2:f2:ad:ec:5b:39:c9:66:53:73:a2:97:94:0e:97:
                    2c:48:0e:45:05:d9:0d:de:49:3b:9d:3d:df:74:78:
                    72:b1:24:a4:2f:ac:84:65:ca:f4:9f:a2:fb:be:de:
                    37:3c:be:8f:99:2d:0f:cf:5a:ad:f6:82:10:10:39:
                    00:74:2e:4c:6a:ec:df:bb:39:f6:f5:8f:b3:be:ad:
                    40:7b:85:24:1f:c0:05:8b:49:93:2e:61:de:04:b6:
                    3e:d1:d1:42:d0:3b:0e:1e:12:50:a4:08:a4:90:55:
                    07:d9:37:a1:f0:65:ea:2f:c2:3d:7c:1a:e8:25:ef:
                    ab:99:07:e5:f5:55:3d:7d:34:7f:c8:56:2c:46:16:
                    0b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:52:8D:EE:29:BE:86:0F:BB:6F:FE:3C:5C:71:23:EC:28:3D:37:ED
            X509v3 Authority Key Identifier:
                keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:95:99:3b:d6:04:bc:69:31:a1:3d:10:24:fd:fb:2d:62:13:
         e8:2a:56:51:bb:5b:59:58:d8:5c:04:56:dc:09:99:88:a0:50:
         d8:8d:e0:a1:aa:f8:d3:72:75:be:d7:d7:4c:38:57:3c:cd:fb:
         94:31:22:ce:17:06:4c:46:fe:79:53:f5:03:2a:4d:32:de:17:
         a1:30:71:ee:72:9e:a0:ca:97:ae:f1:f8:b8:1a:0e:56:2c:9f:
         0d:44:b9:ff:ee:82:3f:8a:8c:b7:4d:0d:dd:1a:5c:8e:61:35:
         32:9a:e2:a3:2a:b6:00:25:e7:19:11:d8:06:9e:99:6b:80:b9:
         03:9a:75:03:81:c1:92:02:3d:9d:29:14:d0:5e:54:45:8d:50:
         11:e8:11:be:7d:aa:fc:56:80:d2:30:6b:20:57:c9:84:ff:44:
         76:85:5d:21:5b:39:31:42:3e:68:0f:09:34:a3:68:80:f9:6b:
         2a:e3:b4:6e:2e:ed:51:2f:4d:c4:50:86:78:0c:5e:8f:37:63:
         a5:7a:84:cb:2a:72:be:4e:75:94:98:dc:db:a2:7e:b6:31:cd:
         8f:cb:34:bb:73:b8:62:20:c9:f8:11:cf:7e:7b:6e:a2:f1:0a:
         a6:92:08:cc:0a:6d:a9:1f:e1:35:fb:98:16:1c:a7:83:53:f1:
         81:46:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:59:40 2024 by rpki-client on console-fra.rpki-client.org