Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File:                     Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier:          MJlBNqTzQCWiyiW5bvK0BPfkhoIeJ6r9nvIhyzKyktw=
Subject key identifier:   B7:68:FD:8F:BF:37:D5:90:4F:C3:CD:EA:98:DA:6D:CF:55:15:A5:73
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer:       /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial:       01901DECFC4B7A88A3AE0DC3F3335349FB89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:03:08 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:08 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:08 +0000
Files and hashes:         1: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: EhYsnQczZfHIh9ZX+sT0LlJxf7bqvMMkXDGCLqUxd68=)
                          2: tl4RdW2jq6P3-6N106_qPAd66Lk.roa (hash: Tq7ZGHJwoXuz5Q4M53aVeSrw9r9EKAtjro1f837zVWY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:fc:4b:7a:88:a3:ae:0d:c3:f3:33:53:49:fb:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
        Validity
            Not Before: Jun 15 22:03:08 2024 GMT
            Not After : Jun 16 22:03:08 2024 GMT
        Subject: CN=b768fd8fbf37d5904fc3cdea98da6dcf5515a573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:d3:f7:0d:db:5e:60:47:6a:d9:b1:83:ea:
                    29:2c:45:c0:8e:54:4b:0a:14:c6:d4:27:c3:76:04:
                    58:75:a2:10:c6:89:e8:c1:74:8c:6d:25:0d:8c:3b:
                    74:bf:44:2d:36:2c:bb:0f:e7:f6:fe:7b:4f:9e:61:
                    9e:4b:51:f2:e9:2e:d0:22:93:a5:74:59:6d:87:0a:
                    85:ba:19:e6:71:94:8d:e6:ba:12:bc:b1:c2:c2:3b:
                    e7:22:f3:b6:4d:b7:68:60:3c:74:bc:50:f4:ef:90:
                    be:13:11:02:45:73:38:cc:c3:76:1a:99:94:f5:68:
                    09:6a:d9:45:26:75:c3:af:0f:05:9e:7a:38:41:24:
                    e1:19:79:86:b6:b8:c2:59:22:27:93:e5:93:ef:9c:
                    0b:89:b0:98:df:50:f1:e3:ba:29:99:d5:d0:b5:c2:
                    d5:27:5b:80:8d:6f:52:75:76:93:26:62:26:2f:3d:
                    cb:fb:7a:ab:e6:44:ef:b3:bc:0b:49:9a:ac:94:04:
                    27:85:bb:80:6b:7c:67:69:af:df:81:c9:9a:c5:fd:
                    9b:2a:a7:55:02:7a:f8:06:c0:3e:45:83:f5:86:2c:
                    d1:33:d9:d6:1b:c3:55:13:13:f1:60:4f:a6:83:ba:
                    f2:ae:45:fc:d2:83:2d:91:6f:ff:fb:ec:e0:2d:93:
                    b5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:68:FD:8F:BF:37:D5:90:4F:C3:CD:EA:98:DA:6D:CF:55:15:A5:73
            X509v3 Authority Key Identifier:
                keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:06:24:fb:df:23:dd:b0:c4:46:fc:31:05:f9:63:cf:a0:bf:
         7f:7d:3f:01:3c:24:ef:77:8c:1d:2c:08:7f:c6:42:dc:98:06:
         af:e4:50:ed:77:24:d8:5b:e2:df:06:35:88:6b:7b:31:3e:38:
         ed:7d:7c:6c:86:34:33:27:b5:ee:1b:ad:13:da:fd:2d:e1:10:
         1f:44:a9:a4:63:7c:b1:54:1f:8e:27:ae:c4:a0:10:67:8b:8b:
         a8:35:3d:ef:70:25:9b:84:bb:47:98:35:42:11:36:e9:80:a8:
         2e:e3:02:32:0f:2f:77:87:4d:37:e7:fe:d2:c4:01:15:ab:85:
         06:69:17:36:8f:e6:cf:d5:3a:99:f4:51:b0:04:70:4d:ee:b7:
         82:3b:d2:41:48:72:9e:2d:46:58:02:86:b1:e3:15:c4:1b:b9:
         0b:32:82:a1:07:c1:27:48:79:dd:78:bc:d9:ae:7d:ab:6b:de:
         83:f0:85:a0:89:f8:af:de:54:e4:dc:dc:c5:dc:b8:d5:70:80:
         6e:15:66:99:e9:63:d6:39:34:ec:11:11:60:0c:23:11:40:e5:
         96:24:c7:fa:99:e5:c4:6e:2b:ce:6c:89:d2:cf:44:90:82:30:
         12:58:d9:5f:1c:c4:ca:87:0b:d3:8c:20:24:9b:b2:ac:cf:80:
         2e:78:6c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:47:43 2024 by rpki-client on console-ams.rpki-client.org