Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File:                     MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier:          zfJnREZ7EavjKPVxsbXi5Hng3eFRvQM6yULYRJ1tD4I=
Subject key identifier:   8D:F0:A5:91:A5:97:2D:43:20:31:12:FB:B3:BD:FA:F8:64:5B:88:CE
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer:       /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial:       0190459D38F316E44B564AD231F2EB6F47A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number:          0415
Signing time:             Sun 23 Jun 2024 15:00:49 +0000
Manifest this update:     Sun 23 Jun 2024 15:00:49 +0000
Manifest next update:     Mon 24 Jun 2024 15:00:49 +0000
Files and hashes:         1: 28OO9taqdWuX45D1xybj01oToFM.roa (hash: NxqGPafne14RJjajYnYOjLNt1wR9c5mCTzWiNCVcxIc=)
                          2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: sT3SAfkLoKtjdrU8SKXDwktu15fWJCkScuRWNHI7RiY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:38:f3:16:e4:4b:56:4a:d2:31:f2:eb:6f:47:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
        Validity
            Not Before: Jun 23 15:00:49 2024 GMT
            Not After : Jun 24 15:00:49 2024 GMT
        Subject: CN=8df0a591a5972d43203112fbb3bdfaf8645b88ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:e5:08:5d:5a:22:9e:af:ed:70:38:3b:3f:
                    d5:f3:78:d7:44:d9:d3:0a:9a:64:04:ba:cc:5b:8f:
                    61:10:55:b3:89:78:82:c3:b3:ed:d1:d3:93:8a:c8:
                    38:8c:8a:f1:02:cd:55:cf:d1:a6:18:04:53:66:ea:
                    4f:f9:79:3f:62:c0:50:6f:9e:71:48:0f:75:98:62:
                    80:19:5e:dd:c6:e4:4d:ee:f8:0c:af:3b:8e:63:4c:
                    dd:0a:a4:2d:85:d4:ef:11:c5:68:86:ef:c2:60:8b:
                    ab:e2:d7:c4:df:2b:59:9e:8b:27:76:e7:d7:52:2c:
                    df:15:e7:0b:a0:65:79:da:41:a2:ed:57:5c:4e:31:
                    e7:3d:a7:cb:96:02:01:5f:74:93:e6:59:80:28:14:
                    c4:79:4a:74:9f:1a:bb:34:ab:a3:97:8b:fd:dc:74:
                    56:24:a0:0e:9e:04:04:b8:ef:95:25:1c:1a:08:d7:
                    ab:c2:9d:ea:ae:8e:a0:d0:ca:a0:ee:7d:07:19:76:
                    b3:a0:b9:c1:98:73:49:86:ef:86:45:a2:2f:1a:97:
                    8a:0e:1d:36:cd:5a:c6:ac:ae:bb:f5:a9:80:a5:f6:
                    90:ba:1b:75:6d:8b:ee:04:5f:0f:63:08:7a:95:98:
                    7a:bd:f0:04:99:5b:57:ea:a1:2f:98:b7:66:5a:35:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F0:A5:91:A5:97:2D:43:20:31:12:FB:B3:BD:FA:F8:64:5B:88:CE
            X509v3 Authority Key Identifier:
                keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ac:4c:8e:f9:19:db:8a:bd:c5:f0:b3:01:24:76:ee:04:81:
         82:11:31:71:67:1e:ff:37:99:59:4b:dc:65:6b:c0:18:e2:a2:
         4f:2d:99:07:8c:8f:5a:cb:d0:33:b2:c5:3c:83:86:76:5c:38:
         05:1c:f2:c3:9b:07:a1:20:b5:6d:50:97:0f:cb:61:17:45:be:
         a5:89:bb:5f:15:71:87:76:0f:be:f0:c9:46:ca:4f:66:20:fb:
         26:d8:36:41:7a:76:71:6c:fe:97:57:d1:81:a0:22:6d:12:c0:
         9b:7b:53:0a:60:a2:38:33:40:65:fe:d6:24:d0:8e:c9:93:f9:
         5b:e3:96:c3:d5:83:a8:58:ef:02:bb:5b:c4:64:aa:47:ef:ca:
         71:0e:91:c7:21:fa:ae:f9:18:06:31:c3:53:c4:f9:52:af:0d:
         62:83:eb:68:3e:b6:28:2b:d7:b8:e6:9f:58:86:70:05:5a:2f:
         cf:a4:95:b4:76:4e:50:86:2a:a5:52:0d:ae:4b:3a:b2:e4:22:
         c0:e1:5a:0b:eb:17:89:89:99:b6:14:ea:8e:1b:e2:af:0a:80:
         05:b1:c8:e9:24:c4:a3:23:86:18:75:2b:44:b7:3e:fc:85:99:
         fc:81:62:1c:0a:c4:69:63:b7:58:f5:b7:82:e6:ed:88:2f:bd:
         8a:26:3a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:44:49 2024 by rpki-client on console-ams.rpki-client.org