Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File:                     XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier:          CAOdDqAhKxUZxdjIZzeSgltR5oLzLujhDXt/aBYUjvA=
Subject key identifier:   DB:C9:E7:4E:18:EF:B8:33:DC:65:69:80:7B:D6:E6:DB:CF:17:16:4D
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer:       /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial:       01901EC6C8373CDB5D60A191DC232A4C64D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 02:01:02 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:02 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:02 +0000
Files and hashes:         1: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: d4CPz5LD+WTJud7t8CBuiNOXNwlzAY4lZz90IhCQL5I=)
                          2: j-cWnWtJcQmXi-jwkG6ps7YdkHA.roa (hash: kwEBwkrqumzzaSnpV/4ljjORbE5R9RUxbF+QIkl7XOc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:c8:37:3c:db:5d:60:a1:91:dc:23:2a:4c:64:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
        Validity
            Not Before: Jun 16 02:01:02 2024 GMT
            Not After : Jun 17 02:01:02 2024 GMT
        Subject: CN=dbc9e74e18efb833dc6569807bd6e6dbcf17164d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:a5:e6:29:01:aa:b5:b2:bb:9f:b6:f4:46:
                    51:d2:4c:4d:f7:1a:f8:58:47:2d:ba:42:12:eb:8e:
                    c1:32:e3:ca:47:10:38:c1:53:48:e8:39:12:94:0b:
                    81:05:6e:eb:ae:f6:bb:b1:b3:23:f7:c4:ff:5b:1f:
                    70:3c:22:9c:6f:7a:f3:de:3d:04:d2:40:e6:b4:4a:
                    af:15:68:ed:0a:20:d5:09:c9:00:00:52:18:46:95:
                    be:20:cc:24:b2:b3:38:55:39:7d:0b:1f:c1:af:b5:
                    17:cf:78:5e:53:27:ae:36:33:25:68:52:11:28:10:
                    3b:8d:7a:c6:c8:84:ec:bd:e8:e2:8e:a5:fb:00:65:
                    b9:b1:69:95:a0:f6:0e:76:4a:bf:9e:ad:9e:11:15:
                    7a:98:f4:c9:e3:48:85:7a:0c:0d:91:a9:ac:69:b5:
                    98:ae:90:09:cc:5e:62:0f:cc:db:90:8c:0f:64:13:
                    51:ea:5d:97:55:07:d6:1a:bb:52:74:b5:de:12:61:
                    86:b4:1e:b0:a9:f3:79:bb:22:ab:98:37:31:0f:6f:
                    64:75:72:82:fc:23:d1:09:fd:9d:6a:54:94:24:83:
                    79:9e:7a:0b:6e:87:59:b7:89:43:4b:a3:ec:51:a3:
                    51:c1:8e:16:37:b9:21:85:0a:77:c0:21:a3:d1:4c:
                    50:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C9:E7:4E:18:EF:B8:33:DC:65:69:80:7B:D6:E6:DB:CF:17:16:4D
            X509v3 Authority Key Identifier:
                keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:72:28:a0:da:79:af:79:72:23:0b:4a:3c:9c:37:9b:c8:69:
         fa:89:af:3c:69:f7:ae:eb:4a:b7:a6:e0:ce:ea:b2:f6:c0:ea:
         4d:f7:a6:a6:f0:35:a1:30:e2:e0:d1:14:da:bb:f1:d5:f0:4c:
         4c:9c:ae:41:fa:91:b5:c1:c4:86:92:63:bf:a9:93:d9:05:a7:
         dd:a0:80:33:ae:d2:e6:87:56:ba:68:89:84:46:4d:d2:6f:22:
         d0:9e:a6:34:e8:98:24:0f:58:8a:b5:c7:10:dd:28:36:c7:9c:
         6f:03:5c:75:c1:5f:6b:b7:70:b1:2f:0b:a8:a2:03:08:bd:db:
         10:24:89:6f:4a:01:e5:a4:c5:bc:47:6a:a4:30:40:8a:74:d3:
         77:dc:94:22:e5:44:50:e3:0c:0f:93:71:03:2f:cf:30:3a:94:
         17:03:3f:98:22:ba:9c:8f:f2:1d:f6:80:7b:91:9d:1b:28:f6:
         64:58:b0:fc:c4:fb:b0:4f:28:e8:8b:e2:3b:61:6f:a0:2b:0c:
         83:93:42:b4:3a:33:94:0c:8a:6b:77:f2:f5:39:5e:86:20:49:
         13:10:d3:b9:af:17:08:32:14:d6:ef:0a:c6:43:73:b5:46:61:
         c9:49:51:28:97:9c:ce:01:4b:76:36:5b:8c:5c:8e:09:e8:8c:
         74:34:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:28 2024 by rpki-client on console-fra.rpki-client.org