Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File:                     hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier:          AbWd3PyEj7JFO+vZEyMzu4YlPWfQ2YW7b56GW0qZjRg=
Subject key identifier:   B9:B4:94:C4:1E:7D:53:21:20:29:E8:02:82:15:9C:8C:65:94:BE:11
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer:       /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial:       01901DEC50D61674B4D4CD89F45871CEEA6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 22:02:24 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:24 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:24 +0000
Files and hashes:         1: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: eDr3jOb2WZQ06P2TZi7rX/2qB793jeaYjTJPmh43+9k=)
                          2: lXSMv5TFzlF7U2Yh0nY5GDwpj-c.roa (hash: FKMUlxVgcBTYivayVo/DvcyzO/qRZ0ZmrGpT6jFmeho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:50:d6:16:74:b4:d4:cd:89:f4:58:71:ce:ea:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
        Validity
            Not Before: Jun 15 22:02:24 2024 GMT
            Not After : Jun 16 22:02:24 2024 GMT
        Subject: CN=b9b494c41e7d53212029e80282159c8c6594be11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:b4:1b:c0:e9:95:4b:65:c7:d7:f6:ca:45:
                    d0:54:6a:37:c6:ae:cd:cb:bd:e6:05:e0:58:f1:3b:
                    f4:94:bd:1e:44:d7:ec:0e:bb:66:68:9c:0d:e4:05:
                    b5:8b:88:63:8b:13:60:51:38:3d:32:00:e8:ba:a2:
                    21:0f:41:8e:7e:b4:24:6d:53:ad:58:f8:6f:53:3c:
                    3f:39:a9:37:cb:a7:d4:43:e5:fd:6b:d6:03:a9:83:
                    d8:27:9d:41:b3:ad:b3:e8:f1:74:5d:59:43:14:cf:
                    09:d8:b5:dc:07:08:fb:ec:94:e4:cf:15:25:eb:12:
                    ec:66:7b:54:7c:9a:23:f1:ac:59:18:c3:8f:68:4d:
                    af:a7:9b:60:cf:59:6c:f4:f6:f0:11:f6:f1:b3:cc:
                    4b:f0:a2:4f:f0:dc:32:f7:4b:c5:c6:02:05:62:ef:
                    21:d1:7c:9a:c2:96:b3:25:0a:28:63:47:6e:19:3a:
                    69:1c:09:36:4c:d7:ee:14:aa:bf:c7:a3:83:9e:7c:
                    e2:64:53:f0:fc:98:ef:54:b1:91:8f:4a:a9:db:8b:
                    42:14:54:9c:61:03:86:4f:50:b3:ae:47:bb:a8:b6:
                    b7:73:48:55:df:b3:1b:f7:28:ad:c2:be:c7:dc:8a:
                    ab:21:6a:86:c6:bf:94:64:b6:ed:ee:81:25:c9:a8:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B4:94:C4:1E:7D:53:21:20:29:E8:02:82:15:9C:8C:65:94:BE:11
            X509v3 Authority Key Identifier:
                keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ca:16:a2:62:3e:3b:f4:e8:9a:92:80:f1:e7:8c:33:ac:71:
         89:70:e0:51:3f:3b:32:90:f0:b6:91:31:f3:f0:18:23:b9:e5:
         a1:16:f7:b0:47:fd:e0:92:d6:b2:fa:ff:1a:4a:e0:13:be:2b:
         1b:ae:5c:ee:2c:2f:d7:5c:de:08:c5:83:1d:26:e9:c0:8b:ba:
         ac:a3:2e:6d:9b:d8:07:e2:d1:1b:f8:cf:25:86:d7:ca:22:9f:
         7b:41:78:65:b5:a7:60:0a:b2:a2:d8:0c:9b:11:f1:c7:cb:e8:
         c1:9f:9a:50:d4:1d:fc:4e:75:45:78:ba:80:be:25:8a:a2:f9:
         8d:b2:b7:fe:0d:27:1c:38:7a:17:b6:64:6a:84:8e:c4:8e:5a:
         8b:c9:02:ec:96:b0:86:7d:65:22:22:f7:53:d5:bc:80:0e:01:
         d7:d8:24:ca:9a:8e:13:ff:f4:0d:0c:43:b3:3f:14:78:1b:e9:
         d9:e9:12:3e:05:2b:fb:24:d0:05:45:9a:61:63:0c:15:9e:a2:
         7c:79:be:a4:1c:4e:f6:95:1b:cf:0b:c1:1f:78:f2:06:70:f9:
         0c:2b:11:8e:51:7a:74:cc:6e:66:07:3f:ab:c4:f5:85:ff:e0:
         7d:f4:d6:5f:4f:69:b2:74:63:7f:7d:a0:1c:2f:21:97:fa:b8:
         6c:02:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:29 2024 by rpki-client on console-fra.rpki-client.org