Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
File:                     XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json)
Hash identifier:          LRhJ22kp9hSbHOGRZnMjmbQzcaq+vd0J1qTn9O4JdSs=
Subject key identifier:   B7:81:72:38:91:B8:31:0F:18:6B:D6:AB:49:26:4C:D6:11:9B:C2:01
Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
Certificate issuer:       /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Certificate serial:       01901DEC60419570D95DB2C3C6257EA6F5F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
Manifest number:          0C60
Signing time:             Sat 15 Jun 2024 22:02:28 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:28 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:28 +0000
Files and hashes:         1: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: SCCuZ5utWA9NXd0i6rQywRdnA4PgeanMY4enddcSGrE=)
                          2: dVbTu2SOjU4JE9vscXTIHhfprUY.roa (hash: 6VBiel9yY0a5R16+nxgkmmj61LnnPu4Hd2sctltmoLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:60:41:95:70:d9:5d:b2:c3:c6:25:7e:a6:f5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
        Validity
            Not Before: Jun 15 22:02:28 2024 GMT
            Not After : Jun 16 22:02:28 2024 GMT
        Subject: CN=b781723891b8310f186bd6ab49264cd6119bc201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:55:be:9f:aa:bc:73:ca:ae:87:6c:2e:a3:cf:
                    c6:dd:a1:a5:d9:78:be:65:7c:d2:73:cd:b3:46:05:
                    d8:d3:b1:76:15:91:1c:ac:49:08:bc:ae:8d:45:f4:
                    cd:c0:10:97:79:f9:54:29:3f:76:85:4d:ae:75:21:
                    b8:19:7d:07:f3:2d:f1:19:ed:8b:f9:45:57:3e:61:
                    cc:b5:d4:91:aa:54:e3:e6:b5:5b:a6:fc:71:69:68:
                    64:65:50:ba:32:2e:75:6d:a1:a7:bc:65:8c:c7:7d:
                    76:6d:76:39:e7:3d:87:3e:ac:94:01:fb:9b:4e:28:
                    20:1c:fe:0c:93:d0:bd:21:91:95:c0:43:56:cd:30:
                    cf:87:b6:eb:6d:a8:b8:1a:80:37:ce:7b:f4:f5:74:
                    89:88:e0:b7:22:dd:c2:e3:1f:51:8f:40:61:af:8a:
                    d4:fd:d0:7a:0b:71:2e:78:82:77:a1:f9:21:9a:ca:
                    33:32:20:ac:01:65:0e:e8:b6:b7:d1:38:2d:66:65:
                    0a:a4:07:56:ce:b9:d1:19:b8:56:59:77:ca:99:2e:
                    98:78:ed:ad:0d:59:6d:76:ee:33:3d:c1:6b:f0:d7:
                    23:5b:d4:98:13:b4:4c:ae:0b:68:dc:53:be:45:5d:
                    6c:96:45:3f:ea:63:7a:43:75:f4:6b:50:b5:2e:a6:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:81:72:38:91:B8:31:0F:18:6B:D6:AB:49:26:4C:D6:11:9B:C2:01
            X509v3 Authority Key Identifier:
                keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:75:77:f9:44:a9:ef:3b:5e:4b:71:dc:27:63:44:3d:0a:6e:
         e1:d3:52:3e:0f:d4:7c:3e:40:b1:b8:57:66:dc:c6:d6:f5:a0:
         af:ef:4c:03:c1:e3:ce:e4:9d:38:77:af:56:a1:8d:f0:2f:06:
         b8:30:c2:f3:a5:9c:c9:bd:ed:81:ca:d6:b3:20:45:88:91:43:
         63:01:af:52:d5:eb:92:7c:5c:4e:7a:42:a9:d7:69:08:cd:c1:
         2b:c9:53:fd:0a:f1:73:b2:39:de:e2:4b:02:3e:62:23:8c:89:
         58:f6:fd:4e:16:7a:78:5f:4c:a8:70:cd:be:16:6c:1b:11:d6:
         7d:1a:d1:7a:95:88:a5:76:0e:bf:05:33:a7:57:98:5d:c5:df:
         02:ee:c2:c2:fa:33:16:00:67:8a:f8:f6:52:a7:1c:3e:b9:d2:
         30:e1:3e:cd:59:b5:60:33:73:09:96:95:30:2c:09:76:bf:7f:
         f3:b9:26:22:59:9b:5c:6b:a6:f9:c8:0b:23:50:62:3f:51:2c:
         d4:9a:fa:80:5f:a1:8a:ba:23:4a:5c:ed:86:11:51:1e:e6:21:
         9b:eb:0d:ba:ea:97:25:8f:b0:88:fd:41:a0:f6:b3:da:eb:03:
         fc:1e:45:bb:19:d5:6b:60:de:99:4a:16:38:e7:9d:bb:f4:8b:
         3a:30:6d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:48 2024 by rpki-client on console-fra.rpki-client.org