Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File:                     1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier:          710e8S3OpIsFCjpN7al1xrgyCLV6CgZuvcXXYuFtOMU=
Subject key identifier:   12:A7:02:FF:6C:A5:52:40:AB:29:01:65:A3:98:85:76:3B:0C:53:CE
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer:       /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial:       01901BFD2F4B79B3DDF083772EB7D4D52F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 13:01:35 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:35 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:35 +0000
Files and hashes:         1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: wuBWuuJKYAtLVr8i5/EF6GF5xPDDCFGqRIK6+esovzI=)
                          2: u62AZGUttyiT453W6KEPJY03s1U.roa (hash: MpK4Ad2PwCKoGin1TR79fiuQVcurHe4dxamUO9oecI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:2f:4b:79:b3:dd:f0:83:77:2e:b7:d4:d5:2f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
        Validity
            Not Before: Jun 15 13:01:35 2024 GMT
            Not After : Jun 16 13:01:35 2024 GMT
        Subject: CN=12a702ff6ca55240ab290165a39885763b0c53ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:87:1c:5d:cc:eb:89:2e:5b:4e:78:18:d0:
                    d7:38:87:05:3c:84:61:d9:65:b5:eb:2a:72:4a:96:
                    c3:b1:11:0d:63:27:c9:cc:71:03:a4:1c:59:fb:f9:
                    c9:d1:5c:ff:27:e5:6e:3f:bb:11:a0:f9:5f:4d:94:
                    44:e4:c8:8a:6f:5a:ec:08:25:b2:10:c7:14:e6:ad:
                    d9:3b:ba:56:07:0a:68:85:94:7d:3c:28:a8:8a:ea:
                    e6:f3:bb:4b:19:46:35:03:46:7a:5b:9a:07:33:10:
                    51:5d:a5:f2:7e:0e:5b:4d:11:4b:78:ee:49:ab:2b:
                    30:35:56:d2:31:81:69:73:fd:14:21:6b:a7:7d:f4:
                    9d:73:3f:16:c8:ee:14:db:da:e9:bc:71:e8:dc:ae:
                    c7:1a:29:76:a7:49:36:93:0e:b6:47:d8:d3:c7:36:
                    e8:d9:2e:f9:71:7f:43:b7:60:50:d1:e2:ac:8a:d9:
                    c9:11:6d:2f:df:21:e9:4a:8b:bc:8d:43:61:5b:73:
                    c8:8c:c9:3a:61:ff:fc:4d:43:01:58:55:7f:d7:72:
                    bf:2f:83:be:3f:68:01:7a:7c:a6:7d:eb:22:51:b1:
                    04:3b:44:8d:10:f0:4f:6e:bb:38:7c:c3:a8:4e:13:
                    81:9d:33:8d:72:09:29:10:4d:9f:e5:2e:7f:30:fd:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A7:02:FF:6C:A5:52:40:AB:29:01:65:A3:98:85:76:3B:0C:53:CE
            X509v3 Authority Key Identifier:
                keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5f:85:11:99:59:b4:57:33:3b:b5:70:c0:cb:6f:18:60:5f:
         ba:90:08:65:49:00:31:a3:e2:13:98:8d:7c:05:08:1b:e5:eb:
         60:81:86:18:5a:b6:4f:62:4d:76:bc:6d:f7:4f:d9:f0:db:55:
         e7:9e:5a:1c:9b:4b:b6:fc:6a:15:65:4f:b1:cf:33:14:2e:99:
         7f:27:74:73:4a:b3:78:be:57:89:32:f6:9c:32:05:c2:82:b1:
         39:0a:dd:ef:e7:8e:22:15:1b:15:3f:35:b8:2d:a3:c5:f0:3c:
         91:8c:e8:f6:78:43:37:2f:b4:df:35:5f:d9:17:cc:ea:7f:60:
         04:44:c3:a3:d5:39:fa:85:e2:8d:96:a5:59:e5:17:65:ea:6d:
         db:d4:2e:2e:94:9a:eb:45:39:30:3f:32:e8:5d:30:f0:23:87:
         8f:88:8a:99:c0:76:c6:87:37:38:4a:c4:2e:60:4e:d1:32:f0:
         cd:4a:ac:b0:bc:08:9f:2f:d9:d9:18:c5:01:ba:9f:28:0e:09:
         5e:cd:1d:1d:f7:4e:1f:46:94:8f:d1:63:b0:9f:74:5c:61:fc:
         11:8d:df:ac:f3:54:56:46:29:7f:76:67:4e:fb:63:73:17:42:
         e6:4d:a1:44:f4:f8:93:d9:e6:82:ab:5c:9c:ae:d4:87:61:e8:
         bf:eb:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:49:58 2024 by rpki-client on console-ams.rpki-client.org