Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File:                     mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier:          nLWLOaQPPHgSN5g0JNeA9xP16wb34T8j74NysCwXulc=
Subject key identifier:   11:F7:57:C7:FB:13:12:F9:7A:DD:D1:95:4F:06:95:12:98:2F:2A:F4
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer:       /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial:       01901FDB5A80E7A5DC54AA3D3A267240AD00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number:          096D
Signing time:             Sun 16 Jun 2024 07:03:07 +0000
Manifest this update:     Sun 16 Jun 2024 07:03:07 +0000
Manifest next update:     Mon 17 Jun 2024 07:03:07 +0000
Files and hashes:         1: Zx7whMfxAFKB8otpZuhDxzwj8EY.roa (hash: 8uhDmEJO68Ua0M1IzL6ONGj0xoatnxLOF2u4S7qR6KY=)
                          2: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: HjIt28ozpNHfKEIrOMCeUmlxCBw5SvK1hu4wIR7iGeM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:db:5a:80:e7:a5:dc:54:aa:3d:3a:26:72:40:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
        Validity
            Not Before: Jun 16 07:03:07 2024 GMT
            Not After : Jun 17 07:03:07 2024 GMT
        Subject: CN=11f757c7fb1312f97addd1954f069512982f2af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:37:ea:e6:55:33:6e:c0:d6:34:f6:43:08:7a:
                    ad:af:24:c3:cd:80:54:e5:15:ee:cb:a0:b1:10:a9:
                    68:ad:d7:4c:95:11:4b:df:a7:6b:a1:da:31:ad:d0:
                    7b:ad:a2:a3:0e:bf:f4:5a:b4:1a:72:66:87:65:1c:
                    37:d8:13:84:6f:7e:dc:b3:dc:be:b6:6b:74:cd:56:
                    a3:c3:c8:13:65:30:a3:c2:3f:cf:4f:58:2d:46:9c:
                    dc:44:03:a2:9a:47:68:be:9d:2f:b8:cc:2e:87:34:
                    ab:2f:0a:56:3a:fb:aa:e4:3a:b6:65:31:e3:35:1c:
                    ae:ea:ff:77:5c:95:06:3b:6d:56:93:95:a7:2c:f4:
                    8e:0e:11:08:3b:00:2b:28:d8:e3:9a:7c:f4:0d:50:
                    77:13:86:2a:20:20:f7:b2:83:a5:33:02:76:6a:3f:
                    8f:2d:0c:48:cc:1d:c1:e6:8f:c9:56:cd:72:95:2d:
                    73:a2:72:f3:80:f3:f7:8e:18:42:c5:b8:30:13:34:
                    ae:e0:ab:dc:fa:ae:58:86:16:38:46:0d:91:a9:a6:
                    24:3c:65:11:f6:18:ed:85:d2:d1:ad:b4:e5:71:6f:
                    eb:7c:c9:23:3c:e0:72:c7:f1:c7:cc:d9:f4:81:aa:
                    12:43:11:a0:8c:26:ee:3d:4a:93:ba:ca:06:6e:75:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F7:57:C7:FB:13:12:F9:7A:DD:D1:95:4F:06:95:12:98:2F:2A:F4
            X509v3 Authority Key Identifier:
                keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fe:65:66:ef:e1:56:c1:2d:26:b4:5e:34:cc:bd:9f:60:c6:
         a6:99:9a:20:c8:fc:16:4c:0c:a2:91:41:c0:31:52:ee:0d:f9:
         20:15:8e:d3:47:a0:a1:dc:65:25:3a:1e:9b:05:e5:da:b1:d1:
         cf:04:5d:d6:3d:d7:08:23:f7:60:e7:da:25:1b:10:c4:b2:23:
         14:fc:23:b4:a8:cf:0b:ce:d8:24:42:a0:4d:79:2e:04:c8:53:
         dc:8d:fc:58:59:e7:37:6e:ec:cf:80:51:39:aa:89:ff:70:c2:
         45:57:e9:8a:3d:3a:30:1a:06:fa:58:6f:bf:bd:ad:08:8e:89:
         0a:0b:d5:97:99:a1:74:ce:3b:7e:09:e4:0e:bb:f0:e1:2d:5c:
         53:20:23:74:f5:91:43:79:42:02:5a:19:df:da:30:ba:df:e5:
         fb:4c:17:e8:c5:1d:85:7a:26:c7:40:ec:c7:59:61:79:73:dd:
         a0:c4:38:7f:9e:67:64:58:31:e7:13:9b:49:18:85:60:04:38:
         0c:e3:22:ee:3d:93:21:56:46:f8:f5:fa:df:06:50:48:d3:1f:
         fa:9e:4a:4d:1d:3e:3e:6c:d3:b5:c9:30:f1:6f:9b:6c:bc:dc:
         f0:76:fc:25:3e:a6:0b:43:6f:10:6e:5d:91:bf:3e:9d:2f:7e:
         d6:e7:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:10:06 2024 by rpki-client on console-ams.rpki-client.org