Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File:                     gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier:          aHqlHHUDqvnsH3ye1erdlpYpFAOppQoe21M6UkQJraE=
Subject key identifier:   DE:9A:36:F3:D6:38:85:3B:2F:3E:88:2E:5B:29:EA:CB:98:D3:18:6D
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer:       /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial:       01901E59158DB186FD93697C469C5F352D8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 00:01:12 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:12 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:12 +0000
Files and hashes:         1: BsYzlC9om29XC5ZoIuyf-96MAJ8.roa (hash: 47pR6DHPCp/NxOO+ejNObshofeg6IoRVkhboYH5ljek=)
                          2: HR9-s-VGOApjR-AadUJwA-yk3sM.roa (hash: +Zjrqgl28OKDP5yPph8UosUs5wtus9PGKrl6mHwlylI=)
                          3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: ALbMQEIFxy3Cvbget4Uimn8tHkoddLS5A0KUoUU//+U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:15:8d:b1:86:fd:93:69:7c:46:9c:5f:35:2d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
        Validity
            Not Before: Jun 16 00:01:12 2024 GMT
            Not After : Jun 17 00:01:12 2024 GMT
        Subject: CN=de9a36f3d638853b2f3e882e5b29eacb98d3186d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:3d:9c:28:10:0c:f5:71:0d:20:96:04:fe:
                    45:9f:d0:9d:16:8b:e8:3a:09:eb:75:0f:8e:57:3a:
                    8e:f9:67:3d:2d:89:78:6e:5c:86:42:e8:63:6a:6e:
                    34:bb:93:d1:34:b8:86:75:35:3b:76:2f:e2:49:38:
                    69:19:4c:42:ed:72:ea:ef:00:fc:08:09:ea:c0:96:
                    7d:6b:1b:fe:ed:1c:c4:af:5e:6b:ac:11:6b:19:ce:
                    da:79:34:c5:4c:4c:46:03:e4:ed:34:3d:69:fc:45:
                    b1:37:05:ee:d1:ac:f8:11:89:8c:96:bc:53:c6:42:
                    20:e0:2d:ff:4e:87:13:bd:86:c6:90:17:5b:9f:5f:
                    3d:2b:d5:d2:a0:aa:c0:4d:b8:a8:27:c2:1e:72:bc:
                    f4:bd:ec:1d:80:d0:95:c8:41:55:66:84:69:f3:79:
                    37:de:71:ad:02:1b:8c:58:1f:8c:9c:32:6e:f1:3b:
                    56:5c:b4:b4:b2:2d:b0:d3:46:1a:d0:b2:56:41:d5:
                    ae:f0:be:c1:b1:f2:e2:d7:78:65:9c:7d:9e:ad:6f:
                    ee:4e:f8:08:2c:da:99:0b:df:82:12:8b:c8:ec:57:
                    53:b7:98:ef:af:36:bb:1f:a5:88:1a:2e:83:08:f8:
                    fa:9b:ae:ee:59:f1:2e:87:f0:4c:44:84:79:26:81:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9A:36:F3:D6:38:85:3B:2F:3E:88:2E:5B:29:EA:CB:98:D3:18:6D
            X509v3 Authority Key Identifier:
                keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:77:0c:9c:05:82:4c:ea:ea:ca:93:f0:e2:ee:bc:a7:62:72:
         38:24:fe:e4:9a:67:7e:76:d6:9b:7e:68:3d:04:6c:9f:f3:62:
         28:08:18:6c:96:6c:8b:00:de:d5:53:51:c1:e1:0b:30:d1:a7:
         54:e4:9e:e2:d3:24:43:19:6c:7d:3f:a5:ac:87:2c:00:f4:17:
         8b:ae:41:2e:25:9a:4c:c7:be:b1:af:a5:68:d5:2e:44:14:cd:
         a7:f3:f9:a0:e5:e9:78:fd:12:9f:03:6c:0e:9f:da:60:9a:26:
         16:29:57:cf:d0:5c:98:0f:1e:82:51:f3:aa:2e:a6:ed:56:7b:
         8f:2a:67:d0:71:bd:1b:c2:59:55:b8:23:77:4f:aa:6b:b2:a6:
         3d:9d:5a:2d:0a:c6:5d:c0:e4:41:d3:75:a1:09:c0:df:95:b6:
         7c:c1:47:97:85:c0:92:6d:11:9d:70:6a:59:71:e8:bf:94:f2:
         70:90:9a:0a:15:72:ca:36:b2:af:86:48:0b:3f:ab:ce:0f:83:
         ff:fa:65:76:e3:01:c8:1b:99:31:7b:a3:26:bd:4a:d0:7d:be:
         41:c0:65:2b:80:2e:49:3f:11:43:a2:c6:6a:62:cf:ef:f3:e7:
         5d:4a:89:13:15:1d:0e:de:15:b7:2b:8a:be:08:cb:05:e0:13:
         55:a3:1f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:57:24 2024 by rpki-client on console-ams.rpki-client.org