Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
File:                     FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json)
Hash identifier:          trCsYSH6/oPLyk3a+rPUyjWJGagT12G0VZ/EodHIIFk=
Subject key identifier:   63:68:3D:29:72:AC:E9:C6:9D:68:B2:F2:13:31:36:45:F7:F1:B9:6E
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Certificate issuer:       /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial:       01901DED6E976BF73EEEA75EC69FE13DDEE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:03:37 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:37 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:37 +0000
Files and hashes:         1: 4ni_zOrgKW-ZSk3C8gARNAmkf5g.roa (hash: P8qHKjktwY0LMJk2kNSxIkV5VZfMxq6978hedImOnLo=)
                          2: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: Z4JYMKFyUfErX6CPhTIdLlKmOSqGum7mCjzDk1/paYM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:6e:97:6b:f7:3e:ee:a7:5e:c6:9f:e1:3d:de:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
        Validity
            Not Before: Jun 15 22:03:37 2024 GMT
            Not After : Jun 16 22:03:37 2024 GMT
        Subject: CN=63683d2972ace9c69d68b2f213313645f7f1b96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:c0:dd:17:52:f1:46:9e:6b:e3:79:b3:63:
                    e9:48:f9:47:dd:2d:11:a4:0e:81:4f:ac:30:66:85:
                    e3:98:bb:f0:74:50:c1:71:33:81:d4:ef:5b:2e:1b:
                    04:ef:60:c0:f0:df:70:94:43:fd:7e:52:02:e9:e9:
                    1f:d5:d0:11:2a:f4:71:f6:76:c7:97:98:f7:5a:0e:
                    c5:7a:0f:b7:12:8f:09:f7:68:0f:99:71:44:b1:a8:
                    7c:ad:26:82:80:c6:52:92:8d:f1:65:26:8b:8d:2a:
                    31:6b:6b:01:01:5d:f1:be:28:1a:9e:01:6f:a8:af:
                    3d:ec:0f:8b:d3:c5:69:14:17:00:55:ad:d9:2b:1f:
                    cc:53:d7:90:a2:04:6f:59:4d:b8:6f:5e:35:e1:19:
                    bc:ca:7b:93:fe:4c:a3:b7:73:b7:d5:9f:38:fe:60:
                    6d:9d:b0:09:16:bb:cc:25:a2:05:28:57:0e:eb:bd:
                    36:a1:b6:c8:ab:23:f4:54:34:b3:e0:08:cf:7b:0e:
                    90:12:77:a4:70:ff:ce:b9:19:2b:54:57:67:45:a6:
                    d7:1c:26:cf:37:eb:2f:ab:cb:86:43:11:2b:e5:aa:
                    b3:95:f6:54:0b:3c:d5:3d:0f:03:d6:75:55:05:51:
                    09:e5:19:64:fe:90:36:bb:00:23:21:d7:b1:93:cf:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:68:3D:29:72:AC:E9:C6:9D:68:B2:F2:13:31:36:45:F7:F1:B9:6E
            X509v3 Authority Key Identifier:
                keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8d:67:35:2d:0d:9a:bc:d7:92:a4:2e:d3:17:22:07:32:47:
         54:eb:1b:ed:85:c2:89:27:bb:a8:90:e1:a4:34:ae:93:75:66:
         0f:a0:26:3e:d0:ca:8f:f5:f1:0d:7e:1c:fb:1a:6f:b6:45:ef:
         65:89:a5:a0:3f:2c:6b:b8:c1:e8:20:8f:50:95:08:a5:f1:2a:
         c9:8b:f5:e3:2f:7e:20:1a:31:31:51:28:89:96:e0:09:7a:4a:
         2c:43:ac:90:9a:95:c4:2b:ba:4a:ca:61:b7:ba:4e:6d:cc:16:
         ce:f5:ee:63:81:54:3a:da:21:44:3c:41:5d:e0:cd:a1:ba:8b:
         4b:13:5a:55:95:31:ef:8b:a0:87:ae:e5:4e:79:59:98:cb:b5:
         ce:cc:14:dc:4e:69:d3:47:e2:ea:01:c0:9e:c9:fa:32:7c:5b:
         8b:7e:73:7c:16:9a:2b:db:e4:e4:6f:ae:30:3b:82:ea:c2:47:
         d0:fd:13:c2:7c:c3:57:37:62:7f:b6:fc:0a:a0:51:21:b8:1c:
         1d:c8:1e:ec:50:08:9e:b5:10:59:4f:aa:c4:4f:10:6a:19:0d:
         d7:88:31:43:db:3a:5d:5f:39:dc:77:f3:fc:9b:7f:8d:1a:90:
         63:2b:1b:0d:3a:38:2b:fb:61:66:e9:68:05:68:f8:6f:f9:69:
         7a:a8:1c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:39 2024 by rpki-client on console-fra.rpki-client.org