Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File:                     CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier:          a7IJXQM7Qq44SgFtF3zj8OkHS/j/XS9I565H0w1FRBo=
Subject key identifier:   C7:31:34:2E:21:7F:07:58:33:4C:97:FE:D0:B1:6F:51:1B:41:8C:0C
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer:       /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial:       01901EC6E6E88216030C2E0D2EF1A6056A64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number:          0960
Signing time:             Sun 16 Jun 2024 02:01:10 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:10 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:10 +0000
Files and hashes:         1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: 5QNENYpdqOx7uGNT5bNtbV2l/ltTqkBws2OrvA2ubxQ=)
                          2: yTCc_HMCH7Q2zYEFTsOgCbl9bbo.roa (hash: pIx8c+wQT/5xdKm8r3ndoFmFj2bvAgHUWUpl3GwWhbs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:e6:e8:82:16:03:0c:2e:0d:2e:f1:a6:05:6a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
        Validity
            Not Before: Jun 16 02:01:10 2024 GMT
            Not After : Jun 17 02:01:10 2024 GMT
        Subject: CN=c731342e217f0758334c97fed0b16f511b418c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:3c:95:99:22:73:eb:39:85:dc:69:b0:45:
                    34:6e:33:83:93:d9:a9:eb:d8:0f:da:8c:9a:3e:df:
                    11:a9:df:bb:03:56:2b:7c:87:2b:5d:6e:e6:65:53:
                    07:74:18:46:7f:69:34:01:6e:1e:5b:df:d2:d2:31:
                    2d:a9:96:19:27:95:e3:40:cc:b8:04:af:b4:a5:09:
                    a6:1a:77:9b:09:ad:86:3c:49:bc:c5:e2:b3:fc:92:
                    f5:83:43:e9:52:14:a1:31:c3:ce:ee:a7:a6:35:2e:
                    cd:22:24:40:93:30:65:c8:73:cf:4b:73:43:ff:23:
                    09:44:85:94:d8:7c:93:41:bc:d5:80:a1:ca:dd:55:
                    74:0a:09:eb:37:37:09:d3:f9:32:05:0e:78:8b:b5:
                    81:84:b7:e4:8f:36:f8:92:c9:fb:e1:91:35:d3:88:
                    81:e5:a8:81:be:15:eb:84:78:5b:92:99:f7:b0:95:
                    86:1e:c2:04:91:a0:67:47:11:b7:b2:15:27:40:ca:
                    b6:32:56:f0:bc:8e:1f:00:80:b5:7e:48:2b:e6:8f:
                    5e:82:28:12:5e:9a:98:27:f1:de:e2:74:74:8f:b5:
                    49:e7:c4:c7:c6:53:8c:e3:fb:69:c4:82:d2:c4:69:
                    7a:a5:ad:94:6c:0c:23:8f:f1:43:df:49:80:b6:56:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:31:34:2E:21:7F:07:58:33:4C:97:FE:D0:B1:6F:51:1B:41:8C:0C
            X509v3 Authority Key Identifier:
                keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:54:1d:f7:4c:4a:66:32:eb:36:e3:83:64:3e:8a:7d:aa:97:
         68:3e:64:80:29:9d:af:2a:87:4b:62:af:59:69:de:ba:3a:01:
         09:8d:60:98:cc:60:8b:8a:2b:0a:74:14:d3:8e:54:ec:3d:66:
         60:81:c2:a0:d3:ae:fd:1a:17:ca:63:be:47:33:11:a9:6c:5f:
         6c:fd:61:0f:45:c3:ff:63:20:93:50:5a:67:16:ea:c3:e2:27:
         cc:5b:ca:08:7e:32:66:2d:46:7e:e1:74:a5:65:2e:c9:af:fd:
         18:d8:98:b6:13:7c:69:2c:05:22:5f:68:89:73:7a:09:b5:6d:
         28:b4:d6:29:d4:4b:fa:ac:9a:7f:ea:cf:1e:ad:f8:6b:95:88:
         7d:d3:ca:2e:0d:89:c7:b4:89:0b:72:f2:6a:12:fb:01:98:bd:
         97:50:58:b6:47:3c:d6:de:7a:b4:a9:65:16:f2:50:44:9f:46:
         e4:d0:ff:6f:39:43:1a:c2:32:c8:72:32:79:ab:22:cc:ac:73:
         98:15:fe:f5:b1:8a:94:e9:47:cb:ce:58:6a:99:2c:17:f0:65:
         b2:9d:6e:7b:ea:67:aa:be:ba:fb:5d:1e:4e:94:31:1f:14:e2:
         a3:3c:71:16:72:dd:d8:84:05:f6:ec:95:a5:56:d8:cd:ae:78:
         83:2e:6a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:57:41 2024 by rpki-client on console-ams.rpki-client.org