Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
File:                     I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft (raw, json)
Hash identifier:          A/6p+Hc7Px2/5A6/Sf7yhB1sdtoRNwqnDfjz5DmAtcw=
Subject key identifier:   1D:FC:F5:1A:42:B6:5F:1F:CD:D1:16:F1:03:E4:74:BC:07:96:82:51
Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
Certificate issuer:       /CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Certificate serial:       01901D466ECB36E85D29CF4AD46132C797B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 19:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:13 +0000
Files and hashes:         1: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl (hash: M1shMh2pMzZfqugXYvWNzjNPM//3pwipo2zeNMPY5Fw=)
                          2: RhLlNCw6qtpA4ux3xjQBOcMl7rc.roa (hash: 6gKAvupDMRAyfbro1TkW10sjIg2UaJNJ9gnashg98fs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:6e:cb:36:e8:5d:29:cf:4a:d4:61:32:c7:97:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7
        Validity
            Not Before: Jun 15 19:01:13 2024 GMT
            Not After : Jun 16 19:01:13 2024 GMT
        Subject: CN=1dfcf51a42b65f1fcdd116f103e474bc07968251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:f7:a8:f7:4a:3f:31:f8:bb:27:db:60:6e:
                    26:80:56:08:e9:87:94:ba:25:10:75:fc:27:a2:7d:
                    36:64:b9:f0:71:36:7d:25:48:eb:64:22:56:83:d1:
                    8f:99:1d:64:0a:96:93:75:2d:9d:74:c6:cb:45:97:
                    a1:93:2d:8f:56:3e:11:d3:1a:2e:b3:21:18:bf:08:
                    66:9c:81:61:07:d7:28:df:18:76:de:5e:f4:77:04:
                    34:2e:db:fb:91:08:34:fc:d1:b9:4e:f9:c7:df:8a:
                    da:dc:70:99:ff:79:7f:6a:1a:8a:20:eb:1f:87:94:
                    e0:63:0c:81:00:5f:68:b1:3c:f2:36:f5:fb:3e:33:
                    a5:fb:2b:63:5c:ab:4e:e2:f1:ef:57:40:4a:b0:d0:
                    d4:9e:54:c2:05:29:81:ea:73:2d:cd:a0:ed:22:ef:
                    7c:52:d3:7e:50:4c:c2:d2:12:3d:5f:c4:31:2e:1b:
                    72:7c:f9:6a:99:d5:82:a4:93:04:bd:90:38:a9:a3:
                    d5:97:76:92:37:c1:77:dd:96:45:5a:41:5d:03:69:
                    ad:b2:d4:8e:51:1a:f4:b4:d8:6a:b1:6c:74:26:af:
                    f1:f7:30:7a:15:ea:d9:ee:78:71:ee:65:a3:60:ab:
                    00:9f:65:d0:9b:45:b4:1e:93:28:94:1c:e0:38:06:
                    bc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FC:F5:1A:42:B6:5F:1F:CD:D1:16:F1:03:E4:74:BC:07:96:82:51
            X509v3 Authority Key Identifier:
                keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6e:29:f0:04:5e:16:c3:67:db:f6:4e:7b:74:b9:26:6b:ff:
         15:71:10:40:0f:65:dd:87:ee:e0:cb:9c:bd:7d:95:04:6e:d5:
         b2:9e:14:87:2d:a2:8d:3f:fa:ac:0f:36:07:24:1a:93:b3:37:
         18:ba:06:72:09:06:bd:c2:a9:97:34:40:04:69:e6:1a:a5:8f:
         40:2d:94:de:f7:1a:a3:5f:33:4a:de:cd:15:03:4e:01:5f:00:
         53:e8:d6:d9:b8:96:36:2e:b8:d1:e3:75:e1:ff:e0:10:92:cc:
         28:78:4b:7e:ef:12:14:a2:26:64:90:60:89:61:0e:d3:2b:c7:
         eb:63:f0:a1:d8:ce:1c:01:f6:17:e3:d2:86:9e:81:47:3a:8f:
         d0:64:7f:73:90:3f:a4:7e:8b:be:16:31:1d:6b:af:94:3e:e4:
         ed:5c:a5:6d:2a:d4:54:c5:e7:62:89:15:1d:5c:b3:a8:e2:5c:
         44:f4:36:a4:8b:cc:a8:f0:d0:4a:41:53:8e:1f:e0:dd:bb:71:
         1d:d7:02:eb:d2:c5:18:2c:7f:2a:fe:81:77:6b:1e:f7:c6:d0:
         2f:7c:3f:21:ea:76:ad:cb:80:32:cd:2b:9f:36:f6:18:e3:00:
         7c:09:ce:80:3b:61:40:15:e2:8f:f9:16:d4:66:b3:a3:10:23:
         c3:01:ca:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:07:15 2024 by rpki-client on console-ams.rpki-client.org