Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File:                     3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier:          ZJTx4gUQh61BnF+KO6aO65kpj05LTaiYK/8NxIGVcDE=
Subject key identifier:   77:7A:9E:06:09:F2:42:E3:A5:AE:72:D3:3F:16:6C:35:3C:85:70:E4
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer:       /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial:       01901E5892AB4C151F11D262172A186028FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 00:00:39 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:39 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:39 +0000
Files and hashes:         1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: kD/4j+c/CPeW0LYjAhze0xj4OCJCyd1AB7ScCvaf6iw=)
                          2: V0QdJIrM7Rtur5EoahPSUGHRgsw.roa (hash: RoMSsLp41wjQ/w0oDuKkH37UaR7r1RMGNQnnbGUQfDE=)
                          3: u9OTzlSQAALPibWsyPb7USMm2MA.roa (hash: RsBv/SXlM9E2eYsJflnmXCWbxR3T43I1HALbhab+cpA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:92:ab:4c:15:1f:11:d2:62:17:2a:18:60:28:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
        Validity
            Not Before: Jun 16 00:00:39 2024 GMT
            Not After : Jun 17 00:00:39 2024 GMT
        Subject: CN=777a9e0609f242e3a5ae72d33f166c353c8570e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:bd:d0:19:5c:ca:2b:f2:d5:10:1b:79:7d:
                    64:cc:40:6f:bb:40:9d:af:91:12:ae:34:db:63:7c:
                    e9:03:fe:ab:92:02:cb:e7:67:77:fb:9b:cf:cf:ce:
                    c0:65:8d:5b:a6:ba:e2:7b:bd:3e:6e:06:79:2a:ec:
                    b4:e4:53:d1:28:eb:ab:2a:4c:d7:e7:de:7f:4a:ae:
                    9a:27:f5:c7:d1:6f:aa:1a:be:82:a7:cc:98:a3:ab:
                    21:49:a7:1b:93:0c:9a:b0:2e:da:8e:fa:6d:b7:9e:
                    7f:8b:39:bd:38:01:1a:2b:b3:3b:41:fe:11:e9:ed:
                    55:d1:dc:b8:5a:39:89:4f:1b:f5:94:ce:1a:16:87:
                    ad:27:49:3d:8e:ca:8c:03:99:c7:09:b0:19:51:f0:
                    6d:8b:4d:45:fd:49:67:56:84:77:33:86:cc:e4:7c:
                    1e:92:e6:68:00:7c:7a:8d:36:9b:ab:70:a2:d2:ec:
                    4f:f8:f2:e8:a3:94:16:22:ba:9e:d5:97:0b:c9:43:
                    fa:88:f9:a2:9f:9b:af:08:41:d8:0b:73:19:f3:e6:
                    e7:74:2f:e5:97:de:4b:9c:7e:70:33:2e:fc:84:64:
                    0e:16:0e:73:76:c7:8f:cc:df:a7:59:c3:b6:86:2c:
                    28:29:4d:1f:6b:64:04:77:36:cc:c3:25:c1:47:e0:
                    db:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7A:9E:06:09:F2:42:E3:A5:AE:72:D3:3F:16:6C:35:3C:85:70:E4
            X509v3 Authority Key Identifier:
                keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9d:8b:6f:bf:04:a6:c0:0d:5f:74:e7:0d:e9:be:a4:56:55:
         5f:27:46:37:65:37:75:71:2c:32:fd:a2:87:c2:55:ad:dc:88:
         eb:d6:c2:fc:63:d8:3f:a5:21:60:22:7c:92:83:98:ab:22:2a:
         96:0c:84:40:29:b0:5c:fd:91:a9:43:53:4e:49:81:2b:69:da:
         7d:9e:34:11:cf:e0:34:a5:72:11:03:18:3b:7c:d1:66:ab:f1:
         45:c7:91:79:cf:ab:38:13:b5:26:8f:6d:0b:14:78:84:b5:df:
         f2:34:4a:c7:90:de:bc:b4:1d:76:f5:7a:28:77:c4:21:8e:5c:
         92:f8:79:57:30:36:ed:78:77:60:dc:ea:56:fc:f2:fe:49:33:
         c4:78:37:d8:c2:3c:ca:1b:cb:bb:ea:d3:13:21:83:72:34:a0:
         08:48:f6:cf:b0:23:75:e3:fc:d8:65:ac:65:6c:66:a2:4c:50:
         bf:3a:48:16:4b:96:32:31:d8:20:0d:fa:aa:17:f6:78:20:62:
         17:fd:5a:41:90:3e:d5:39:63:ea:50:62:66:84:8e:c3:80:88:
         6e:64:84:4e:5a:32:71:6a:6d:90:c1:65:8c:53:1a:21:2b:7c:
         ef:b0:be:38:19:7b:c0:37:73:b8:63:4e:33:98:e3:7c:ca:74:
         53:71:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:16 2024 by rpki-client on console-fra.rpki-client.org