Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
File:                     925jlSS9okW5LbTLvKVr06ekrgw.mft (raw, json)
Hash identifier:          MVVjFQkXW0rk0WdKoWa2m4aPKrn3wpOSqUyJ3AMEhlE=
Subject key identifier:   77:F4:0C:8F:D0:BC:7F:5B:92:2F:5D:4C:CC:E2:1A:D3:28:BF:6D:56
Authority key identifier: F7:6E:63:95:24:BD:A2:45:B9:2D:B4:CB:BC:A5:6B:D3:A7:A4:AE:0C
Certificate issuer:       /CN=f76e639524bda245b92db4cbbca56bd3a7a4ae0c
Certificate serial:       01901E58FF73C65331D6FEE4CB14441E5DFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/925jlSS9okW5LbTLvKVr06ekrgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
Manifest number:          020D
Signing time:             Sun 16 Jun 2024 00:01:07 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:07 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:07 +0000
Files and hashes:         1: 8dny7u5gUz1Q11qFQNW4vNRdILY.roa (hash: DlDoMPutjlcMxl3gPP/fwyEvZjtLqrc0ErTlaArGTKE=)
                          2: 925jlSS9okW5LbTLvKVr06ekrgw.crl (hash: /eIK2uEhbj2azG/zjyr2Pbbi/tmoQdRXPWLv+p/OSZU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/925jlSS9okW5LbTLvKVr06ekrgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:ff:73:c6:53:31:d6:fe:e4:cb:14:44:1e:5d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f76e639524bda245b92db4cbbca56bd3a7a4ae0c
        Validity
            Not Before: Jun 16 00:01:07 2024 GMT
            Not After : Jun 17 00:01:07 2024 GMT
        Subject: CN=77f40c8fd0bc7f5b922f5d4ccce21ad328bf6d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:c1:b1:44:73:36:a3:46:e8:62:1b:56:78:
                    c0:ba:1a:34:83:d4:8b:2f:28:12:ef:b9:3d:19:81:
                    38:1c:7e:6e:ba:41:32:67:7a:b0:56:00:78:66:7c:
                    36:18:68:e3:73:ae:5d:aa:e0:14:f8:5d:f6:12:88:
                    5c:0b:17:70:0a:bd:68:3f:5c:00:f2:44:f3:0f:7a:
                    a4:6f:1b:94:5c:1c:fb:26:3f:e3:ee:d0:5a:37:6f:
                    45:69:12:65:1f:7f:88:1f:49:d4:1a:ea:30:d0:55:
                    bb:70:2f:e5:98:92:60:ed:c3:8e:cb:1c:ce:36:8b:
                    a5:3f:4d:e0:dd:2f:64:fe:30:19:68:04:38:7b:ca:
                    bc:91:d0:ef:30:e8:d7:d5:70:1d:0e:82:ff:de:86:
                    9f:ad:e0:c8:74:25:26:df:4b:dc:cd:49:96:04:6a:
                    ab:4f:82:c5:5b:a3:a3:2a:3a:74:e9:fd:a4:3e:ae:
                    03:f2:70:63:db:68:03:fa:dc:d2:98:eb:8b:54:05:
                    17:ad:b2:62:6f:34:a2:0f:17:c7:66:ce:4c:3b:9f:
                    bd:22:7d:ad:86:41:b2:9e:bc:aa:7b:5d:30:0c:39:
                    05:8b:5c:49:d1:b4:30:a3:30:4b:0d:aa:b8:76:2c:
                    70:0f:a0:1b:7c:1a:c9:7f:fd:09:15:b2:f9:c7:c9:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F4:0C:8F:D0:BC:7F:5B:92:2F:5D:4C:CC:E2:1A:D3:28:BF:6D:56
            X509v3 Authority Key Identifier:
                keyid:F7:6E:63:95:24:BD:A2:45:B9:2D:B4:CB:BC:A5:6B:D3:A7:A4:AE:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/925jlSS9okW5LbTLvKVr06ekrgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6c:22:e0:df:45:05:d3:7e:f3:38:98:79:45:26:a9:cf:42:
         74:02:c0:0f:ed:02:3f:ea:c4:c1:2c:12:a5:88:a9:c7:41:fa:
         93:ce:fa:22:d4:ce:32:04:1b:05:1b:30:e1:ca:08:12:ec:6d:
         e3:66:4c:9c:79:80:9c:b5:a8:de:e3:8f:dc:de:44:bc:77:ca:
         37:29:7c:6e:bb:2a:09:c6:3e:98:4b:d0:42:04:5b:51:91:f9:
         54:ad:3c:ba:5c:cb:2f:77:96:d6:04:2b:91:7c:83:c2:a8:40:
         64:db:8f:8c:94:cc:04:df:a1:eb:1d:1e:9a:13:5b:80:4e:db:
         9a:eb:22:44:4a:ee:db:86:7a:5c:c7:2b:1d:5c:21:b1:fe:de:
         e6:36:a0:9b:5f:b4:b2:39:f6:47:2f:4e:c0:ce:8f:65:9a:c7:
         6f:0c:a5:43:41:e4:38:a8:d6:b4:71:7d:db:11:37:6c:bc:fa:
         e1:33:49:a6:ea:27:fe:40:da:30:10:6d:d5:87:26:1a:e0:36:
         e3:1e:e7:2f:b0:b0:6c:6e:db:28:bc:be:30:e4:f3:00:b7:13:
         93:e8:c8:4c:ce:9d:ee:52:1d:d1:2b:c4:b4:a2:c0:71:91:20:
         fc:b1:4a:40:25:4e:b8:73:bd:e7:e3:8d:83:f5:f1:8d:75:bf:
         ae:2c:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:58:33 2024 by rpki-client on console-ams.rpki-client.org