Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
File:                     c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json)
Hash identifier:          aWk8SuZWmvVjVY+e0SLYjCm9x1beIuTog2UuecHrZCQ=
Subject key identifier:   E5:33:0F:E9:11:AF:04:F1:70:DC:51:35:AD:C1:CD:C7:91:87:D1:25
Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
Certificate issuer:       /CN=739f3ebcd26792b913c1dcb9941996e998f16078
Certificate serial:       01901EC6C944B7682BCF7E5B8636A1F4D658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 02:01:02 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:02 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:02 +0000
Files and hashes:         1: SSWHfNgtXo5XydTwdhtp9QqoS7A.roa (hash: u26T/+a9I6BugWYtgTMHBX9REIBCNvOTtefkk5fgLgk=)
                          2: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: QrXfROR8GbpgvNb66jRPceOpoyl0gZtxr2qYDCfE0Lg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:c9:44:b7:68:2b:cf:7e:5b:86:36:a1:f4:d6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078
        Validity
            Not Before: Jun 16 02:01:02 2024 GMT
            Not After : Jun 17 02:01:02 2024 GMT
        Subject: CN=e5330fe911af04f170dc5135adc1cdc79187d125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:ae:a0:84:35:2c:14:de:8e:dc:c3:cb:11:
                    b8:c4:38:38:b4:a0:64:e9:b1:9b:06:bb:23:05:e8:
                    cc:78:28:a3:e5:7e:a8:3c:55:61:2f:65:8e:32:fd:
                    a4:02:f6:07:ec:64:c7:0d:5d:40:88:a4:a8:bb:27:
                    b9:08:f4:68:f4:fe:44:9e:2e:91:0b:b3:c6:d5:b7:
                    e3:0a:e6:2e:e5:7c:a7:80:8a:15:9f:f7:03:68:c7:
                    7f:81:25:99:1e:70:c2:00:00:72:99:af:19:79:64:
                    20:0b:c9:7d:ff:d6:b5:d9:8c:7c:f5:9c:46:f2:60:
                    9c:cd:0a:4d:af:a3:9a:82:de:04:62:4c:d2:d3:ae:
                    37:23:f8:e9:95:e9:52:30:86:98:82:b5:c8:07:0c:
                    a7:48:4b:da:12:8d:2c:10:ed:6f:e0:1d:4c:b1:97:
                    76:21:7e:d9:9e:4c:e9:4f:ee:7a:4e:65:1f:c7:42:
                    77:2d:e3:9f:fc:8f:85:f6:ee:f5:48:ce:f9:f2:86:
                    59:34:1f:07:da:7d:f1:5c:3d:7e:6f:8f:e2:18:9c:
                    af:bf:b5:fb:cb:ab:bb:56:18:df:b0:26:bc:1e:34:
                    c2:d7:f0:40:8e:5e:1c:21:d3:51:e7:95:ae:37:80:
                    10:d5:d2:1c:2f:8c:5e:ef:d9:76:76:94:73:c2:25:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:33:0F:E9:11:AF:04:F1:70:DC:51:35:AD:C1:CD:C7:91:87:D1:25
            X509v3 Authority Key Identifier:
                keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b9:42:70:23:9f:ef:61:12:67:83:ec:21:ee:21:56:02:34:
         62:64:ae:12:6a:a7:7e:28:c4:51:cb:38:ea:96:f2:18:46:bd:
         99:46:3f:61:7e:f9:e7:94:e1:d6:71:0d:6a:a6:cd:27:c9:37:
         eb:9a:82:bf:64:a8:f8:7f:7e:84:57:52:fd:7a:f2:5e:11:ee:
         25:fa:dc:c9:f8:b3:a0:0c:10:51:9c:57:6c:51:6c:3b:45:bb:
         ce:d0:48:cf:dd:2b:08:35:1b:fa:45:5d:7e:91:9b:cd:9c:e5:
         b0:9d:f6:59:61:82:3f:c0:c0:24:a9:ce:7b:38:dd:8d:ba:17:
         48:dd:af:72:8a:99:a9:96:18:81:08:81:76:85:fa:17:3c:2a:
         f4:4b:89:25:3c:8b:cb:f5:f8:91:87:b5:9e:3d:8c:de:d4:11:
         8b:a7:fd:88:22:1d:4f:26:7c:83:37:a9:03:8f:cf:53:3b:16:
         a3:25:fc:a5:8a:8f:85:7e:d5:6d:ee:48:4d:d3:8b:62:4d:10:
         bb:4b:b0:e7:6a:7f:35:b8:b0:27:d6:f3:a3:e0:ab:6d:8c:02:
         14:9c:1a:69:39:f9:f1:3a:99:bd:8b:39:66:6e:60:81:5b:40:
         5e:4f:3a:f8:25:43:36:62:77:8c:73:3a:f4:18:21:95:1d:dc:
         75:39:fe:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:20 2024 by rpki-client on console-fra.rpki-client.org