Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File:                     KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier:          Xg+rzh2e6XLhbioj//Bh0O/m3n8l3txJ9j4EnDuA8aM=
Subject key identifier:   AA:CE:2B:1B:6D:5D:EE:E5:48:91:98:90:B7:B8:3A:80:22:E9:B7:81
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer:       /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial:       019045666E8ECD13AA51A00874096FC9E3FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number:          11DD
Signing time:             Sun 23 Jun 2024 14:00:59 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:59 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:59 +0000
Files and hashes:         1: 2oBTcYV3KDFrYYsba7m8nKVZJbA.roa (hash: +PX5++YU/06StGLjPSdPpzOeFqoc2E+moVCGqhs4uvU=)
                          2: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: Os7aKOLTw6pY9nNQqNzKv3s8jOF8LIxp4fSwpxZyY+I=)
                          3: ZTxw-HXNQJKX9Jf7XPbC_m64lfA.roa (hash: QQa/2dTFQXGwHkzv0XcHlXvOTPXtgyKJvPnah8CCqwM=)
                          4: eUw1tXGZOIXWRt52uY67pQOM1S4.roa (hash: pJk9qSmey8ru+nVaaYmmBoTvhYu+bUbiXgo1Ppo/JJM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:6e:8e:cd:13:aa:51:a0:08:74:09:6f:c9:e3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
        Validity
            Not Before: Jun 23 14:00:59 2024 GMT
            Not After : Jun 24 14:00:59 2024 GMT
        Subject: CN=aace2b1b6d5deee548919890b7b83a8022e9b781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:4c:a9:4c:af:aa:0a:8c:55:32:02:a1:2b:
                    d7:c6:e3:b1:a4:21:65:9b:19:18:cb:7e:01:e1:6f:
                    b1:9d:58:20:a7:35:1b:5b:41:73:1a:bb:b8:fd:23:
                    df:34:72:0e:62:a3:87:da:2b:0d:b4:4e:0e:ab:36:
                    b4:35:27:16:d8:8c:4b:25:b7:2a:a2:99:de:c7:f5:
                    6d:0a:ea:50:40:88:65:00:c8:76:e3:0b:20:81:74:
                    0a:80:90:a4:e7:8d:10:19:4e:81:45:9e:37:88:29:
                    5c:11:d0:b7:9e:d0:7b:d8:8f:a1:79:e4:f3:8a:ee:
                    5a:21:5a:76:7a:6a:6f:3b:eb:bd:3b:89:37:e0:aa:
                    75:cc:87:d2:9e:8f:cf:ae:94:02:ba:3a:d7:f4:3d:
                    29:75:e5:30:a9:be:7a:dc:be:ff:0a:05:5d:7a:9d:
                    9a:67:6c:07:5e:16:69:98:7e:c9:31:61:9b:5c:96:
                    66:24:14:9a:21:d6:03:b3:0c:d4:d1:88:2a:e7:33:
                    aa:ac:40:69:05:56:be:f8:56:a7:53:f0:65:81:56:
                    3b:66:17:1c:e1:37:b3:89:5d:0a:ca:52:8c:96:a2:
                    c8:d2:3b:d7:dd:cf:27:a6:95:5c:f1:bb:13:b2:4e:
                    44:91:55:29:36:ce:93:0f:66:49:27:16:e5:e2:5e:
                    be:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CE:2B:1B:6D:5D:EE:E5:48:91:98:90:B7:B8:3A:80:22:E9:B7:81
            X509v3 Authority Key Identifier:
                keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:36:4e:f6:dc:c8:cd:ec:dd:6a:05:a9:53:ee:b3:32:f9:bb:
         30:e9:6e:53:21:27:2c:88:5a:da:63:c9:54:59:84:2e:27:e7:
         90:f4:21:ee:c6:08:d1:2c:ce:5d:48:92:b1:39:21:5b:56:a9:
         e3:d1:5a:88:f5:f9:71:38:4e:64:76:03:fb:bc:7d:26:37:cd:
         c1:1e:94:09:ce:08:df:4d:3f:04:9e:21:41:94:d9:55:2c:6f:
         92:37:a3:00:8b:58:37:7a:a2:92:74:8b:70:b2:e7:56:cc:02:
         56:71:cd:01:14:7e:1e:c0:19:c0:7e:df:ac:89:35:26:7b:88:
         56:0f:93:9a:e1:14:7b:a6:c2:3f:b4:64:80:22:69:8a:a3:cf:
         34:e0:ec:98:1a:01:40:f7:ef:2d:4e:c9:89:84:28:70:98:7b:
         44:81:95:20:3b:a1:ae:71:1c:88:5a:00:5a:3e:dc:3a:6b:89:
         0f:6f:97:6d:39:5a:5e:94:fa:44:f8:f8:6a:c2:d9:c8:25:ad:
         9e:1b:5c:ab:04:a5:24:cc:9d:2a:35:9d:0e:f7:8d:cb:55:12:
         c1:54:c9:1d:e7:43:0a:7a:8f:e2:53:d8:78:43:55:2c:f6:68:
         12:8a:f4:e9:7d:18:c0:34:a6:9b:03:eb:42:d3:27:fb:f7:ae:
         92:51:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:02:33 2024 by rpki-client on console-fra.rpki-client.org