Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File:                     32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier:          awoqTwLTt1AnniDl61ohnYxpLjFGIZSX4aa+kjEH9KY=
Subject key identifier:   C3:1F:00:6E:15:A9:91:1A:7F:DE:8C:13:0F:F4:AF:13:FB:64:5E:53
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer:       /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial:       01901DECBDC60EC6E9D008E1DAB7C30E6FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number:          0874
Signing time:             Sat 15 Jun 2024 22:02:52 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:52 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:52 +0000
Files and hashes:         1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: xFqR6fSIZk0j6PR0Hl4E4PZVeqsD49htfm9Jf/EDDaM=)
                          2: 5hhXfwDoyhNwubKlN-S_5SiN1wA.roa (hash: B2qahgtASolDcQWQmzP7gHy/KJZ9IEaf5GJAqgTsalI=)
                          3: H0wOcnnRC9hD4YxJ9vkxet9TrmQ.roa (hash: LaqPCqcF3EwmHexW3TUl2zzFnMUsLV/B4H24KnZEUf8=)
                          4: PfwP2vYiGyUZQP1eqmWh_sKQz-8.roa (hash: 7uifEdtUhGjbBCe4GxaPPMBWRWkTShjwXrsUDYc3GCk=)
                          5: b6lQyYLpABoCwjSUXAJur7_bPK0.roa (hash: +E1xVFbG1LCDjB4tEpqyWrUKYsPtpeZRICkKHyjwr+A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:bd:c6:0e:c6:e9:d0:08:e1:da:b7:c3:0e:6f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
        Validity
            Not Before: Jun 15 22:02:52 2024 GMT
            Not After : Jun 16 22:02:52 2024 GMT
        Subject: CN=c31f006e15a9911a7fde8c130ff4af13fb645e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:db:f0:d9:52:0c:8f:63:b6:65:38:23:13:01:
                    15:8d:eb:63:4c:18:f9:fb:21:08:94:d9:83:26:d9:
                    5e:d3:85:65:bb:8c:23:da:02:8e:c2:21:5b:dd:10:
                    32:34:b2:f7:2c:03:ce:47:c5:1d:62:0a:31:9e:80:
                    c0:7e:7f:c0:62:99:d8:74:c1:8e:bc:76:75:ba:78:
                    07:27:71:ef:34:43:94:f8:75:6c:9b:db:c5:08:a7:
                    d2:57:18:f9:a5:06:22:f7:bf:8c:6e:2f:91:4b:3c:
                    cb:28:e5:8a:de:66:c3:bd:4b:37:bf:1c:ee:03:f1:
                    ef:99:67:ed:59:98:16:71:64:c2:2b:ab:bb:70:b8:
                    91:f9:35:d3:75:74:66:d6:66:e2:23:88:90:e8:90:
                    03:79:2d:e2:27:2f:ea:04:45:9d:23:8e:00:d2:6c:
                    4b:49:08:1c:f8:04:bf:8e:4f:bd:3d:5e:62:7d:c1:
                    ae:b0:e1:df:53:98:71:80:e1:d4:03:69:5a:0f:a1:
                    4b:b5:42:46:a9:c7:68:4f:0c:b1:f1:0e:2b:97:d7:
                    5d:99:cb:18:5b:1d:5b:e4:b1:e7:a7:d7:70:90:54:
                    e9:12:70:56:3a:a8:1c:b7:34:9f:d8:8d:f4:3f:72:
                    7f:44:97:89:da:89:28:52:ae:c1:20:39:d3:f0:cd:
                    ac:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1F:00:6E:15:A9:91:1A:7F:DE:8C:13:0F:F4:AF:13:FB:64:5E:53
            X509v3 Authority Key Identifier:
                keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:78:cb:3c:e6:ef:5e:7a:0d:eb:d7:d1:a7:d5:eb:41:ef:1a:
         38:c4:f8:5f:18:94:10:24:b7:a1:27:c7:b7:8f:e6:0e:a8:90:
         45:a0:f1:c5:ac:c5:94:f5:a0:d3:43:fc:07:37:c5:95:c9:80:
         b0:f1:89:5d:c6:30:b6:b3:0d:04:22:88:25:84:57:24:71:1b:
         4e:9d:03:c8:02:29:70:2b:98:6d:0d:ba:cc:70:ca:da:e3:ed:
         cc:82:9b:57:70:c7:b7:88:ec:d9:65:64:2a:cd:a9:7a:dc:59:
         34:51:73:f8:ed:70:0c:ac:19:a0:e0:42:00:a4:f8:3a:0c:95:
         10:fb:ef:4c:3b:a9:4d:3d:11:32:58:3f:31:82:fb:60:0f:8f:
         4c:1c:17:4c:a0:28:03:4e:d3:62:3d:19:f2:7c:67:e2:0e:ec:
         68:13:2f:bb:4b:c3:ed:79:86:d5:99:b2:36:a0:5b:fe:3c:5e:
         b6:8f:6e:a8:ea:bf:d5:a6:52:23:1d:fc:7b:b9:44:b0:3c:27:
         90:eb:21:06:17:cb:ee:73:0b:35:bc:1e:22:54:35:72:2e:35:
         a7:59:31:a8:76:fa:c2:66:98:31:80:af:bc:5a:2f:a9:3e:0f:
         0c:ff:ef:36:80:93:87:4c:96:0d:b8:e0:f8:2e:e3:94:9d:92:
         78:60:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:00:43 2024 by rpki-client on console-ams.rpki-client.org