Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File:                     akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier:          +jXBKjbv9dWfDemA1WYhB3Nxmnp4GKidbVBwM8Llgus=
Subject key identifier:   6D:C2:FE:61:80:3C:7A:93:FF:5A:F6:5F:5D:83:83:7B:B1:83:4A:73
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer:       /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial:       01901E21A85C8D9A5E74F5908295A99409A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 23:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:40 +0000
Files and hashes:         1: 4sOOq4hv7ESFKsPlnC9WGwxhjEo.roa (hash: vUuBBPgUG06UwRDXUDvgfvTaCVncCLZkfq9a5gtDbok=)
                          2: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: QyJ1AeK+KEwN/ZtlpH0se0jx2+3mDW5nAYIPR9J9OQ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:a8:5c:8d:9a:5e:74:f5:90:82:95:a9:94:09:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
        Validity
            Not Before: Jun 15 23:00:40 2024 GMT
            Not After : Jun 16 23:00:40 2024 GMT
        Subject: CN=6dc2fe61803c7a93ff5af65f5d83837bb1834a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:f9:ff:47:63:f0:88:a4:55:0d:46:9b:f3:
                    0e:95:3f:dd:ff:e5:7b:91:0a:cd:f0:ea:a9:8c:55:
                    9a:f1:fb:32:fb:1d:33:18:33:04:aa:1e:d7:0d:78:
                    f6:24:b3:2c:55:9a:e2:26:71:4c:a1:9e:79:aa:a9:
                    72:05:9c:b4:95:04:97:53:6a:55:36:ae:c3:ba:79:
                    6c:51:8c:fe:3f:7c:a7:ef:9a:85:cd:9c:13:a3:e1:
                    9e:b2:66:a0:6c:4b:91:aa:38:aa:dd:53:8c:01:8a:
                    52:e8:33:74:c1:17:0d:45:94:f2:d0:95:8c:03:55:
                    9a:09:54:99:60:2f:ab:9f:0d:b6:85:34:df:78:ee:
                    8d:3e:ad:f2:14:17:bc:ae:78:f2:ac:a7:0b:3e:c6:
                    e6:16:ba:4f:8c:92:eb:4c:6e:a3:d8:8b:5c:cf:b9:
                    6f:21:d5:77:a9:e7:97:0f:3e:c4:db:ec:6c:6b:f9:
                    96:2b:30:bd:ee:f7:8e:d2:39:74:8c:da:6b:f3:c3:
                    fe:20:e2:5a:23:4a:2f:01:06:e9:39:e4:03:71:98:
                    8a:de:75:69:eb:03:3f:60:eb:ca:66:56:bc:f2:30:
                    fd:ae:4e:29:be:d7:47:dd:d5:50:1a:fd:9c:0f:c8:
                    c3:4f:bc:70:3b:94:f0:e6:6d:df:b6:3f:3e:15:ef:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C2:FE:61:80:3C:7A:93:FF:5A:F6:5F:5D:83:83:7B:B1:83:4A:73
            X509v3 Authority Key Identifier:
                keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:be:55:71:39:7b:a5:7d:dc:af:51:08:86:9b:64:ab:a0:6d:
         14:e8:96:11:4d:2f:da:ff:12:cf:61:fe:49:d1:0d:04:3f:4b:
         11:3b:7a:d9:76:9b:5d:6c:4d:73:46:26:29:35:30:47:01:37:
         ac:f5:82:ef:45:b8:76:cb:b6:3d:2f:90:ea:c7:d7:b7:c0:eb:
         37:f2:cc:8d:31:1a:34:2b:e5:2c:d2:88:45:ac:70:7f:69:80:
         1f:4f:33:ea:6f:21:0d:71:ba:8e:70:0c:c3:ed:7a:38:90:64:
         d5:90:39:97:c6:83:23:7a:c8:5a:56:19:92:35:74:79:17:80:
         1a:69:32:b0:c8:aa:1d:b2:8c:7d:8e:37:95:a5:c2:c7:13:61:
         ec:07:16:7d:37:7f:d2:25:e8:29:d7:93:32:a4:1a:a2:fe:fd:
         4d:a8:5f:fd:99:73:7f:6d:38:a5:d2:a3:91:fd:20:07:af:a3:
         bd:ae:bd:2e:8b:40:ab:7c:42:7c:27:95:4d:93:ea:f6:9c:9b:
         6e:d0:97:1f:a6:70:2a:2e:e0:5a:d6:ea:e0:8d:e6:6b:86:fa:
         c0:33:62:5e:83:ad:4c:34:a7:80:f6:b5:7a:03:dc:44:c7:92:
         a1:6b:15:c1:ac:29:ee:0d:da:f3:58:55:56:f9:02:9f:90:bb:
         99:67:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:17 2024 by rpki-client on console-fra.rpki-client.org