Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
File:                     miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json)
Hash identifier:          T/FWZnhOD3TlIWCa4FwBBCXZIlC06QwvwtdkAZPuCfM=
Subject key identifier:   40:4E:CA:3E:11:ED:96:14:B2:F8:3E:CC:E1:85:C6:F4:5F:A1:AF:29
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Certificate issuer:       /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial:       01901EC6C731DD8E613B9E95F78BD65A3964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
Manifest number:          036E
Signing time:             Sun 16 Jun 2024 02:01:01 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:01 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:01 +0000
Files and hashes:         1: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: T9FqzNPe4ANHyf2Yucp+lfgOcXVO41YqcKnVzx0ji4s=)
                          2: uyPP9Cy4j_1C2uUAvs8RY70q2Rk.roa (hash: 1nUlX07lN7NlMAgs0z2YZaZQVm5lKn1DTFtU74yAIzo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:c7:31:dd:8e:61:3b:9e:95:f7:8b:d6:5a:39:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
        Validity
            Not Before: Jun 16 02:01:01 2024 GMT
            Not After : Jun 17 02:01:01 2024 GMT
        Subject: CN=404eca3e11ed9614b2f83ecce185c6f45fa1af29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:ce:39:0b:aa:c9:b6:48:c7:1c:53:b8:8f:
                    c5:4f:bc:35:90:6c:b7:d6:47:3c:36:6e:c5:17:4d:
                    10:ed:ba:11:9e:1d:0d:3d:15:55:ad:de:9b:ca:be:
                    b5:5f:34:c5:05:03:39:32:06:4a:58:dd:04:32:39:
                    05:3d:7d:fc:05:ab:08:a5:6a:bf:cd:23:24:1e:28:
                    52:03:8e:e3:59:58:27:98:35:8f:68:f5:bf:5b:2f:
                    5e:b5:c2:74:2e:18:cd:c2:f4:94:57:1a:11:d9:75:
                    c0:48:66:56:3d:cb:60:0a:56:f6:fb:bb:e8:fc:44:
                    5d:5b:f0:a5:ce:88:14:73:66:88:0e:a6:5c:b8:99:
                    0d:58:cc:4c:b5:f6:b9:a3:f6:96:08:80:ed:83:de:
                    12:31:88:d8:b6:af:a5:cc:f8:da:bd:1d:35:e5:01:
                    ae:9b:66:6c:62:cf:2a:a1:68:60:42:f4:2e:4d:fb:
                    1d:d5:ca:dc:3d:34:88:e6:67:d4:70:88:7b:1b:0a:
                    3a:d8:0e:9b:9a:08:15:9e:18:f3:28:a8:31:cb:c0:
                    09:71:c3:3f:00:9c:c9:bb:8f:1c:2e:b4:ed:34:06:
                    0e:b0:03:9a:9c:39:43:ec:49:08:2a:4c:ee:a5:b6:
                    71:4b:31:df:61:1f:29:89:1b:1a:22:b8:96:e2:8c:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4E:CA:3E:11:ED:96:14:B2:F8:3E:CC:E1:85:C6:F4:5F:A1:AF:29
            X509v3 Authority Key Identifier:
                keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ec:a7:d5:d5:fd:24:23:2d:1d:95:50:cd:be:93:2a:b1:1c:
         bd:c9:c0:d1:b5:65:86:d1:23:68:e6:be:d0:25:e1:32:ff:c6:
         d0:b3:1e:e1:3a:be:9f:e3:8d:a3:ff:af:38:38:27:d2:65:39:
         d8:66:10:93:a9:d3:24:ca:3f:81:85:fa:03:96:64:de:8d:f6:
         0c:11:ec:53:51:15:ea:55:ae:84:6f:9c:31:41:f8:d7:80:ed:
         4a:67:6b:23:79:b1:45:6f:64:ca:2c:1e:ab:3b:52:91:8c:df:
         54:df:7e:f2:15:84:0e:e6:1a:8c:2f:25:9b:9b:bf:f1:90:ed:
         14:91:33:ee:ec:15:9b:e9:10:b2:75:d1:03:34:c8:ac:12:f3:
         89:90:8d:5d:49:c3:33:07:2a:0e:f4:99:2b:3d:c3:68:4e:b1:
         d0:90:b6:db:12:69:ac:fa:82:98:59:f6:69:97:60:22:21:0d:
         2d:d3:3e:56:d7:7b:32:fd:1f:36:d4:34:0e:a6:b1:5c:04:bd:
         88:d7:e5:bb:22:8a:42:72:30:ab:7c:82:60:86:f5:0a:e4:e8:
         64:22:6e:6c:cc:55:fd:5f:35:2e:46:a5:fd:57:aa:58:6c:53:
         94:e5:7e:ee:b7:67:35:71:39:42:90:af:31:93:ca:12:47:15:
         2d:41:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:33 2024 by rpki-client on console-fra.rpki-client.org