Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File:                     D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier:          /lvRhJOe2+uJCcb2tPju7cMN9FC9Pr7b39hrLVOuin8=
Subject key identifier:   E5:EC:A8:D7:A9:BA:04:98:38:22:66:29:F6:14:B2:03:AB:85:08:8C
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer:       /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial:       01901BFD193DA42DE99FC05F05C50F66EE89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number:          0FE7
Signing time:             Sat 15 Jun 2024 13:01:30 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:30 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:30 +0000
Files and hashes:         1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: Vt1VJLBc5YR6yFDTlCt6Ce8wJX2dn3auAEp/SRHxyB0=)
                          2: mbHJoB2H4sXOdibtPq7QNGEo8Wg.roa (hash: JEi6BLbzZ+JxiTGdZsw+6ctDHylQaQ9Ts7H3KV8vkfQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:19:3d:a4:2d:e9:9f:c0:5f:05:c5:0f:66:ee:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
        Validity
            Not Before: Jun 15 13:01:30 2024 GMT
            Not After : Jun 16 13:01:30 2024 GMT
        Subject: CN=e5eca8d7a9ba049838226629f614b203ab85088c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:51:82:2a:2f:70:1d:bd:dc:49:3b:14:cd:
                    86:64:37:2c:61:07:3a:d1:16:aa:bb:64:d1:79:b8:
                    71:75:f1:3e:03:d2:88:44:92:84:5c:a3:69:33:93:
                    40:c9:e2:26:c9:02:ce:46:94:6a:d6:a6:d7:44:01:
                    21:e4:73:4b:a3:8e:3f:25:29:66:e7:86:bb:34:23:
                    5c:18:4f:64:c7:eb:7b:1b:43:e7:49:b9:79:6e:4c:
                    54:42:bd:78:8a:59:b0:ba:2b:69:e1:86:3e:5e:86:
                    3d:a1:32:08:2c:56:34:10:64:88:0b:2d:25:9f:9c:
                    0a:c6:52:8b:98:ce:b3:fa:75:d7:b1:2b:42:b4:a0:
                    5b:d8:a5:91:b8:c7:61:29:8d:59:c2:71:8d:4d:ef:
                    a8:7e:2a:60:60:59:07:11:08:38:b5:fd:44:85:57:
                    eb:af:7b:90:d3:0a:b2:fe:80:c4:c8:19:63:62:bc:
                    64:d4:31:59:a6:02:db:9f:bb:f0:fe:5b:f0:d5:4b:
                    31:24:e2:c8:a7:c4:7f:a7:4b:b7:84:1f:77:57:78:
                    b5:c8:cb:65:3a:7d:c8:66:ca:07:74:35:f4:39:35:
                    9e:e7:24:9c:1e:dc:3b:e7:f3:09:f7:8e:ae:f7:3c:
                    e3:9c:6a:3c:52:36:c0:62:58:17:2f:38:5e:0c:c0:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:A8:D7:A9:BA:04:98:38:22:66:29:F6:14:B2:03:AB:85:08:8C
            X509v3 Authority Key Identifier:
                keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7a:6a:29:50:4f:01:10:9e:db:6a:d4:57:74:9e:f2:c4:d2:
         53:1c:e6:f2:e5:91:f4:d1:04:c1:f3:b8:75:9e:f7:f1:a9:fc:
         85:d6:80:f5:ef:f6:11:94:e6:03:be:5f:aa:c0:e4:a7:2f:e5:
         6a:c4:93:b0:a8:6c:a7:9f:0a:2c:32:d0:33:5e:10:5d:a8:92:
         bf:d9:74:4d:0c:c0:c6:e1:76:73:b7:20:8e:cb:c1:5e:75:63:
         f7:f5:ee:4d:4c:bb:3e:c1:19:c5:79:22:5a:a3:6e:b3:43:03:
         97:79:45:a2:f0:26:00:46:80:d6:5f:6f:4f:ad:92:30:21:14:
         0e:aa:af:94:a6:da:e0:dc:31:34:7c:c9:3b:9d:e9:23:ae:0b:
         48:32:14:5b:20:d0:81:2b:97:82:bd:7e:98:f0:73:a5:bc:d3:
         cc:de:f5:74:23:6a:ca:ed:de:2c:8d:3c:79:0c:26:a6:e9:d1:
         f0:7a:f3:73:e8:2e:7e:58:c9:d3:75:92:4e:c3:a6:0c:68:48:
         71:87:a5:2d:28:71:28:71:d7:2b:6f:b5:a1:6c:c9:9b:58:e3:
         d9:c8:51:63:f0:60:e7:44:ef:f9:c4:ba:80:46:fb:27:90:87:
         06:f1:7d:52:95:b8:09:ce:e5:4f:6a:7f:50:9b:98:2a:1f:d0:
         55:20:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:52:43 2024 by rpki-client on console-ams.rpki-client.org