Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File:                     k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier:          g6ixzNf1SkExzFcEL9yX8hveQKuEpPJ5fSDebWC/Ltc=
Subject key identifier:   3B:E7:FC:A7:22:3C:79:E4:C0:4D:5E:33:79:79:B4:2D:E2:36:53:C2
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer:       /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial:       01901CD81E9858501136431C59E751A5E100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 17:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:43 +0000
Files and hashes:         1: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: eheZGH/nJ1+0QkW0G1wHaoQlEhnPgggf40eq1ILUYq0=)
                          2: r6KVKHwG7ZmmDdN6EMlWydalHCI.roa (hash: UQ/Ntt5n7b/D0x6E+3XPTTOLtzEIrhQQ+7PSQWqquUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:1e:98:58:50:11:36:43:1c:59:e7:51:a5:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
        Validity
            Not Before: Jun 15 17:00:43 2024 GMT
            Not After : Jun 16 17:00:43 2024 GMT
        Subject: CN=3be7fca7223c79e4c04d5e337979b42de23653c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:53:5e:84:38:4f:52:10:ae:f0:c2:35:3d:
                    50:cf:99:28:ca:94:8e:72:48:cd:59:10:3d:a2:15:
                    2c:82:07:d8:30:11:48:d2:94:d1:9c:7f:af:de:81:
                    9f:e2:ec:58:54:2e:7f:78:fa:1b:da:84:9b:25:4b:
                    ff:3e:e7:96:f3:0d:b3:3d:35:41:7f:1f:67:57:72:
                    9a:30:8b:bd:fd:51:df:fc:8f:bc:fd:c5:26:f6:ff:
                    89:17:02:99:02:f1:95:77:f7:f3:93:3b:da:e0:16:
                    9c:e1:e1:a2:cd:ae:ac:24:99:aa:93:e2:40:98:20:
                    29:72:68:ae:64:75:66:25:17:44:11:83:a9:dc:ac:
                    a3:b6:58:0b:3a:bf:bb:dd:82:4b:9a:ee:d2:fd:8d:
                    a7:49:39:9b:8d:38:b2:b3:37:52:f5:7b:3d:cb:7a:
                    63:fa:85:d4:dd:f4:e8:93:66:b3:17:c4:bb:ce:19:
                    cd:85:50:15:38:6d:4e:08:03:04:e2:27:3c:93:a0:
                    8c:95:e8:98:97:99:31:c7:a6:67:8b:a5:bb:d1:4e:
                    d5:67:8f:95:a1:42:13:6b:99:7e:7a:2e:25:10:cc:
                    5d:30:c9:b0:f5:6c:5d:5e:f3:8a:c9:7c:ea:c4:c7:
                    15:13:fe:1e:69:5c:7d:52:6e:fa:11:0c:8b:33:60:
                    8f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E7:FC:A7:22:3C:79:E4:C0:4D:5E:33:79:79:B4:2D:E2:36:53:C2
            X509v3 Authority Key Identifier:
                keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:6f:14:a6:18:5c:80:ee:b1:d7:36:3d:ad:50:e5:b5:e4:
         b7:b8:bb:30:d2:5d:58:e4:27:da:c2:2b:0f:02:ea:ec:d4:74:
         60:a6:39:de:c9:b4:67:0d:27:60:fb:cd:fa:70:9d:7a:50:2f:
         0d:06:16:1c:28:7d:63:de:8a:cd:66:2b:0a:f8:db:5c:95:5b:
         72:30:57:4e:db:c9:e9:6b:1c:17:0d:23:7e:4c:b2:16:35:7d:
         98:8b:77:a9:c8:07:5b:5c:f7:2a:f5:83:f3:9f:ec:77:1c:5d:
         e0:3a:53:62:ba:4d:2c:e6:ed:6b:51:7b:69:eb:6d:76:79:83:
         d9:e6:f7:2b:b1:4a:2e:cd:b7:6d:24:44:bd:ff:de:e7:dd:42:
         ac:c7:32:e4:c1:c6:0b:ed:e5:1a:3b:64:17:da:8c:3f:fd:f2:
         3c:2f:d2:a1:4b:e3:12:4e:63:0e:c1:ac:d7:00:c5:15:50:6b:
         c8:ee:05:3c:f8:f1:62:8e:9b:a1:03:28:76:7b:a4:f6:54:76:
         da:fd:1d:9a:e6:d7:8e:1e:34:d4:30:70:c6:be:bc:d1:69:00:
         b3:aa:6d:f3:de:79:14:71:74:b2:aa:2a:71:3f:4a:65:13:86:
         84:b2:71:c5:80:5f:1f:51:cf:36:5d:a5:a2:09:85:3e:5d:3b:
         a5:a9:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:11:30 2024 by rpki-client on console-ams.rpki-client.org