Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File:                     9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier:          AdMXbx8s9m5EWwgqKA2lqwE01mJOwhH6EzT7qt9P3QE=
Subject key identifier:   ED:E8:D4:14:06:7D:BB:84:96:F9:B7:18:25:5C:8C:B1:1B:6E:97:27
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer:       /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial:       01901CA186729AE70C9F5509F056A45B9C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 16:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:06 +0000
Files and hashes:         1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: 791z1mmN/Hayhm775gQXOAZTSyrUnIYfYEQBkIEGT6Q=)
                          2: DOXoMC9Y5l5Uc5ftMEuGS8h18og.roa (hash: zODCvLoHcOlORK1VheVh4jaUTPKN2Jee4TEbqnQuDLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:86:72:9a:e7:0c:9f:55:09:f0:56:a4:5b:9c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
        Validity
            Not Before: Jun 15 16:01:06 2024 GMT
            Not After : Jun 16 16:01:06 2024 GMT
        Subject: CN=ede8d414067dbb8496f9b718255c8cb11b6e9727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:8d:f9:57:87:03:5f:30:b6:a2:02:92:8e:
                    65:7d:17:c6:2e:2b:66:85:e2:ce:4b:65:e8:33:63:
                    06:63:5c:a3:69:97:43:ec:b6:45:2a:2b:49:1f:48:
                    01:b0:ec:d1:00:c7:16:b0:3c:82:c3:93:de:0f:6c:
                    7b:16:8d:8c:de:22:f0:42:48:23:c6:37:82:11:b6:
                    ab:a7:45:81:26:4b:fa:10:61:74:8b:5a:90:74:dd:
                    e9:4c:8f:47:8f:d6:14:a8:40:ad:93:d3:e3:4c:5d:
                    90:b3:e2:9b:10:8c:83:84:e0:b7:ff:87:53:48:62:
                    33:d9:9f:c4:2e:09:98:6e:4c:74:32:9e:a2:db:7f:
                    20:c2:96:40:1c:20:3c:33:b7:f0:b4:ab:48:75:ef:
                    81:4f:d2:81:be:db:be:86:33:a2:2b:ce:33:2a:5b:
                    06:fe:48:04:46:c1:56:d1:6b:21:f5:4a:fb:5f:9a:
                    c1:96:fa:bc:3e:9c:63:f2:ee:0e:0c:45:1f:5c:a6:
                    99:27:a4:70:ec:b4:f2:1b:a5:94:fc:10:4f:51:53:
                    77:c4:27:01:f7:87:7f:b8:cc:3e:87:b6:7a:af:48:
                    7f:f7:d8:f2:2b:17:11:04:e2:e0:ef:42:6f:31:fb:
                    c4:45:7a:fd:8a:9c:8f:ea:57:51:8e:4f:f1:3c:3b:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:D4:14:06:7D:BB:84:96:F9:B7:18:25:5C:8C:B1:1B:6E:97:27
            X509v3 Authority Key Identifier:
                keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d4:ce:d3:67:2c:d4:1d:5a:e2:ab:03:3a:13:97:ef:b4:f5:
         1a:6b:d7:6d:38:b1:dc:fa:16:9a:1d:15:12:7f:a6:d9:09:e4:
         5c:e4:90:10:9b:8a:56:56:20:5a:c7:18:e2:42:ca:4d:54:bf:
         84:af:91:73:05:4e:e3:b3:9b:a3:9c:8b:09:a9:87:bd:20:91:
         97:36:13:81:06:53:de:eb:c1:5f:bc:f2:83:37:4e:b7:19:bf:
         0e:aa:11:5d:32:c7:28:86:07:3d:8c:81:1f:52:e9:ea:61:59:
         a0:a3:cb:1a:7d:ab:7d:13:99:31:63:d0:36:16:82:81:ee:41:
         b9:21:58:e3:39:1f:7d:29:e2:77:3c:aa:26:5b:b9:8b:f0:63:
         35:6c:6e:16:f1:bb:12:c0:43:25:16:21:3e:32:62:cf:c8:01:
         1a:2f:f8:9c:f1:f8:c3:8a:75:22:54:07:0c:35:03:e3:a7:e7:
         8a:30:2d:22:23:6e:31:dc:ab:98:c5:1b:f7:9d:8c:5a:1f:83:
         5f:5c:c2:ac:ba:21:52:1f:21:fa:7a:57:dc:ea:38:27:0f:aa:
         0d:76:cc:83:20:f6:62:f8:26:67:f2:e0:7e:b3:85:58:3d:f6:
         e5:54:bf:79:50:1a:41:63:49:dc:9d:ad:71:47:ae:28:ad:f9:
         72:b9:e7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:13:00 2024 by rpki-client on console-ams.rpki-client.org