Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File:                     9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier:          sVhuC0VRenrV+0zDsP/mNWS5aslYoHP0gl8lcpVsKxs=
Subject key identifier:   70:7D:53:4E:4E:B7:FF:40:9C:CB:93:26:EB:2D:65:F6:06:73:AC:B3
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer:       /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial:       01901C6A2F731C9289F3808BC7A62ADC326A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 15:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:39 +0000
Files and hashes:         1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: hBK5oY6lFAFUPFGSABALNB+EX2g17cUQkgbqy6W0Hi8=)
                          2: qk1gfyznG77fYf8jJg8i1X1uTR4.roa (hash: ET7IuPxEqcZV9VUIx7iPVEtUHQ+6RcTE/u/ZEp3Tmdw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:2f:73:1c:92:89:f3:80:8b:c7:a6:2a:dc:32:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
        Validity
            Not Before: Jun 15 15:00:39 2024 GMT
            Not After : Jun 16 15:00:39 2024 GMT
        Subject: CN=707d534e4eb7ff409ccb9326eb2d65f60673acb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:65:d6:e6:66:81:75:89:68:30:7b:c3:2a:
                    4d:ea:8d:f2:44:bf:4c:df:91:f6:f1:f2:01:17:43:
                    31:ed:53:10:1f:22:62:3d:f2:06:a2:f8:0c:bb:32:
                    73:26:a1:03:25:62:16:f7:17:58:38:d7:07:9b:1c:
                    2d:9a:04:34:29:20:18:0d:63:1e:09:ac:e5:c8:d8:
                    18:a3:b6:97:19:3f:e5:16:84:3b:2f:b3:e6:bf:de:
                    d1:d1:0a:5b:3c:b4:bf:c0:f0:06:5f:6b:12:7b:98:
                    7b:40:7b:67:e7:25:34:d2:d4:46:e6:81:1d:92:a3:
                    1f:22:70:7d:19:79:45:c5:79:70:58:00:54:31:d1:
                    26:59:9e:4f:e8:d9:92:01:ed:3d:aa:17:af:70:fc:
                    04:27:f9:65:bc:b5:74:e4:cd:1e:05:44:75:da:c6:
                    41:67:16:97:65:6e:d0:96:4f:83:6f:22:22:d0:4a:
                    ba:22:76:f4:e9:af:de:33:f4:c6:ec:87:6f:f9:80:
                    5f:d6:95:40:f8:e9:e3:9c:21:05:ff:c2:bb:c5:80:
                    ac:ff:be:42:83:3b:11:6c:8e:8c:d9:90:68:82:40:
                    1d:cd:6e:27:52:31:37:92:56:5b:70:99:a0:45:ad:
                    8a:c7:c5:6b:47:b7:dc:fb:a1:9f:13:c3:33:3d:c7:
                    87:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7D:53:4E:4E:B7:FF:40:9C:CB:93:26:EB:2D:65:F6:06:73:AC:B3
            X509v3 Authority Key Identifier:
                keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:54:94:ad:65:67:19:14:ea:22:66:01:4d:ee:2c:e4:c7:d9:
         45:28:be:af:3c:a9:38:93:8c:50:d2:a1:10:8f:fb:59:e5:0d:
         c6:39:18:c6:8f:65:96:29:19:3f:44:43:fa:81:36:0c:7e:10:
         0e:ed:50:94:bc:9d:fa:1c:0d:ac:59:4f:42:50:a4:b4:60:91:
         87:30:11:2b:ab:ce:a4:32:61:43:1c:92:2a:d4:17:3c:e2:08:
         d4:6d:48:af:10:61:86:85:45:2a:02:38:54:08:5c:62:e0:8d:
         82:33:f3:a9:d4:46:bc:e5:7e:0f:cc:30:2f:9c:b1:f4:09:c4:
         53:cc:ad:44:7b:bc:09:b1:60:4b:48:f8:a7:d8:65:79:c5:95:
         9f:22:33:da:f5:d0:4e:1c:73:16:65:e5:41:3a:28:93:9c:55:
         2c:4e:2a:85:fc:9e:46:0f:27:68:13:77:b2:b4:0f:c2:d2:a7:
         de:9b:7f:33:98:c2:16:38:a9:70:bb:7f:8a:dc:00:f8:12:1d:
         1a:03:85:b9:9d:83:dd:c9:96:3b:e3:ab:03:63:47:cd:56:b5:
         a6:af:3b:2e:d3:46:6e:27:22:0c:c8:3e:b3:fb:21:22:6a:d1:
         6b:d4:ff:1d:17:74:56:8d:03:83:b9:e5:66:19:81:5b:01:95:
         7f:ec:93:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:53:53 2024 by rpki-client on console-ams.rpki-client.org