Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.mft
File:                     ER9LCnOsG2M9JO1aCU_eOi71G5Q.mft (raw, json)
Hash identifier:          jQ/80xdrhY7Nds2bXthrprL7IiIXfJcyW1cGNuDchSk=
Subject key identifier:   42:92:09:6B:D2:65:DE:3A:D6:53:16:B5:58:E6:62:85:22:DB:04:BD
Authority key identifier: 11:1F:4B:0A:73:AC:1B:63:3D:24:ED:5A:09:4F:DE:3A:2E:F5:1B:94
Certificate issuer:       /CN=111f4b0a73ac1b633d24ed5a094fde3a2ef51b94
Certificate serial:       01901EFD70BA58C9BC5453C273AA0D28A2D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER9LCnOsG2M9JO1aCU_eOi71G5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 03:00:44 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:44 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:44 +0000
Files and hashes:         1: 1-QVYSXCMeRe1mvLAfFdDFo3xYhs.roa (hash: DOTcvUjFr15RwbcT6BuPnjc8ua6GfgqCObQtevk1vUo=)
                          2: ER9LCnOsG2M9JO1aCU_eOi71G5Q.crl (hash: nfKxYcihWQ8T+5lD/b6Kgkx13ppXU+0VQDboLky5YNE=)
                          3: KYV1JfOwegSjf6zKBq8tHTaXmT0.roa (hash: wD6Y6M95Qq3PTzEeuNVyakktvzn4uQHlbdIgr0S7IxQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ER9LCnOsG2M9JO1aCU_eOi71G5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:70:ba:58:c9:bc:54:53:c2:73:aa:0d:28:a2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111f4b0a73ac1b633d24ed5a094fde3a2ef51b94
        Validity
            Not Before: Jun 16 03:00:44 2024 GMT
            Not After : Jun 17 03:00:44 2024 GMT
        Subject: CN=4292096bd265de3ad65316b558e6628522db04bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:7a:e8:19:ed:4a:31:68:92:b2:4f:b3:4c:
                    70:8b:17:fd:cc:56:3b:db:ec:87:19:0c:43:3a:bc:
                    be:31:f4:7d:17:f5:e9:45:97:cb:58:89:94:90:b9:
                    2d:f8:0f:58:a1:9a:0d:03:34:3d:c0:e2:1f:d4:27:
                    51:fb:41:54:fe:01:28:68:f4:01:7f:c6:bc:97:d8:
                    88:d4:7e:f7:b5:e0:5d:d1:82:81:65:29:44:1f:c3:
                    62:88:a8:e7:9d:54:5e:ba:f4:6b:05:a3:be:22:67:
                    86:f4:92:a4:26:bf:9e:c9:06:16:01:dc:56:25:71:
                    f2:d8:2b:0e:cd:b1:41:ca:3f:a7:2d:3a:7b:21:3e:
                    cd:d6:e8:63:e5:10:d5:8f:9d:27:67:e6:2e:78:25:
                    eb:37:a6:b0:c2:ec:46:97:7e:e2:54:7b:a7:cd:b1:
                    6b:60:77:d3:ab:e6:b9:21:e4:80:50:8f:c4:a7:36:
                    cd:c9:ba:2a:96:2f:ea:c4:2b:ab:64:3b:43:5d:4d:
                    65:53:cc:b2:f0:45:ea:66:d2:ac:cc:6b:7e:8d:83:
                    ab:12:6f:17:5e:eb:69:1c:3e:68:21:ef:fd:20:d7:
                    88:71:27:7e:08:8e:ee:45:09:9f:f4:19:45:b4:fc:
                    6f:4a:cf:9a:78:4c:c0:92:51:bf:73:24:a0:4c:d8:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:92:09:6B:D2:65:DE:3A:D6:53:16:B5:58:E6:62:85:22:DB:04:BD
            X509v3 Authority Key Identifier:
                keyid:11:1F:4B:0A:73:AC:1B:63:3D:24:ED:5A:09:4F:DE:3A:2E:F5:1B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER9LCnOsG2M9JO1aCU_eOi71G5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:33:24:f0:69:5b:48:d1:b5:30:4c:aa:b0:87:ba:0b:1a:b8:
         e5:9f:98:35:1b:a1:97:aa:41:c4:37:c1:c6:65:d7:45:60:ab:
         e6:e6:66:cc:a1:b8:d3:a9:34:72:ab:a6:a3:9c:ab:25:4f:10:
         79:c9:13:74:bc:03:53:b1:4a:66:c4:ba:6f:0d:12:af:0d:a8:
         43:af:e7:4e:ee:70:ca:f1:e1:25:a6:4d:6e:62:75:7c:66:73:
         01:65:c0:76:8e:81:26:c9:96:40:ba:d8:00:0e:a6:05:cf:2c:
         21:1a:46:f1:14:b9:a2:a6:c1:8b:3d:57:8d:97:f9:e6:40:d2:
         ee:48:92:c6:26:f7:21:5a:04:3a:70:b5:1d:1c:71:2e:60:1f:
         29:cf:90:cb:17:ce:30:57:0e:31:1a:10:d4:b4:86:d3:21:f6:
         16:28:f6:fc:e9:5e:09:06:f5:52:80:cf:04:c2:74:be:7f:42:
         d4:0f:d6:36:fc:ee:ab:c3:3d:0f:b1:8b:ae:68:d6:b0:c0:98:
         80:df:74:28:56:f5:e5:0e:bb:06:66:83:49:ef:65:d4:7f:a7:
         4c:76:64:e5:09:07:ed:91:bc:58:5b:e3:4f:9a:0b:d0:b6:cb:
         d8:30:23:78:9c:9a:60:ec:fa:06:8c:b5:f9:41:90:2e:78:ef:
         6a:cc:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:52:03 2024 by rpki-client on console-fra.rpki-client.org