Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
File:                     SkB8o6avRpoxu1IDD82RHJHmbBs.mft (raw, json)
Hash identifier:          8oPCcYNZnOp5LvpZUn4MQJeZoWwLfqb+rl6qmsqhMqk=
Subject key identifier:   21:6B:73:8C:91:5E:84:91:09:BE:87:7D:75:10:8A:EA:F1:10:12:9D
Authority key identifier: 4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
Certificate issuer:       /CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Certificate serial:       01903706220079537B80B67E71E723BCA5E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
Manifest number:          0DC7
Signing time:             Thu 20 Jun 2024 19:01:07 +0000
Manifest this update:     Thu 20 Jun 2024 19:01:07 +0000
Manifest next update:     Fri 21 Jun 2024 19:01:07 +0000
Files and hashes:         1: GbHIz2VdkoUXht0aGwbl1MnQh8g.roa (hash: BIQHwKOnt3zKyZLMxgIsXPPleZ3KXbpBFVYTHJyHZMI=)
                          2: SkB8o6avRpoxu1IDD82RHJHmbBs.crl (hash: wa4YYR6eAld7CA33ULB7LIPCUzRrusb0Zaj+HnukW18=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:06:22:00:79:53:7b:80:b6:7e:71:e7:23:bc:a5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
        Validity
            Not Before: Jun 20 19:01:07 2024 GMT
            Not After : Jun 21 19:01:07 2024 GMT
        Subject: CN=216b738c915e849109be877d75108aeaf110129d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:c1:ef:69:5e:6c:21:83:db:d6:ab:e4:5c:
                    01:b3:64:a1:97:46:e0:f7:62:52:a7:ae:34:32:f5:
                    c2:ee:5a:82:b3:22:ea:1c:73:62:ee:38:14:3d:69:
                    09:5a:c8:b0:9f:85:57:7c:d1:b3:70:5d:28:1b:c8:
                    46:2c:8a:3e:a9:c1:66:24:73:a0:84:0a:e4:96:46:
                    e2:fd:49:c6:92:4c:19:1a:e6:9f:2e:e2:db:f2:d6:
                    28:16:54:52:18:e3:b9:bc:c4:65:2a:3c:da:af:b4:
                    f1:20:c3:92:38:99:09:f3:1f:af:c9:ee:22:a9:10:
                    77:df:8b:88:78:b4:63:99:4b:7c:45:7f:49:94:3b:
                    95:00:b6:9d:2b:af:ff:f9:af:ee:64:5b:3c:ed:f0:
                    44:0b:5c:64:11:c4:8d:a2:30:ef:a8:8c:bd:fb:87:
                    41:b4:6c:1e:46:c7:f6:d0:0b:52:ab:4e:a5:a9:33:
                    db:e8:2a:af:8c:72:49:26:b8:5c:bb:73:2f:9f:86:
                    0a:b9:b5:f6:c4:cf:f6:f6:e4:67:d4:20:f2:87:5e:
                    96:21:e9:cc:04:f5:ca:68:75:ca:ee:c2:ea:05:3f:
                    94:91:93:e5:38:14:76:2a:66:36:47:c2:d0:01:25:
                    7c:20:80:82:d4:a5:3d:28:43:eb:1c:b4:90:71:aa:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6B:73:8C:91:5E:84:91:09:BE:87:7D:75:10:8A:EA:F1:10:12:9D
            X509v3 Authority Key Identifier:
                keyid:4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:73:61:9a:09:85:8d:0e:07:13:a1:30:dd:73:1e:91:d1:83:
         25:ad:f7:3c:d8:49:11:0e:49:ff:4d:87:9a:10:9b:06:56:1d:
         56:12:a0:11:ab:ac:3f:39:8e:69:cf:20:ff:e2:98:f6:f4:80:
         ab:fe:58:54:84:54:06:14:15:d0:c0:ab:fc:21:6f:02:c9:1d:
         cc:bf:4d:78:ab:09:50:e5:6b:cd:0f:95:81:f5:b4:a5:02:71:
         74:f0:fa:ed:f8:3b:8d:06:b2:7b:d1:df:57:3d:c3:14:78:d2:
         bd:b5:eb:06:00:43:06:d9:9d:2d:06:e3:1d:3b:f6:11:cd:d0:
         3f:af:9e:5e:6e:a8:e9:24:07:b6:9f:88:2c:2d:14:ef:98:4a:
         f3:50:f6:e0:73:80:d5:bb:8a:59:60:52:ac:69:95:5d:34:36:
         21:e7:1e:66:b8:67:e4:72:e4:5b:3f:25:13:8b:be:94:eb:53:
         9f:bd:5f:3d:18:82:31:94:9e:61:a4:78:19:78:d8:9a:42:06:
         d1:ab:2c:d4:16:4a:cd:04:98:00:44:4a:1a:87:1a:2c:ac:4f:
         7b:65:d9:4f:0f:2a:6d:72:b0:90:bc:22:52:bb:b6:b0:34:18:
         47:42:e3:5d:d5:d8:28:4b:d1:66:33:6d:54:f3:ea:57:cb:0a:
         c5:b6:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:14:39 2024 by rpki-client on console-fra.rpki-client.org