Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File:                     In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier:          +HwBIxOZSZVicJlhi202UZPC57jr8hYzjRDscR8B2hs=
Subject key identifier:   75:D4:3F:50:F8:93:0A:53:DE:D8:F8:49:5E:79:37:EB:F3:35:A5:AA
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer:       /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial:       01901DEAAF60F60E3D4DDD19C10CCB100463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:37 +0000
Files and hashes:         1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: eq9zW3R1Qs/KkaMV/iMhndNjVFY3ejUV8Tm9lTpiGxw=)
                          2: VzkacFc_Ux9761-MRYGZRET8GcA.roa (hash: bm+2/kioi+Y/5gpY4FLTWb1wog2KljMTpuqN97ezlM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:af:60:f6:0e:3d:4d:dd:19:c1:0c:cb:10:04:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
        Validity
            Not Before: Jun 15 22:00:37 2024 GMT
            Not After : Jun 16 22:00:37 2024 GMT
        Subject: CN=75d43f50f8930a53ded8f8495e7937ebf335a5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:37:67:49:fe:97:e0:33:1c:d7:fc:d8:01:
                    c0:f2:85:fc:b0:fb:ff:57:8c:26:35:6d:61:0b:2a:
                    3e:40:93:43:25:e1:40:3d:9a:92:27:9f:58:f0:96:
                    15:eb:5c:39:1c:78:ae:6b:20:c5:7c:68:32:60:4a:
                    e9:e5:de:53:62:5e:bb:20:56:aa:e7:b9:64:fb:be:
                    da:a8:97:e5:03:8a:06:97:e3:15:3c:f1:49:af:88:
                    96:99:38:cd:5c:e0:b5:bd:77:3f:e2:7c:9b:2c:cb:
                    37:19:3b:33:73:e8:ed:89:0e:f0:f9:b8:16:fd:16:
                    c8:16:a8:9c:91:f6:ff:e8:b3:11:b6:c4:a4:1d:80:
                    89:b4:78:57:44:45:b1:94:99:28:90:fe:29:28:16:
                    ad:a6:00:32:65:b3:0e:32:34:39:ca:6b:7c:56:9f:
                    eb:a1:e4:55:74:db:13:39:4a:94:06:c8:3c:b7:06:
                    82:7f:3b:7f:7f:05:90:36:05:40:3a:f8:8e:02:29:
                    dc:31:7d:17:a3:af:40:7a:b2:fd:41:76:be:a4:ec:
                    33:ba:80:54:1e:36:24:8e:82:99:f7:e8:f5:03:57:
                    8d:1e:c3:d9:94:14:fe:21:c1:50:e2:98:0a:00:99:
                    72:f2:b0:f1:74:ba:1b:03:fa:4f:1d:b0:3b:be:4a:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D4:3F:50:F8:93:0A:53:DE:D8:F8:49:5E:79:37:EB:F3:35:A5:AA
            X509v3 Authority Key Identifier:
                keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9a:0d:cf:bf:9f:ba:69:c9:f4:15:94:2c:61:be:c1:61:4a:
         a0:df:21:d3:0c:8b:0d:db:da:38:be:5f:9d:e1:a8:cb:ec:ce:
         0b:07:35:88:5e:77:39:2e:01:60:9f:5e:83:cf:af:f4:51:77:
         30:15:9a:3f:3b:a6:cc:a9:d2:d8:19:e6:74:65:68:d5:fe:12:
         2a:6e:31:52:54:c5:e9:5d:2d:e8:f2:d7:2f:d9:ea:e1:ee:67:
         65:89:78:42:a6:54:6d:f8:e5:7d:bf:c5:60:9f:ce:bb:b0:b0:
         7b:0e:e5:62:0a:b8:f4:9b:72:ff:f5:1a:22:f7:7a:19:d9:5d:
         60:12:92:cd:81:b9:ec:4e:87:5f:f2:1d:36:3d:d0:c0:42:e0:
         de:a0:4d:0e:72:93:fb:1d:35:41:02:80:3d:ca:a5:b5:f0:44:
         01:c4:92:95:ea:97:75:71:b2:84:b4:cd:a4:e6:6d:06:f7:e2:
         0b:59:15:03:6a:aa:0c:67:3f:05:b8:f0:a2:ca:2c:42:00:8b:
         88:e8:ca:9b:cb:4e:9f:12:76:24:2d:c9:df:cb:d1:57:95:08:
         08:2d:a7:21:e1:92:98:32:77:83:fa:82:43:87:e7:37:e4:aa:
         b8:d3:fc:08:a3:ea:3a:e7:77:5a:9b:e8:3b:26:02:17:13:1b:
         e8:6e:eb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:51:09 2024 by rpki-client on console-ams.rpki-client.org