Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File:                     czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier:          Mn+OwKJq3+y11pGzOerhZAqJtSuPPKRHrERH7qBOYv0=
Subject key identifier:   A1:DF:24:73:C2:32:28:CC:5C:92:05:C1:8E:5F:A2:9D:49:13:B6:44
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer:       /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial:       01901BFD6A061FF9E753307693AFFCF2A53D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number:          02FB
Signing time:             Sat 15 Jun 2024 13:01:50 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:50 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:50 +0000
Files and hashes:         1: 785m9a2lXTkXLAJwZMKukWrRN-Q.roa (hash: 0MQyJAvAhOvDIZmJ5j0YtRBA+jaaG6iZSPLR6cTqTBY=)
                          2: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: gb+NiRS4Mpmgc6xa6lhpYoNQUsNO2twzHfi01vqY2Go=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:6a:06:1f:f9:e7:53:30:76:93:af:fc:f2:a5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
        Validity
            Not Before: Jun 15 13:01:50 2024 GMT
            Not After : Jun 16 13:01:50 2024 GMT
        Subject: CN=a1df2473c23228cc5c9205c18e5fa29d4913b644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:e4:53:3b:4d:6e:54:91:60:80:93:6c:57:
                    d5:cd:f6:1b:74:f0:bf:9c:9a:fd:c3:0c:9a:b3:06:
                    8b:98:a8:df:6d:4b:bf:bb:16:c6:bd:52:59:37:5b:
                    56:01:1c:cf:9b:0b:c4:da:90:87:6c:2a:2d:c9:f1:
                    cb:32:2c:a4:29:63:7b:59:21:e4:c8:95:61:39:32:
                    8e:00:d0:47:41:bb:0a:6b:e6:22:49:1b:a4:97:6b:
                    f0:9c:fb:3e:cf:e0:b6:a2:20:e6:3e:22:29:f2:8c:
                    2a:2b:35:48:1b:4a:e6:12:8d:ad:76:93:cb:8f:8b:
                    3c:82:d9:c8:f0:e5:3b:f7:0a:81:05:b1:6e:66:cd:
                    cb:2d:9d:91:c3:e9:93:bd:94:a2:92:ce:b3:32:c4:
                    37:35:c3:77:f4:64:21:cc:42:4e:f1:e2:d8:04:44:
                    25:46:49:42:35:c7:9f:5e:38:6c:f9:9d:74:74:7f:
                    ba:9e:38:4a:52:ea:27:3b:7f:c5:81:93:82:23:f9:
                    a3:68:8b:b4:3e:dc:e9:e3:d5:9c:4f:11:f6:b1:e0:
                    6a:68:ec:b6:aa:8a:12:19:af:89:f2:5e:f5:3f:c0:
                    d5:67:ea:58:a0:a1:c0:35:8c:2e:77:18:da:3f:fb:
                    26:ec:65:93:fa:d9:2e:cf:fd:78:30:90:db:6e:1b:
                    12:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DF:24:73:C2:32:28:CC:5C:92:05:C1:8E:5F:A2:9D:49:13:B6:44
            X509v3 Authority Key Identifier:
                keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b0:63:7e:a3:d6:c7:0e:be:77:2f:a8:f5:a0:c1:e5:12:25:
         b3:5f:40:ce:88:15:9f:a9:d6:cd:f6:69:2e:bf:94:74:8e:f3:
         05:15:ae:4a:40:6a:82:f0:d5:7e:3d:ef:37:b4:e3:9b:76:ef:
         ba:d3:b2:52:f5:c0:14:95:f0:dc:ff:0a:0e:1d:99:bc:e1:49:
         22:4f:56:af:38:c7:73:a8:09:00:7c:03:1d:1e:17:2f:ff:c7:
         8c:b8:df:38:5a:ca:ec:00:00:ab:3f:cf:d2:cd:5e:69:8b:1e:
         f2:93:0f:41:42:cd:b1:43:bd:ef:b8:fc:3f:3b:28:01:e7:ae:
         f7:a7:eb:74:16:d6:c4:ab:b2:60:19:0d:0c:21:73:16:0e:87:
         2c:d1:ac:f2:79:9d:35:ac:cc:8c:c0:5b:92:e3:d7:39:3e:41:
         d9:8f:dc:d1:61:0b:df:45:1f:ab:b5:dc:98:41:ec:01:4d:16:
         8a:d0:5b:0f:d0:14:86:48:ee:7a:86:67:57:ac:9b:7a:ce:37:
         ae:50:90:45:8e:03:43:64:6d:4a:49:1e:8a:27:18:40:30:2b:
         e0:82:ca:e0:1e:77:3a:aa:61:70:fb:2c:65:a7:04:60:17:b7:
         25:6e:6e:23:5d:49:63:90:1c:64:dd:98:22:4c:56:93:a3:5e:
         26:7c:91:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:37:49 2024 by rpki-client on console-fra.rpki-client.org