Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File:                     k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier:          oySa02hSY3NtfhBOSAwCciYnlmRfG1nxgwGJZDqDV4E=
Subject key identifier:   74:91:44:83:47:89:1F:E5:61:6C:C5:27:C4:3F:D1:0E:A7:CD:41:5E
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer:       /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial:       0190486997C4CBBD30A4CF5093FDEC952DDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number:          11DB
Signing time:             Mon 24 Jun 2024 04:03:17 +0000
Manifest this update:     Mon 24 Jun 2024 04:03:17 +0000
Manifest next update:     Tue 25 Jun 2024 04:03:17 +0000
Files and hashes:         1: 6jQ3xTr0DIH9j5gjCwFzp6Mvd2I.roa (hash: ncr2QxgHYD4NU6BEHv1sH7MKgOyN/gtD0TuynRqqXm0=)
                          2: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: jGG1Q0j8llht8F3LlthZii03JbdOcGTEj3AUY0aIE28=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:97:c4:cb:bd:30:a4:cf:50:93:fd:ec:95:2d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
        Validity
            Not Before: Jun 24 04:03:17 2024 GMT
            Not After : Jun 25 04:03:17 2024 GMT
        Subject: CN=7491448347891fe5616cc527c43fd10ea7cd415e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:8e:11:95:0f:e1:a3:2c:58:16:0f:a3:9b:
                    d3:c7:47:4c:0f:b0:f8:30:29:23:c2:7e:e0:63:3d:
                    19:87:23:95:77:b2:e6:b4:3a:ed:98:66:bb:94:ca:
                    8d:38:e5:98:10:22:50:bd:01:04:97:09:8d:27:9b:
                    6d:ab:9d:3b:c8:fb:8d:72:b0:96:ce:d2:19:ec:bf:
                    e5:b6:88:8b:d0:98:dd:9c:f2:b9:ee:49:03:af:2f:
                    3a:13:50:ac:00:26:0c:e3:81:59:7a:2e:5b:28:50:
                    9d:4c:12:ba:3d:3a:15:18:89:c7:20:6e:22:f2:98:
                    5a:46:28:60:3d:20:54:1f:c1:8e:b7:ab:0b:8d:44:
                    e3:de:47:cb:57:a7:4b:be:2e:0c:4d:cb:e3:10:39:
                    02:13:85:f7:de:50:c9:0c:08:b6:49:02:82:ef:89:
                    19:94:d3:c4:63:72:9c:29:08:ca:99:1f:e7:d2:31:
                    e1:52:e6:7f:1d:1a:18:6e:cc:83:bb:44:c0:b1:89:
                    41:aa:9a:f9:ef:a0:93:2c:c2:f7:50:35:ed:7f:6c:
                    5d:cb:06:5b:ef:6d:a0:79:d3:aa:4a:c0:26:24:75:
                    bc:d8:9a:73:3a:9c:7b:bb:4b:3d:23:3c:61:97:a8:
                    da:fa:e4:de:af:fd:d2:75:49:14:c8:b7:af:9c:d1:
                    d5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:91:44:83:47:89:1F:E5:61:6C:C5:27:C4:3F:D1:0E:A7:CD:41:5E
            X509v3 Authority Key Identifier:
                keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c8:b5:85:42:56:d6:3d:b0:8a:31:d8:db:0f:d5:f4:50:00:
         19:8c:c9:df:5f:a3:5b:7a:65:37:c6:47:3e:af:c2:a9:86:06:
         7b:d9:80:0f:bf:c5:72:5a:09:62:9d:98:15:d7:63:ea:3d:c6:
         b0:de:d3:3b:08:ee:3e:92:f3:3c:ba:5f:18:d7:ed:10:c2:ed:
         be:f7:61:c7:ea:e0:27:32:3c:6c:42:bd:a6:84:56:db:8a:20:
         75:0a:91:66:6e:97:37:f5:21:c0:ca:f8:c0:2e:3e:02:ee:81:
         5c:41:87:86:e4:ca:70:85:bd:cf:60:da:ea:e8:c4:cf:a0:e1:
         69:f9:bb:91:a3:61:9d:e5:2d:96:ad:e0:39:cf:7f:bc:fb:98:
         f8:51:3c:c0:b1:1d:f0:43:db:48:f6:73:f8:1d:40:a0:e8:09:
         f7:34:4d:11:12:73:78:08:4f:f7:38:36:38:f1:75:e1:18:7d:
         80:52:cb:4e:e0:13:e2:69:d1:2e:ba:98:a6:84:3e:3f:91:f7:
         99:ad:93:3f:3f:51:ef:06:0b:da:31:2f:fd:73:38:b9:38:46:
         9d:15:06:e5:8e:e8:27:2e:69:ea:16:5b:e5:ef:1a:d3:31:9a:
         8b:ab:7c:01:c1:0e:ce:ed:5b:35:96:e6:13:3c:31:66:58:40:
         a1:cf:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:27:15 2024 by rpki-client on console-ams.rpki-client.org