Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft
File:                     2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft (raw, json)
Hash identifier:          E21nfH3jxdJJ3DrvC4BHB2HIEq0yhDcYjanLFKO8U5Q=
Subject key identifier:   14:85:A9:EB:7D:8E:79:81:2B:C7:53:B5:A4:18:24:70:3C:2B:A2:70
Authority key identifier: D8:17:3D:42:A8:78:8C:05:DE:36:FD:FC:D3:29:C3:5B:43:EE:CE:3E
Certificate issuer:       /CN=d8173d42a8788c05de36fdfcd329c35b43eece3e
Certificate serial:       01901CD852603EC756312C09E3CE1DCC2428
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Bc9Qqh4jAXeNv380ynDW0Puzj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft
Manifest number:          08FC
Signing time:             Sat 15 Jun 2024 17:00:57 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:57 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:57 +0000
Files and hashes:         1: 2Bc9Qqh4jAXeNv380ynDW0Puzj4.crl (hash: Se8wLyCctcc6DUlGTTrNoU2e4tJcq9DJKOoB2r3hBjc=)
                          2: DpyiQgQ9FdTG5s8YbeYxHyQxbOM.roa (hash: YoIx6oD1L1+W6DX16hCA9uHG0kfmePKoHXMxdCbW3dE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Bc9Qqh4jAXeNv380ynDW0Puzj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:52:60:3e:c7:56:31:2c:09:e3:ce:1d:cc:24:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8173d42a8788c05de36fdfcd329c35b43eece3e
        Validity
            Not Before: Jun 15 17:00:57 2024 GMT
            Not After : Jun 16 17:00:57 2024 GMT
        Subject: CN=1485a9eb7d8e79812bc753b5a41824703c2ba270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:0c:cd:25:aa:c7:34:71:0f:7b:da:21:23:
                    db:17:b6:8e:30:da:e1:db:62:3f:f4:d3:45:75:99:
                    72:54:79:fa:ed:5f:88:06:16:a5:cf:a0:a6:4d:ca:
                    c3:fa:bb:8e:27:42:d6:01:5e:bb:b8:2e:56:5f:47:
                    31:9a:bc:b6:84:d4:7b:2a:c5:c7:46:f5:65:ce:63:
                    03:8d:ae:a6:d5:a9:06:d5:96:de:b9:a8:11:1b:ab:
                    17:11:6f:37:d4:42:ae:08:62:4c:5d:60:45:2d:6f:
                    2d:fc:b9:f8:8e:22:fd:bf:73:67:84:01:c9:3d:84:
                    ba:a4:d7:8c:bd:7e:3b:58:70:e3:ac:0d:88:fa:a5:
                    df:dc:b2:5c:b1:68:a5:7b:03:ea:98:c0:bc:9f:b5:
                    f2:54:d5:7c:fd:e7:09:dd:aa:b1:68:43:22:e1:32:
                    e8:18:96:a0:8d:00:d1:c3:9f:98:16:6f:d3:5b:37:
                    fd:5e:61:d4:b6:6f:3b:da:a8:73:58:b5:ab:3e:58:
                    11:e3:3f:74:e1:c2:9b:cd:1f:e4:a5:30:d2:51:c9:
                    f5:12:ed:da:76:e9:04:e9:bc:74:55:22:1d:4b:f5:
                    cb:c7:30:df:0f:58:e8:30:41:60:5d:17:1b:b3:c5:
                    c4:75:39:02:2e:a6:74:ec:4b:06:d4:cb:7c:8c:d4:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:85:A9:EB:7D:8E:79:81:2B:C7:53:B5:A4:18:24:70:3C:2B:A2:70
            X509v3 Authority Key Identifier:
                keyid:D8:17:3D:42:A8:78:8C:05:DE:36:FD:FC:D3:29:C3:5B:43:EE:CE:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bc9Qqh4jAXeNv380ynDW0Puzj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:30:09:74:5f:0c:de:2c:05:cd:c6:04:07:38:92:86:da:ed:
         b3:a6:79:01:1d:74:ce:41:e3:d0:af:d6:cd:a5:50:ca:ef:f3:
         2c:32:fd:61:c9:da:9d:6d:99:d5:28:22:e6:d3:e1:3e:6c:c1:
         5f:3f:8a:43:46:b5:bd:59:8d:a2:33:34:39:46:1f:0a:d7:b7:
         65:ab:c2:ba:4b:91:e4:d5:08:ad:3e:bf:c3:55:22:89:a9:65:
         2a:4b:9b:4d:c0:0e:de:d4:96:13:50:dd:ea:92:a6:a0:9f:be:
         a6:8d:18:3f:53:45:49:7d:85:17:51:a4:2d:f3:03:91:4e:be:
         0c:80:bc:e2:41:f5:10:c5:21:52:ad:46:51:4e:52:e6:13:72:
         5b:d1:7b:4a:d7:2d:93:a1:68:2f:f0:83:55:14:fd:78:fb:1b:
         8a:d3:b1:88:b2:17:dc:81:da:61:e0:e7:97:ad:9c:5b:97:17:
         aa:a7:47:f3:bc:c4:06:9a:46:8c:a9:fa:61:32:f1:b8:ff:72:
         4a:d8:d9:26:29:a9:4a:aa:b4:aa:f1:95:f5:38:64:97:91:60:
         de:bc:5d:41:fd:ce:c7:06:c7:09:ea:e8:0d:f9:ba:60:d7:fa:
         7d:9b:aa:15:f2:66:1a:e0:2b:f4:44:4d:dd:0c:cc:f2:40:cf:
         91:38:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:14:06 2024 by rpki-client on console-ams.rpki-client.org