Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File:                     250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier:          bI2pPPwlXh7xWpyxl1uTP0hYZkh35H66F2q44rZmcGA=
Subject key identifier:   BD:22:FC:AF:A9:35:8A:B4:76:DD:3A:D0:9C:3C:DD:1E:5D:19:6E:DB
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer:       /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial:       01901E8FC098A8B4FFFAF8CD3C0026FF1C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number:          0D8C
Signing time:             Sun 16 Jun 2024 01:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:55 +0000
Files and hashes:         1: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: muRpbeWHWczqNAPBEbcJMZxQhu3yJtwtXnvuPEq8W9k=)
                          2: 3_CumXJFY0DBejQkFUVkzCF3-5E.roa (hash: 2DlbALZilAVymorjMNDzf6+Z1j20OppipK4ND4bSbiY=)
                          3: BcXx__eN4BOxMuEupABLCKXfBSE.roa (hash: j75x+Hv2zaT9qHXlJ/qfTrvv1E93mv5UgxrMhGTbYGw=)
                          4: EIT0NqcX8FRcBj3mr-UzgRxA0_s.roa (hash: HsJgV3FQKZukCQvKN0wqOVh2X206BcJb70qvFf/+Z6A=)
                          5: R8aF17WmY7eq3okCCuOK7_a9WZA.roa (hash: 0lR6KIF8mNFcvb24ietYcYUUE5ID+4HihrVA5KaYYI0=)
                          6: eaUF5HRVW0XzEJEWFLex9-gWNbM.roa (hash: LSx2rmy+BBHCxzcKZG1bSe2N3KCl9tx+y8nU7VG44zc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:c0:98:a8:b4:ff:fa:f8:cd:3c:00:26:ff:1c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
        Validity
            Not Before: Jun 16 01:00:55 2024 GMT
            Not After : Jun 17 01:00:55 2024 GMT
        Subject: CN=bd22fcafa9358ab476dd3ad09c3cdd1e5d196edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:d8:22:b1:3f:ab:81:79:48:d5:05:98:d0:
                    f4:17:25:4a:86:f6:fa:90:3c:a3:01:33:c1:7c:16:
                    fa:fa:4e:25:fd:b0:df:3c:b0:9b:73:b8:16:12:0d:
                    b0:ca:d6:c1:5a:1c:5f:a2:b5:ee:d7:91:87:96:cc:
                    8a:2d:98:0e:cd:a0:99:98:31:ab:10:ef:59:01:19:
                    14:6b:41:1a:f5:86:c6:d0:00:25:39:f0:66:4f:a9:
                    f2:96:8e:5c:e2:39:b7:90:d4:83:e8:80:cb:ee:5f:
                    bb:a5:64:6e:c2:e9:7c:15:05:43:9d:4b:2a:75:5e:
                    5b:c3:cb:9c:e5:f8:45:3d:5e:93:16:8a:16:0e:b3:
                    b1:68:87:4e:1a:e6:83:35:c9:68:c2:52:37:2a:b7:
                    e9:5c:f2:80:dc:9f:ca:ad:c6:c2:71:bb:4f:d6:c1:
                    84:00:c8:bc:1e:1c:4f:57:ad:aa:29:eb:f1:39:55:
                    43:c5:08:49:61:91:0a:d8:f5:4d:dd:54:6e:1b:00:
                    04:4b:14:dc:59:4b:91:77:e1:35:7a:a9:c1:64:68:
                    1e:c1:3f:95:e6:74:73:06:a4:8d:bf:6f:4c:b6:fe:
                    19:d7:78:d8:93:bf:f0:17:3c:fc:ea:27:a3:0d:3a:
                    df:98:e0:a8:1e:11:4e:b4:d0:d0:a3:db:80:19:ee:
                    ae:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:22:FC:AF:A9:35:8A:B4:76:DD:3A:D0:9C:3C:DD:1E:5D:19:6E:DB
            X509v3 Authority Key Identifier:
                keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4e:4a:42:ee:86:a0:08:32:7d:b7:16:f5:d3:f2:5c:94:a5:
         6e:3f:19:e0:3e:e1:c6:b1:b0:37:22:25:ea:f7:2c:d9:af:c4:
         dd:ff:7a:f3:7e:4c:95:db:72:c9:3f:82:c0:54:bb:44:81:b4:
         38:26:82:41:94:04:58:10:1f:7e:1f:5c:78:28:2e:8c:3e:2d:
         9b:3d:30:c8:fa:4f:92:3a:6c:e9:f1:73:a3:a5:8f:3f:ee:40:
         5d:02:ea:7e:ea:af:08:81:d9:c7:99:f8:df:ac:bb:6b:be:48:
         e6:0d:43:87:56:8e:b8:5d:d2:a9:ad:8a:ac:1d:fd:e0:94:56:
         00:9a:e6:03:8b:6d:9a:f8:be:61:32:5a:66:1f:62:eb:e3:0e:
         27:2a:60:38:16:96:9e:e9:da:8c:42:de:4e:4f:fc:23:0f:3c:
         0d:67:29:dd:c9:3a:87:82:c7:7f:2e:21:09:b3:56:42:ae:8b:
         f0:d3:2f:6d:ce:3e:ea:f7:fb:00:48:11:13:39:10:c8:37:b1:
         00:9f:f3:a7:f3:1b:9a:41:ac:c0:a2:e4:6d:46:2b:83:fc:68:
         52:31:dc:32:b3:2d:5e:41:86:f8:e1:68:8a:d4:85:34:0f:0b:
         da:f0:fa:ca:51:32:8e:cd:2c:30:cf:86:40:95:57:f2:11:c8:
         52:b8:71:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:37 2024 by rpki-client on console-fra.rpki-client.org