Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File:                     c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier:          vFr3fCx1tArFXrI01CgKNzkwrt56LV9vAwX3PWWMc9A=
Subject key identifier:   36:E5:9B:71:30:10:A9:DC:02:6F:47:48:E2:CA:A8:96:D3:C5:A5:88
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer:       /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial:       01903E1AD3556B802D03F4EA14045AD239E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number:          11D6
Signing time:             Sat 22 Jun 2024 04:01:03 +0000
Manifest this update:     Sat 22 Jun 2024 04:01:03 +0000
Manifest next update:     Sun 23 Jun 2024 04:01:03 +0000
Files and hashes:         1: 5_qwJVIKEoZBfmNd8yNldjKt-Bk.roa (hash: YUVbOQQYo+sRsBoWssz++DKM1ZS33QD4Je1OAjkA5xQ=)
                          2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: CkLwJ/scQ5c1AXxROg1rMKGSs4rofIWaTWHxwY7w8CQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:1a:d3:55:6b:80:2d:03:f4:ea:14:04:5a:d2:39:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
        Validity
            Not Before: Jun 22 04:01:03 2024 GMT
            Not After : Jun 23 04:01:03 2024 GMT
        Subject: CN=36e59b713010a9dc026f4748e2caa896d3c5a588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c3:41:a1:03:aa:1e:dd:98:e7:19:96:27:1c:
                    31:cf:63:2d:b1:c0:04:e0:76:e7:bc:ce:84:07:19:
                    14:93:eb:ae:ce:58:77:f9:15:b9:11:09:05:e5:3d:
                    e0:93:14:1e:df:e9:5b:6c:29:10:9d:24:d4:a7:99:
                    7c:59:2d:f2:4b:54:e3:f4:5f:e0:ee:bd:3a:a5:c9:
                    90:b4:34:6b:1e:27:5a:94:ab:bc:d4:fb:4c:b8:3a:
                    61:18:e0:ee:1a:ea:4a:b0:ff:b2:b0:15:f5:ed:bb:
                    5b:1c:d1:88:42:75:c6:6f:e7:0c:54:07:0b:eb:77:
                    53:5f:07:24:4f:6b:23:4a:26:02:7a:7d:6a:46:0f:
                    d5:2b:de:38:81:17:6f:98:a1:9b:54:b5:23:a2:6e:
                    d4:58:d9:cc:81:78:71:67:c5:dc:57:28:50:1b:93:
                    29:27:ed:fc:8b:5f:90:18:b6:8b:e2:77:21:22:73:
                    29:30:e6:ce:c7:85:ae:c5:53:f9:59:1c:50:57:ad:
                    79:3f:0b:6f:ce:94:d6:9b:59:1c:6a:a0:9c:79:a8:
                    ea:eb:24:4a:98:8b:94:42:2e:bf:6e:1c:fa:a6:ac:
                    1c:40:46:cd:90:89:e3:a8:d8:d4:46:18:42:c8:8f:
                    08:b5:f8:d2:84:1d:a2:37:9d:25:13:a3:82:a4:0a:
                    51:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E5:9B:71:30:10:A9:DC:02:6F:47:48:E2:CA:A8:96:D3:C5:A5:88
            X509v3 Authority Key Identifier:
                keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:50:70:b4:16:96:fc:16:a8:25:1d:90:6a:90:25:77:2c:7c:
         b1:05:81:ce:8d:95:b4:46:f0:e6:b4:20:68:e6:0a:74:3d:ce:
         88:a9:55:57:f1:a9:45:be:87:16:33:d6:c1:c3:d4:22:6b:7d:
         ba:8b:a0:fa:fc:d0:e5:fb:a8:ad:68:92:1c:20:61:e4:a4:35:
         cc:69:fa:d3:61:0a:a2:7f:a7:40:d8:ea:b3:89:5b:db:14:2f:
         97:8e:6c:4d:60:d7:a5:52:b7:9c:b0:1f:4b:5f:21:4d:37:f7:
         a2:e2:d9:0a:34:b0:79:0e:e4:41:9b:7b:da:a0:e8:8b:dc:47:
         78:fc:f9:c7:ac:60:6c:6b:7e:d8:1f:bc:4d:34:2a:4d:ce:89:
         45:2a:36:d7:c5:b1:c1:ad:21:0f:46:65:2b:7a:d0:5e:cc:00:
         bc:a4:e4:1f:c3:28:39:8f:cb:e6:5c:50:54:33:99:97:6c:ef:
         2c:f9:a1:33:b1:c7:ef:45:c6:3b:a0:2e:df:2f:dc:d8:81:59:
         10:5d:1a:73:37:ad:68:ad:9e:a4:d7:09:06:07:b1:ea:67:dc:
         89:c4:79:fb:6e:1b:f4:19:d3:ab:75:a1:ce:73:9e:6d:ba:1b:
         ad:af:89:0f:6a:c0:ea:b8:5a:5a:0c:07:74:28:cd:b3:17:a4:
         99:3f:fe:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:12:54 2024 by rpki-client on console-fra.rpki-client.org