Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File:                     AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier:          vln9/qlZl6VcN6oDBIBbyhgZK4ETvQsbgYFZBdshjIs=
Subject key identifier:   F2:56:9E:FE:9A:27:43:C0:7F:5F:04:02:86:42:4F:86:C7:36:33:9E
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer:       /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial:       01901EC71329591E5A0F29867560FF1C958F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 02:01:21 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:21 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:21 +0000
Files and hashes:         1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: X5c2NJLrebpmEXtlVnDhqIjFGrFZKnNELHT+lwHYZXQ=)
                          2: T49QIqnNNcKeOxbYnONDdm1zDv0.roa (hash: CjLdhyWpEYBH2noAwFgyhvfuISWLEiqE2Pw8t/NekmI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:13:29:59:1e:5a:0f:29:86:75:60:ff:1c:95:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
        Validity
            Not Before: Jun 16 02:01:21 2024 GMT
            Not After : Jun 17 02:01:21 2024 GMT
        Subject: CN=f2569efe9a2743c07f5f040286424f86c736339e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bd:1a:96:99:4d:7f:b5:18:0c:e3:73:e4:ff:
                    9c:a7:c8:31:06:1c:8f:81:f0:9b:81:e6:48:9e:ad:
                    b9:76:c4:86:d9:13:3c:f1:e6:a8:b7:d2:bb:92:f4:
                    9c:fb:84:16:f6:3f:79:e4:b9:8f:6b:68:0d:73:64:
                    3e:ea:13:79:3a:25:a3:f1:2a:d7:b3:5d:3b:48:52:
                    db:7c:f5:27:22:79:f8:a5:c5:23:83:f9:66:5c:d7:
                    56:ef:e9:9e:ea:94:3e:fe:ac:d3:fd:ea:32:2b:0f:
                    61:82:fe:b6:db:20:30:d2:eb:ca:ea:39:c4:b4:a3:
                    0c:33:05:c8:bd:71:67:af:91:e5:01:ea:65:6c:34:
                    f4:c4:94:0c:e6:85:b8:7b:4d:37:95:e5:24:a4:91:
                    7d:7e:b4:fd:a3:3c:e9:c7:7c:61:fd:17:94:08:e5:
                    58:d3:69:8d:69:10:af:b1:08:6d:61:bd:d9:c1:f7:
                    fc:9d:cd:44:a9:92:a3:4f:20:75:d3:ac:96:0b:c1:
                    00:46:8c:a3:d7:cd:9e:4f:46:a5:bb:bd:11:fe:6f:
                    28:41:d2:b9:8c:c7:69:6e:91:69:84:8d:76:06:71:
                    cc:fa:5d:98:49:6a:0c:cd:97:cb:72:fa:7a:d0:23:
                    93:95:4d:72:e7:e2:12:e6:4e:89:70:26:79:a0:62:
                    6c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:56:9E:FE:9A:27:43:C0:7F:5F:04:02:86:42:4F:86:C7:36:33:9E
            X509v3 Authority Key Identifier:
                keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9c:4b:96:0c:87:b8:0b:73:3d:07:3c:c4:44:33:66:34:51:
         dd:06:a0:87:58:76:ca:02:54:91:7b:4e:a8:78:b6:e9:25:8c:
         76:8e:f2:dd:81:41:75:ff:68:f7:51:4a:62:10:81:42:1e:c1:
         00:ca:df:71:de:3f:f0:c5:a6:fb:a9:e6:4b:3e:0d:a2:71:ae:
         1f:18:31:e0:2b:43:51:d1:27:f5:17:e2:92:73:7c:b1:dd:1a:
         db:67:3b:fc:32:15:44:1f:4e:f4:b8:d2:39:98:67:cf:b0:4e:
         1d:fe:49:33:f4:92:90:60:45:f1:4c:98:7b:4c:e5:ba:a2:30:
         72:2c:62:7f:e0:5b:5d:2e:8c:9a:a8:d1:f1:19:40:97:a8:46:
         13:33:b4:c2:0a:dd:5d:88:ab:01:8b:a6:5e:71:5f:3a:f5:0b:
         fe:47:66:1b:2f:ac:e2:1e:37:da:c5:f7:dc:06:6a:c9:d0:ee:
         48:da:0b:c3:60:89:ab:16:53:ee:46:ce:ba:f2:bd:14:d1:93:
         2c:f4:fc:32:16:35:e6:bb:2f:d9:53:8a:ea:50:58:56:5d:c7:
         4e:f0:b4:c9:af:f2:94:89:f4:6f:23:5d:ab:52:ca:79:84:0c:
         d9:d3:bb:2e:cf:b9:2e:8d:0d:58:69:88:7c:00:bb:8c:04:b1:
         58:44:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:53 2024 by rpki-client on console-fra.rpki-client.org