Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File:                     u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier:          o9KcoUadXVL9ytzgNKt7wNCuUyEVxfdKqoeLniam7ho=
Subject key identifier:   AE:58:F1:7F:71:A1:F3:81:6E:D8:1A:BE:58:D8:01:08:52:73:AC:23
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer:       /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial:       019033CE076AA6EF134CB95E11D0D74D11BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number:          11D2
Signing time:             Thu 20 Jun 2024 04:00:58 +0000
Manifest this update:     Thu 20 Jun 2024 04:00:58 +0000
Manifest next update:     Fri 21 Jun 2024 04:00:58 +0000
Files and hashes:         1: KarZ0W_LZKvUQJPTghMR47QlctU.roa (hash: jD06vTDNgdTIEIurv6NDaQIbrj+c+ELh+s8okZggwrM=)
                          2: XlAZECchLGPJmBNFJF8Nqfz9SN8.roa (hash: gyS2x/KbMB4gmmK+cEa8Fk6wjJtYNImOv16fgeOd+4s=)
                          3: a5JNcvWj4NTMiiCHXUEMK9j325Y.roa (hash: /5wX+4nOL+GvUAqOQnGWPFr9VjqDZpshMocM3SCXBo8=)
                          4: gnvWkxxKouA1oEQVjDRniaeTgog.roa (hash: lrzB8cTk56VSQHgIS3JbdQlfe98riIMcWdpb6YE48Ww=)
                          5: kEEM_VlTXQNGCtGD1pYZuhpYBYo.roa (hash: UNYAfcDWhuVFnZqfBRZpOAL0HTLY0E+3/Gxpz0+WMM0=)
                          6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: Ak6fMCpxL+xbrKjNrZL9afdS+yXPT0A9mP2KzRW4/eo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:ce:07:6a:a6:ef:13:4c:b9:5e:11:d0:d7:4d:11:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
        Validity
            Not Before: Jun 20 04:00:58 2024 GMT
            Not After : Jun 21 04:00:58 2024 GMT
        Subject: CN=ae58f17f71a1f3816ed81abe58d801085273ac23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:80:5e:e6:30:2c:c2:b2:c2:00:9d:0d:68:15:
                    0f:fb:84:4d:43:b0:d1:ce:ec:ef:71:e6:f0:bf:cb:
                    e5:00:36:c0:88:3d:70:38:e9:a0:ca:49:d5:0e:ea:
                    0d:89:be:ae:e3:e4:80:33:c5:9f:b8:d4:ab:28:2c:
                    35:88:38:6e:a2:c8:12:83:ab:2f:61:ef:fc:86:29:
                    e1:69:e0:8e:06:b1:fe:5c:b0:6e:32:5b:52:34:94:
                    59:ec:b6:cd:a1:97:71:2d:c0:eb:32:8b:f5:80:c3:
                    99:98:1a:1a:7e:79:ae:99:20:76:d1:06:f7:70:f8:
                    43:d9:c5:05:29:87:21:50:02:ff:f2:02:10:4d:b5:
                    81:3f:0a:47:17:ba:2c:5f:e3:f1:81:51:5b:28:70:
                    4c:74:2d:6a:60:ba:e2:79:65:9f:8c:b2:86:80:8d:
                    70:fc:8d:05:e3:ea:5b:64:ed:18:41:61:c9:3c:dd:
                    0d:f4:8d:48:be:c7:05:4b:96:80:7f:33:0d:3f:4c:
                    eb:f5:d8:63:5d:57:e6:8d:67:93:b9:91:fc:09:c3:
                    95:a1:f3:19:42:59:18:2e:2f:d1:70:2d:48:a2:7f:
                    f7:b8:aa:38:ed:2c:c1:0f:94:58:97:32:1f:76:23:
                    bb:50:3d:ea:5d:31:67:e9:ca:80:67:91:b7:02:74:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:58:F1:7F:71:A1:F3:81:6E:D8:1A:BE:58:D8:01:08:52:73:AC:23
            X509v3 Authority Key Identifier:
                keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:d4:47:c5:88:76:72:15:71:c2:61:8f:db:67:17:fe:6e:
         85:04:11:02:1f:f9:f5:4b:32:30:d9:a8:c4:6c:e9:80:b6:c7:
         41:5c:22:a5:08:ea:d0:c9:35:be:fd:bc:14:ad:6c:10:ae:4a:
         c0:db:58:db:65:b6:9e:82:64:ed:9b:47:24:ad:d7:0d:d3:48:
         37:df:1a:ea:50:92:7b:95:7b:cd:45:9d:d0:27:b7:ad:d6:2e:
         4c:53:83:7f:4d:5c:95:b6:1f:b5:77:ea:cb:30:eb:a6:5c:e6:
         71:a3:fc:51:16:78:1c:0e:79:87:28:60:2d:a4:79:72:3e:36:
         70:64:e7:2e:fa:51:4c:fd:f5:9e:62:c6:70:d9:23:10:c1:1d:
         07:c4:de:e7:27:43:66:f5:ac:41:af:a9:2c:22:f8:9b:dc:54:
         3c:56:fe:54:8a:c2:a9:aa:15:37:6a:26:00:4d:f7:ce:19:d4:
         d5:20:c0:fe:fe:97:56:f6:c2:0b:eb:5d:a3:ed:9e:76:40:55:
         2d:2a:46:27:2f:15:dc:08:b8:af:32:39:13:fe:ba:4d:a3:b2:
         8f:0c:1a:44:4b:d0:50:a0:2c:ea:7a:e4:43:b9:c9:4e:48:2f:
         e5:90:e7:99:92:96:44:44:b8:16:fe:9e:52:dd:6e:71:a3:ad:
         41:ae:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:27:30 2024 by rpki-client on console-fra.rpki-client.org