Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File:                     Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier:          8G8xyTyB6fLyP4RoqnCnlu+EQMr93OwiXPU9QMZTTwI=
Subject key identifier:   20:41:E3:1C:51:2F:ED:AB:F4:E2:6F:71:52:7C:18:DD:9E:D0:AF:E7
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer:       /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial:       0190418957D13E6D61121576D0A44B6E8807
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 20:00:38 +0000
Manifest this update:     Sat 22 Jun 2024 20:00:38 +0000
Manifest next update:     Sun 23 Jun 2024 20:00:38 +0000
Files and hashes:         1: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: /NfxnzZTjsBv8xAJFOKeXiP2ok5YeXS7y6qfgVknUqg=)
                          2: hn0hvWt-gIZreD4oIYtCzTQbf84.roa (hash: pyGyb1s1SVZF9du576NHrOjbl5nm9Rq5O90OtTzk6GI=)
                          3: mYnkfFAFJ-zept2nSkGaDlhY4HI.roa (hash: NY7orzW5fV2bBnbhD1eNK1U0FrUDrYBh/qp8Ow39SPw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:89:57:d1:3e:6d:61:12:15:76:d0:a4:4b:6e:88:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
        Validity
            Not Before: Jun 22 20:00:38 2024 GMT
            Not After : Jun 23 20:00:38 2024 GMT
        Subject: CN=2041e31c512fedabf4e26f71527c18dd9ed0afe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:2c:be:9e:83:ea:c4:87:09:fe:cb:9e:ed:
                    b2:56:47:54:3e:63:0a:6f:a0:94:0a:bd:cd:92:34:
                    35:e2:76:73:6b:4c:64:08:d8:82:f8:45:ad:01:a0:
                    d2:f3:d4:11:5d:4d:03:8d:66:c0:fe:3a:ea:e7:44:
                    7c:96:ae:7b:57:59:67:4b:bd:a5:d6:25:fd:a2:20:
                    c2:2e:d9:5a:76:99:04:f4:0e:16:04:7c:79:10:cb:
                    70:62:6a:5e:36:8b:68:ec:75:d1:38:ce:0b:75:fc:
                    0f:61:79:34:58:d9:b4:17:8d:75:de:e7:0c:be:14:
                    81:80:ec:95:d6:a1:81:86:3b:17:46:45:cf:2e:6f:
                    8f:e6:0b:1b:13:82:cf:7b:81:b8:e3:b7:17:2a:af:
                    d4:c6:d5:32:4d:bd:5b:ed:13:0a:16:16:fd:eb:10:
                    31:55:d7:90:d6:7a:ce:52:b8:ec:6e:c0:75:27:fa:
                    7f:b4:d0:f3:ba:f2:77:9d:da:b6:18:1b:f2:a3:f3:
                    1b:fa:73:7d:5b:57:db:07:94:67:6e:4e:d9:08:19:
                    b4:47:1e:3d:ec:2a:da:5b:80:b8:43:81:16:ea:5f:
                    8d:a3:5d:11:b5:43:05:75:fd:52:a5:fe:8e:87:2d:
                    37:84:42:9b:a7:19:44:ef:23:ed:2a:eb:25:2e:3e:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:41:E3:1C:51:2F:ED:AB:F4:E2:6F:71:52:7C:18:DD:9E:D0:AF:E7
            X509v3 Authority Key Identifier:
                keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:70:e0:85:60:27:b2:d6:87:85:18:fc:5f:8e:e7:72:27:cd:
         8a:a4:60:ba:a0:5a:bc:0e:ac:ac:83:de:cf:a7:5a:5b:34:bf:
         aa:b7:20:c6:ae:4e:f5:d7:ae:83:5b:b5:e9:2e:9b:bb:29:60:
         0c:54:e5:a5:ac:57:c9:9d:15:db:c5:6d:81:37:54:78:de:6b:
         bd:a9:42:f0:8b:5a:0d:b5:9f:64:a0:bf:3f:ea:2a:46:ba:18:
         aa:97:d9:a1:67:e4:05:e7:7f:56:4c:28:1b:3a:a6:27:32:b0:
         2e:6d:19:07:d4:fb:54:64:29:3d:db:4e:a7:ec:6a:96:e9:0d:
         75:12:1d:40:ff:9d:31:1f:3e:c4:5a:0f:4a:f9:93:16:b9:d6:
         53:09:c9:e1:de:28:da:18:8e:d7:f6:a8:92:14:9c:2f:81:b5:
         bc:66:99:f9:d4:8a:85:9a:14:fd:65:65:8f:8d:90:ca:ce:01:
         f6:b8:30:81:ec:f7:ab:64:9e:95:dd:79:61:51:fd:0c:72:c5:
         ea:82:f1:80:c6:e7:fe:0f:0f:f1:f2:93:a0:be:56:6d:dc:ba:
         53:93:fc:a9:4d:10:2b:ee:ed:39:0a:38:a4:29:9d:a3:ba:d7:
         10:8a:78:3f:aa:b9:0b:c6:05:5c:12:f6:b3:60:eb:e8:8c:a8:
         ce:59:d4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:49:43 2024 by rpki-client on console-fra.rpki-client.org