Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
File:                     vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft (raw, json)
Hash identifier:          eC+nZKsh26K2lGaOKk/ymCe9EhY9S4HI57v9/UZ3cjk=
Subject key identifier:   05:24:AA:4C:54:AB:E9:7B:3F:A8:6B:12:9D:9E:E9:5B:08:98:5C:7A
Authority key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
Certificate issuer:       /CN=bd82e60d072e5185435a900e323f463806d433c9
Certificate serial:       01901AEA2CFD1F02C713C13093BA88389F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 08:01:12 +0000
Manifest this update:     Sat 15 Jun 2024 08:01:12 +0000
Manifest next update:     Sun 16 Jun 2024 08:01:12 +0000
Files and hashes:         1: J0A7-nt5XeCgS9gAAAVlx1i-rJY.roa (hash: JlA22eRwTHKygk6Rjp3JxHNqhS3iEPaNZklqvUMhvwg=)
                          2: vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl (hash: 2G1FprCJLsnVraURNyzOeI5zZdA2pYLazeWTkNrsYk0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:ea:2c:fd:1f:02:c7:13:c1:30:93:ba:88:38:9f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd82e60d072e5185435a900e323f463806d433c9
        Validity
            Not Before: Jun 15 08:01:12 2024 GMT
            Not After : Jun 16 08:01:12 2024 GMT
        Subject: CN=0524aa4c54abe97b3fa86b129d9ee95b08985c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:0c:81:17:27:09:75:03:07:4c:df:66:0f:
                    0d:df:b0:8b:f7:d6:bb:19:14:89:7f:c0:f0:ba:a1:
                    ca:05:b5:f0:83:30:75:a6:6f:8e:a2:0e:05:f1:9d:
                    e7:33:4a:4d:43:c7:d1:9a:db:b1:d4:9a:e3:65:18:
                    6e:74:c0:dd:c6:35:30:b9:5d:ba:a7:28:9c:82:e7:
                    cf:3f:98:1d:9c:e9:94:36:e7:27:d1:11:d1:d7:c2:
                    cb:a0:1c:61:7f:50:d8:a3:1f:72:6e:bc:10:ec:53:
                    55:7c:42:4f:be:c1:92:33:c4:b9:fc:f2:89:74:6d:
                    df:86:ee:c1:cc:0f:fa:b7:2c:7b:97:62:0f:22:0a:
                    70:0e:82:69:12:af:a6:9f:e0:50:fb:17:de:52:45:
                    2c:8c:42:c3:86:b1:70:8d:9e:33:96:02:9a:a1:f2:
                    05:32:e9:1b:d2:71:e1:1d:91:2b:83:f5:9d:27:b7:
                    cc:64:55:9e:41:7f:71:2e:5b:81:f5:53:27:56:d4:
                    f1:79:90:c6:c4:d9:0d:d8:2c:45:eb:62:7d:0f:7f:
                    2c:59:17:68:77:57:b9:96:50:a9:17:6e:be:97:16:
                    39:d6:fd:e8:40:72:e9:79:44:b5:85:35:e7:5a:05:
                    63:ee:0f:d6:1e:bd:9f:ec:49:2c:95:9a:f7:32:e5:
                    ac:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:24:AA:4C:54:AB:E9:7B:3F:A8:6B:12:9D:9E:E9:5B:08:98:5C:7A
            X509v3 Authority Key Identifier:
                keyid:BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:63:8f:89:71:8e:48:5e:61:5f:78:b6:2e:05:be:ac:e4:ef:
         50:8a:8f:0a:be:a7:66:c5:73:97:2c:6a:ba:3d:2d:39:2f:dd:
         eb:17:c6:b9:a2:42:e3:ef:01:68:e7:49:93:fe:3e:57:56:50:
         59:cf:29:f0:ed:f8:3e:c1:15:0d:43:94:d6:5c:df:d9:3e:d9:
         1f:b1:87:2c:5c:25:5c:46:9d:c6:9c:b1:bd:aa:8f:c0:ae:f6:
         23:87:cd:aa:07:eb:95:41:0e:90:21:c4:69:ac:a5:a7:10:da:
         a5:12:62:f7:78:05:02:93:2f:a0:b1:ed:74:46:8d:66:36:94:
         25:0c:46:83:e6:40:c3:b8:6e:6c:2c:a7:0e:76:9b:57:72:4b:
         cd:95:2b:89:5d:da:b8:eb:a4:8f:96:c7:82:04:b1:8e:c6:33:
         37:83:f9:80:61:c4:f8:2c:e1:20:93:5a:cc:e9:94:80:38:80:
         88:da:e3:c9:1a:75:22:86:d7:5b:c5:df:a5:ca:3b:b4:fc:69:
         c3:d8:54:5e:5e:46:40:a3:b1:24:ba:27:f6:29:9b:82:11:40:
         80:a0:c4:17:9d:8b:3b:d1:40:2e:b1:52:d3:4e:5d:05:06:9b:
         e5:50:8f:fa:a8:41:f7:cb:b7:64:f4:5d:a6:94:f3:f4:a6:a4:
         3a:58:f8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:18:37 2024 by rpki-client on console-ams.rpki-client.org