Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File:                     t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier:          0FSln4ebvRzMRQyxlHisSSygoxrnfa5QVAWzDVvyCHg=
Subject key identifier:   8F:9F:C5:F2:D3:2F:90:16:44:75:35:06:FA:D7:DA:32:66:09:D6:E6
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer:       /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial:       01903329F0235681A068B4FBB42BE260F848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number:          0AB9
Signing time:             Thu 20 Jun 2024 01:01:44 +0000
Manifest this update:     Thu 20 Jun 2024 01:01:44 +0000
Manifest next update:     Fri 21 Jun 2024 01:01:44 +0000
Files and hashes:         1: ScdBcpppL3NohAvQCQAuWyecdYo.roa (hash: 4MbMwjZ2+ZLdi0TsS/I3Uw3BUz+ElYkae5Ng2CllM2w=)
                          2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: +xDSAx2MRPw73wqlEudq9O7H+FZWiToIZZNuTeS/e3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 01:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:29:f0:23:56:81:a0:68:b4:fb:b4:2b:e2:60:f8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
        Validity
            Not Before: Jun 20 01:01:44 2024 GMT
            Not After : Jun 21 01:01:44 2024 GMT
        Subject: CN=8f9fc5f2d32f901644753506fad7da326609d6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f6:53:3a:18:41:30:24:fb:5e:69:6e:14:c5:
                    5f:c3:e7:6a:86:d9:19:e7:99:00:a3:bd:7a:d9:00:
                    f1:66:72:cf:15:b1:b3:5d:d3:18:3b:bf:18:ea:a2:
                    74:05:2e:34:82:17:26:6b:ae:e2:38:e2:64:47:48:
                    c3:c8:2a:70:2f:36:73:af:22:d1:94:8a:63:b5:08:
                    89:c7:06:da:0d:31:d8:97:4a:95:e9:4e:27:3c:72:
                    76:1b:d3:30:a9:91:5f:97:28:d2:31:53:15:ca:bf:
                    f0:2a:74:f1:28:3e:80:19:96:fb:b3:17:1d:e3:1f:
                    a3:e3:9c:1e:1b:5c:22:8b:91:df:de:1b:0a:ea:26:
                    f8:e5:69:5b:97:70:83:4f:9e:b5:42:54:4c:fa:c9:
                    79:c4:56:87:4b:dd:9b:23:34:ea:eb:b8:f0:b4:97:
                    7e:a4:4e:dd:bc:cc:70:b2:61:39:8a:92:ac:39:ea:
                    eb:c6:d6:ab:33:e0:9d:5a:77:4f:e4:12:94:06:5b:
                    d4:9a:bc:6b:c0:d9:94:30:0f:98:e5:20:1d:de:61:
                    17:b7:b2:5b:c3:c6:ae:02:4c:0d:b3:94:e3:91:7e:
                    db:45:34:ee:53:e3:60:ff:f7:88:53:50:c3:19:75:
                    d3:41:cf:9d:ac:54:19:de:f4:07:77:89:e3:16:7e:
                    17:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9F:C5:F2:D3:2F:90:16:44:75:35:06:FA:D7:DA:32:66:09:D6:E6
            X509v3 Authority Key Identifier:
                keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e0:bb:ad:1b:43:08:15:65:36:08:6e:05:48:d3:bb:f1:36:
         bc:bc:f3:58:f9:ab:6d:9f:e5:1e:d2:25:df:ef:68:7c:22:3e:
         fc:18:39:c4:ae:7d:9e:c7:a3:94:a2:8a:3c:e1:53:e6:64:c1:
         47:f1:68:54:52:5c:c7:bc:75:52:ce:e6:d6:28:eb:f2:ec:f9:
         a3:2a:fa:15:f4:06:a8:6f:30:be:96:61:68:e3:fe:dd:b2:92:
         4f:fb:63:56:bb:a6:25:1b:fd:f8:f4:64:ad:95:5f:e0:9e:b5:
         4b:f8:fb:1a:4c:69:c2:b1:a6:1e:e3:17:e7:94:02:ed:14:3c:
         33:8d:67:4c:37:8d:91:fd:78:b7:eb:d5:57:48:cf:a4:ee:88:
         5d:bb:b4:89:8f:d5:eb:5b:7e:f6:db:e7:d4:72:3e:dd:e7:33:
         ab:79:6c:50:b8:f5:e1:5e:15:68:e2:e2:59:23:be:b2:36:3c:
         06:e7:1c:78:bd:fe:e9:54:7f:a0:7e:4e:56:04:e2:d5:32:f9:
         ab:f9:46:b3:be:c3:87:51:02:44:c1:75:5e:7a:5f:d6:0a:4f:
         f9:17:53:04:63:26:b7:b4:d4:db:7f:1f:15:91:6d:cb:5e:4b:
         9e:9e:66:40:5d:52:6a:d6:4a:69:e6:6d:b7:64:23:12:42:b0:
         11:de:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:56:02 2024 by rpki-client on console-ams.rpki-client.org