Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
File:                     icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json)
Hash identifier:          0fbm642nTb0rImj6lBY0Ei7fo32ZsPzdBIQ70uBSwJo=
Subject key identifier:   FB:86:7A:0B:BA:DA:5D:58:0B:87:F9:DF:94:ED:98:88:8C:3A:B2:64
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Certificate issuer:       /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial:       019041F7607F48C0290BEEB8BAE2E6710926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 22:00:49 +0000
Manifest this update:     Sat 22 Jun 2024 22:00:49 +0000
Manifest next update:     Sun 23 Jun 2024 22:00:49 +0000
Files and hashes:         1: 3PxYTNKxcomIb29HCOwWc-PDulM.roa (hash: USXUEyAuvAfsyYe9vr4brlllpHcASrtLu/sMZcs0YDA=)
                          2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: smUSIxU0C5Ujl+9hV7LNSZNo8p5U+U4+lMkjHu0fzbs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:60:7f:48:c0:29:0b:ee:b8:ba:e2:e6:71:09:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
        Validity
            Not Before: Jun 22 22:00:49 2024 GMT
            Not After : Jun 23 22:00:49 2024 GMT
        Subject: CN=fb867a0bbada5d580b87f9df94ed98888c3ab264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:5c:56:6e:82:85:44:eb:ec:4f:d3:f4:1a:
                    6f:f7:42:d5:1d:64:07:bf:f8:29:a4:08:da:24:4e:
                    a2:1d:e3:4f:65:a7:6f:0e:31:01:db:1b:7c:0b:79:
                    75:27:fe:f4:50:20:7f:2d:2e:2b:e5:6c:fe:08:06:
                    da:6b:29:0d:d6:ee:55:70:12:ed:8f:7e:1b:31:64:
                    1a:66:55:df:43:cd:be:c4:ca:30:ec:92:7c:6f:5a:
                    40:25:8c:a9:91:21:c0:9d:16:02:b1:2e:45:70:31:
                    d0:a5:bc:95:69:87:a5:82:b2:61:a1:a1:4d:0a:cf:
                    98:c6:aa:a8:fc:62:4a:db:33:79:7b:7e:3c:d3:aa:
                    61:61:87:43:96:ac:cc:c6:fd:24:87:ee:5e:57:7a:
                    ef:ca:a8:ed:f6:27:b1:f4:db:f4:47:f0:c0:58:2d:
                    c1:60:a2:13:c2:c1:ec:25:84:97:fb:98:6b:d5:69:
                    ce:53:48:e5:07:8f:b3:44:4d:0e:60:0a:c3:cb:e3:
                    29:08:0f:49:5a:3e:a1:2e:b2:11:45:42:4f:56:21:
                    2b:d4:a1:15:1b:a7:bd:6f:43:8a:00:9a:64:4e:01:
                    6b:b6:26:88:4f:fb:f0:02:b1:b0:73:3c:27:08:02:
                    e2:eb:27:dd:43:96:fe:6d:26:ff:28:92:5b:80:67:
                    60:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:86:7A:0B:BA:DA:5D:58:0B:87:F9:DF:94:ED:98:88:8C:3A:B2:64
            X509v3 Authority Key Identifier:
                keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a3:cf:c3:a2:bf:f2:9a:d3:81:f8:8b:f8:c9:d3:a8:92:96:
         9d:ce:a6:15:d6:67:ce:c2:b2:89:3e:83:7d:61:69:e1:12:1a:
         74:3d:98:5b:f5:25:4f:64:61:4b:49:ee:7c:c5:24:a6:10:4e:
         a9:83:6f:12:3e:16:0b:af:b4:ac:f4:d5:9f:ad:a6:39:74:46:
         2e:84:25:76:5c:f3:2f:f9:fa:d7:3b:d0:70:59:05:39:55:84:
         79:e8:e3:52:c2:68:49:d5:68:6b:52:13:0c:c3:f5:ad:64:27:
         8a:67:a9:a5:7c:f3:a0:d3:02:67:78:0e:a0:9c:3e:39:40:c3:
         36:db:68:6f:cf:38:ef:d5:61:70:b6:8b:45:e8:70:33:5e:7c:
         6a:6d:28:ab:68:0a:37:5a:ff:4d:42:a8:d2:1f:a7:eb:88:b8:
         cf:8e:28:f6:0c:9f:fc:58:33:1c:e0:73:7a:a5:bc:92:09:f2:
         9b:f9:0f:4e:24:44:c3:54:97:eb:40:84:4d:ef:98:5b:37:11:
         9c:f9:d5:d7:60:83:88:1c:f4:11:e7:1c:df:eb:d2:ee:50:1c:
         65:06:78:0c:60:ba:d6:54:78:67:1e:e7:c9:55:2c:5b:81:f9:
         e0:45:01:69:c7:07:d9:ef:0d:5c:0e:f4:86:f0:ab:21:88:61:
         c6:75:37:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:41:09 2024 by rpki-client on console-ams.rpki-client.org