Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
File:                     h1_IAkLS5p69DyK148xFdZSukKw.mft (raw, json)
Hash identifier:          IHK5YKHoqAneJqbxDMYaz2RA9+ryBOTxJNs87/5+u44=
Subject key identifier:   6D:8B:07:2D:39:6B:C6:A2:C2:40:37:51:8B:7C:A9:5B:17:9D:B6:39
Authority key identifier: 87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
Certificate issuer:       /CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Certificate serial:       01901DB3BE83175699DD0EEDA6AE61382D46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
Manifest number:          070E
Signing time:             Sat 15 Jun 2024 21:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 21:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 21:00:37 +0000
Files and hashes:         1: 5rfCFk_bmdbujk_vtGklU-YAldI.roa (hash: 9YVUlrxmzjtmpqAr+WzkHZkrS/i6WbwXEvP2BUCBS0Q=)
                          2: YacFjvCwQm9rBsjgh3bLcuMU5mI.roa (hash: a6+9tnseMlBAWUH6LElCMFnpZN4bHojZG1uuSiXjUmo=)
                          3: h1_IAkLS5p69DyK148xFdZSukKw.crl (hash: jtzKyDD3o30i0PIPpJbKWH75p98QA9ZwHfL+cBK+EQk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:b3:be:83:17:56:99:dd:0e:ed:a6:ae:61:38:2d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
        Validity
            Not Before: Jun 15 21:00:37 2024 GMT
            Not After : Jun 16 21:00:37 2024 GMT
        Subject: CN=6d8b072d396bc6a2c24037518b7ca95b179db639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:71:17:ef:05:51:ad:71:16:da:27:7a:b8:
                    89:53:be:85:ea:b2:8c:18:1f:64:89:55:f1:f7:2d:
                    51:1c:64:a3:0a:73:74:15:f3:7b:79:b1:94:1c:f8:
                    9a:24:59:e4:36:a9:00:9a:6e:23:0e:19:5a:f1:31:
                    b4:2a:2d:75:9f:2e:61:fd:3f:de:33:c8:f6:ce:e3:
                    c2:6a:38:a9:ac:09:af:41:bc:64:e4:fd:75:d2:bf:
                    85:8d:11:32:1b:e8:f2:84:ff:c2:df:ec:18:f3:09:
                    0c:91:51:c6:e3:44:8d:6c:ee:62:62:42:13:94:8f:
                    02:30:0a:e6:5e:49:05:c7:cb:16:f7:c2:29:6f:a5:
                    bc:5d:a4:89:7b:98:a8:92:15:7b:cf:67:24:66:d5:
                    26:e9:da:05:8a:48:a5:65:a0:c1:05:41:a7:7b:1a:
                    fd:39:27:9e:5a:27:13:c3:09:f5:c1:8d:86:1e:10:
                    25:08:16:ce:0f:73:fa:86:2e:3e:9b:e2:dc:53:76:
                    0a:f5:c0:a7:af:8c:47:e0:7f:35:f4:76:4d:c3:7e:
                    26:0d:1c:e1:67:b1:c1:bc:c8:40:22:a9:e2:10:5e:
                    01:8a:b3:fa:29:7f:f7:be:3e:2a:ce:49:2f:e6:02:
                    23:b1:12:93:9d:6b:16:20:e4:1a:70:f7:e3:ff:5e:
                    e2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8B:07:2D:39:6B:C6:A2:C2:40:37:51:8B:7C:A9:5B:17:9D:B6:39
            X509v3 Authority Key Identifier:
                keyid:87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:38:9b:14:72:6a:2d:81:03:87:81:14:c0:77:48:ee:4d:fb:
         1e:c0:e8:a2:c5:eb:ef:bc:29:68:8b:81:77:4a:db:8d:ba:7f:
         82:93:34:51:51:39:39:77:76:2c:1b:f6:f8:49:73:30:41:ed:
         8c:dc:c7:84:c8:09:c0:88:56:40:17:44:98:45:9c:59:7f:1d:
         3e:7f:1b:40:5a:0d:ae:4d:e5:f4:4a:32:42:f1:cc:2b:6b:59:
         5e:5e:fa:e4:86:10:c3:9f:e6:f7:f4:95:d8:6a:cd:15:3b:2e:
         60:57:1c:8b:67:ea:15:5a:6c:74:db:2b:69:66:06:fe:2e:60:
         59:80:10:b7:c5:da:f1:0f:d3:84:a6:ad:43:54:9e:bb:ee:69:
         06:af:9b:c1:c9:8f:4b:58:48:a8:05:e8:e0:a0:36:11:ef:d6:
         4e:33:3c:fc:e7:cf:34:7d:18:85:ac:30:38:66:69:a7:79:0b:
         9e:22:34:63:20:7e:53:b4:6e:62:e1:bd:ba:dc:2c:75:d7:9f:
         a6:fc:52:e3:ad:d2:d0:2c:44:f1:e3:01:77:7c:c3:cf:2c:40:
         27:d1:53:2a:93:56:48:0b:d8:0c:13:72:86:28:fd:16:ee:21:
         ed:61:f1:dc:9c:b5:f2:7f:4b:85:ef:bc:43:15:45:80:5e:8f:
         5c:27:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:54 2024 by rpki-client on console-fra.rpki-client.org