Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File:                     fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier:          nrE8btrTcUPd9/0BaCkKxzqdWnXtj4pUkzreV4dj8iw=
Subject key identifier:   55:EB:6A:7C:3A:92:DE:32:73:B3:E7:40:7B:DE:78:2B:8D:B7:5E:D1
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer:       /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial:       01901DECFA427A3B5A5353DDF5913DC493EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:03:07 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:07 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:07 +0000
Files and hashes:         1: HAT5MtD8lY9y97UyF45c7xP7axM.roa (hash: sSKufmpP9N7xI2Fpw1omYDTgE3RXerTujjHr3Vula4E=)
                          2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: Ki06THWIXxP3Uu9xe+It+RwOLyIZrXLT9SA0/OzK3f4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:fa:42:7a:3b:5a:53:53:dd:f5:91:3d:c4:93:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
        Validity
            Not Before: Jun 15 22:03:07 2024 GMT
            Not After : Jun 16 22:03:07 2024 GMT
        Subject: CN=55eb6a7c3a92de3273b3e7407bde782b8db75ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:45:18:d4:53:a4:e2:47:cb:d6:a8:0d:58:
                    52:0b:be:27:f7:81:39:ab:65:25:a9:d7:33:4e:f1:
                    34:ed:6e:fe:e8:ff:53:55:7c:7e:61:c8:b6:97:33:
                    d4:8f:54:29:52:e8:a7:ea:a6:64:06:49:57:26:6c:
                    e5:17:b4:c1:21:63:2b:9b:bc:df:40:82:bc:13:d6:
                    2a:4f:99:db:fd:cb:71:ed:70:ee:7b:56:28:f0:73:
                    8d:27:3d:c9:f5:8c:04:ee:45:0d:e6:b1:7b:19:7e:
                    69:72:46:e2:11:69:d2:e0:8b:3b:13:b3:b4:7d:87:
                    84:4e:bf:69:2f:3d:ad:80:b6:00:8f:20:cd:c3:8d:
                    0a:33:69:ea:d2:7e:4f:78:3b:cc:e1:96:82:1a:b7:
                    0a:a5:95:ba:7a:de:ea:99:97:1d:74:95:91:1a:6b:
                    8e:a0:0c:b0:c2:63:d1:06:54:c1:cc:c3:c8:49:72:
                    45:8b:64:73:ec:a4:48:2f:0c:9c:92:55:ee:45:60:
                    f7:4f:af:33:fe:de:32:21:ca:60:85:74:32:a1:e9:
                    06:8c:9e:1e:0e:90:50:b7:30:b3:6b:03:8d:0f:9d:
                    cb:9d:6e:e1:fe:e4:ad:5d:c3:a7:1a:4f:20:a5:b1:
                    ba:ee:df:78:13:b4:b4:f5:d9:e9:94:f4:e7:f4:0f:
                    42:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EB:6A:7C:3A:92:DE:32:73:B3:E7:40:7B:DE:78:2B:8D:B7:5E:D1
            X509v3 Authority Key Identifier:
                keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:54:86:0f:f0:42:6c:47:e2:aa:57:b9:b3:51:5a:bc:45:2c:
         eb:ec:eb:03:49:9f:8f:10:47:31:02:22:ab:68:51:3a:92:fa:
         09:1d:4e:d4:26:af:7c:38:25:9b:20:38:47:67:8a:62:88:7f:
         30:45:4e:f2:8c:b2:3f:cc:e4:39:6e:af:37:ca:14:2c:8f:ca:
         c1:43:8f:bf:79:73:40:e1:30:e1:61:21:f5:9c:dc:89:39:b0:
         36:d3:04:01:27:88:65:ea:90:17:eb:e7:13:fb:24:06:54:78:
         c0:fa:9a:2a:df:c4:cc:17:54:0a:c0:0b:5c:83:1d:84:43:03:
         31:4e:56:57:f6:1e:48:e9:eb:91:f9:2c:50:56:42:96:89:a8:
         55:60:cb:ff:f8:75:81:4c:a7:f1:83:20:89:15:e3:8f:aa:8b:
         00:70:a8:91:e9:42:3c:46:4e:e5:f7:2a:3a:09:fd:33:d4:3d:
         f3:21:09:f0:9e:38:5a:6f:a7:0a:c7:8f:c4:4a:a7:7d:66:65:
         a9:db:11:25:c5:42:2e:0e:51:89:d0:98:74:43:8c:91:3e:6b:
         c7:c9:36:4f:64:bb:97:59:00:63:f3:99:f4:d2:7a:0a:0e:c5:
         d6:b7:6f:86:62:df:79:7c:7f:1e:c4:51:fe:9a:23:3f:03:c6:
         1d:cf:48:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:10:53 2024 by rpki-client on console-ams.rpki-client.org