Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
File:                     umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft (raw, json)
Hash identifier:          dgePw9NPaxkMHDyCDWm72uEzgqlJFn8nx9iTjnq60ec=
Subject key identifier:   95:B0:2B:58:35:70:23:EE:8D:DE:78:AB:36:D2:73:06:80:1A:83:3D
Authority key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
Certificate issuer:       /CN=ba68595997900ded300e9925709da627e93f363a
Certificate serial:       01901DEB4610BC16DE02DFFF4FFE8F368EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
Manifest number:          0A62
Signing time:             Sat 15 Jun 2024 22:01:16 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:16 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:16 +0000
Files and hashes:         1: jxiOsdvucmnDVsgs9p5wi2RadOc.roa (hash: CHBYHHTtadzNTygafnm1iSDB2OE3JS7L7mpSWf609BI=)
                          2: umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl (hash: 6fZ+sLv6AnB/Y5dnAqit01dEBUQHtyBdItHwsZtxzEs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:46:10:bc:16:de:02:df:ff:4f:fe:8f:36:8e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba68595997900ded300e9925709da627e93f363a
        Validity
            Not Before: Jun 15 22:01:16 2024 GMT
            Not After : Jun 16 22:01:16 2024 GMT
        Subject: CN=95b02b58357023ee8dde78ab36d27306801a833d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:68:86:8f:8c:ab:89:5c:e4:12:9d:da:ac:
                    23:5c:42:d7:b1:c4:2a:d5:9e:71:96:c9:cd:99:6a:
                    3b:27:49:71:e8:14:65:ef:8c:a3:33:23:ed:73:f7:
                    e1:d5:ea:b4:59:48:83:6d:68:2b:f2:56:57:36:b9:
                    11:9b:3e:cb:08:c4:ea:be:d7:3d:39:4b:c2:79:31:
                    b9:a7:50:65:e0:69:78:fa:70:f4:77:5f:91:81:59:
                    c0:fd:00:07:05:9d:05:d0:30:38:76:69:76:b7:14:
                    6a:30:68:68:6f:c1:c7:f1:9c:bd:65:da:18:ed:97:
                    21:66:62:0f:73:51:af:78:e3:0c:8f:56:44:98:2a:
                    58:0a:82:d0:6d:82:69:4b:87:09:00:17:e0:7b:3a:
                    33:62:5a:00:9b:92:f6:20:00:f2:4c:b8:16:ce:92:
                    96:75:b8:4c:4b:83:f5:39:d9:d8:b0:5e:24:7f:a8:
                    53:12:86:aa:bc:af:d6:82:f8:4f:79:1c:68:63:64:
                    0a:83:13:02:c4:64:ba:dd:c6:7c:8a:1e:28:1a:fa:
                    6e:15:a4:f9:7e:d4:c5:ae:57:cd:ca:41:64:83:6d:
                    f1:0f:b5:a0:4f:11:11:75:96:97:55:5d:0d:75:1f:
                    eb:b9:eb:ec:62:f5:0f:bd:ef:d3:d0:9b:08:c0:0d:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B0:2B:58:35:70:23:EE:8D:DE:78:AB:36:D2:73:06:80:1A:83:3D
            X509v3 Authority Key Identifier:
                keyid:BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c0:b6:38:0d:17:64:49:2d:f6:d6:66:47:8a:70:9a:8a:44:
         14:04:43:0f:2c:fa:24:2e:d8:00:aa:8b:5a:d8:e8:96:5b:fe:
         cd:4a:a5:71:ba:11:2b:f2:a2:bd:15:53:b1:07:cf:00:30:50:
         f0:38:fd:6b:7e:ee:92:c4:98:48:29:95:01:b3:56:f3:c2:16:
         f9:5a:44:a7:6e:1d:fd:79:85:f9:b2:bd:07:4b:41:22:ca:a6:
         1b:a3:81:d8:92:d7:92:05:b3:6b:d5:04:57:cf:07:88:87:f5:
         f8:9c:36:d0:23:0b:d8:22:4a:98:4c:32:30:cb:0f:ca:c3:80:
         c2:f8:27:f6:6f:5e:25:50:94:b6:0d:15:1f:37:4a:f5:16:b3:
         1c:ce:3c:c2:c6:9e:f6:07:19:5e:62:95:41:42:63:47:0f:92:
         7b:66:d2:de:14:d8:ea:d2:66:91:03:4c:ae:a1:f8:09:c9:53:
         31:08:73:93:bc:65:49:0b:1d:17:66:b7:73:9b:51:54:86:b8:
         e2:a6:80:79:24:c2:79:a5:f3:3b:26:5e:a6:55:7a:72:1a:42:
         a6:d5:e5:fe:68:e9:70:b9:1d:18:a9:9f:2c:51:b7:88:c2:45:
         a3:44:ba:a2:28:8f:47:cf:75:d9:3a:c2:1d:07:fd:02:15:66:
         1c:12:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:26 2024 by rpki-client on console-fra.rpki-client.org