Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File:                     dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier:          AF3rY1YCGSNtI9Xg4OY+sU3gXyjImCO2QwJz2GDzRlI=
Subject key identifier:   38:78:45:7D:80:14:4D:12:E2:54:E6:3C:28:4E:70:D8:7A:CF:3C:BA
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer:       /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial:       01901CA1C07459E7F7EDE1DAB15F30C8DBE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 16:01:20 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:20 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:20 +0000
Files and hashes:         1: XWMwgNVvuSvdELsB9LlOwEf9_dk.roa (hash: M3uEnZ6HmEv9Ia5W1jvY+FRqYILuox8Kc1qGz9C//4E=)
                          2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: BFsOPM+AkHBl4WPBD6/KH4Mwohga5T2Tm/PeYM7e/Zw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:c0:74:59:e7:f7:ed:e1:da:b1:5f:30:c8:db:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
        Validity
            Not Before: Jun 15 16:01:20 2024 GMT
            Not After : Jun 16 16:01:20 2024 GMT
        Subject: CN=3878457d80144d12e254e63c284e70d87acf3cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:08:47:2a:34:38:1e:c8:e5:da:85:83:7f:
                    18:05:67:7f:d6:ab:7c:97:d5:58:59:5e:71:be:05:
                    56:d5:ef:eb:a3:83:43:d3:03:7c:61:a3:c0:9e:25:
                    37:2c:56:1f:c6:9f:ca:0c:f4:51:7a:cd:84:d1:2f:
                    80:23:9e:ed:ef:84:1c:cc:33:3d:de:e0:de:f2:eb:
                    7c:e4:ec:cd:65:65:f5:b6:64:ee:56:30:a9:1a:db:
                    41:88:18:82:ca:70:c6:e7:95:81:0f:43:ab:08:d0:
                    6b:06:8a:43:67:3e:6d:c4:7c:49:86:12:f5:e0:f1:
                    24:e8:02:cc:b5:98:18:e0:4d:03:73:2b:88:16:d2:
                    ce:35:05:b0:1d:a4:8a:c8:8c:a2:34:a4:37:9e:be:
                    d0:1e:c4:c4:45:fa:19:f8:51:2b:58:11:61:50:19:
                    b5:c7:05:03:6a:1c:c3:26:72:55:7c:5e:23:fa:63:
                    94:49:0b:df:71:26:c6:ad:0b:21:c3:b0:90:0c:6d:
                    ac:8d:ef:68:ea:78:4c:2b:67:78:69:4e:47:45:60:
                    07:6d:e0:fb:f1:db:b6:74:6f:ee:10:83:bc:ba:cd:
                    62:d5:2e:0a:af:80:ad:db:a3:df:5b:05:70:9e:05:
                    1e:a6:3d:d9:ce:15:b2:6f:1e:87:0b:21:60:6d:ed:
                    e7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:78:45:7D:80:14:4D:12:E2:54:E6:3C:28:4E:70:D8:7A:CF:3C:BA
            X509v3 Authority Key Identifier:
                keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:19:32:6d:14:c7:8c:2b:73:91:a3:54:d2:7a:03:46:a3:8e:
         d8:df:1b:4b:fb:1a:cf:48:32:12:4f:7f:a4:94:aa:1d:ef:91:
         35:1e:91:84:bc:23:fc:b5:f2:5a:e9:d9:33:59:15:71:53:06:
         bd:e1:71:37:54:d7:65:04:00:3e:02:d4:c0:70:a2:db:88:31:
         90:e7:de:ce:9b:24:0b:70:b6:c5:e3:15:cb:38:c4:55:a2:52:
         1c:fd:70:bd:e4:51:9f:e3:bd:ab:36:87:9a:e4:5b:aa:11:aa:
         14:12:58:82:c0:7a:0d:ea:9a:88:36:5f:70:5a:f5:bc:c1:f4:
         92:1c:52:18:f7:bf:db:75:fa:f8:36:50:b5:4a:ba:cf:16:34:
         ec:2a:60:ae:96:2c:d3:5f:6e:65:ee:18:28:09:fd:81:88:0b:
         b5:0a:9c:ab:65:a6:99:a5:28:5f:e2:9b:6a:fe:7f:60:23:cf:
         75:25:d5:0a:20:88:15:83:c6:80:4a:55:c6:e5:92:58:f2:4f:
         ea:bc:f0:ba:df:68:14:91:2a:ac:bf:0d:24:9f:29:6a:50:e5:
         13:49:55:fc:c2:04:3a:78:c7:bc:2c:f7:db:e8:26:97:fb:79:
         d7:79:77:12:52:ce:64:29:f7:c2:c9:fb:47:a0:18:bd:a8:b0:
         ae:a5:72:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:20:12 2024 by rpki-client on console-ams.rpki-client.org