Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
File:                     IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json)
Hash identifier:          Ti8a+CVpJUt/JWvJg93ZCSm5XG9jGqWC3EbQ3NZbvJM=
Subject key identifier:   AD:62:08:E0:49:3D:00:32:24:0B:1A:BD:FD:3C:CF:13:1A:BA:C9:92
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Certificate issuer:       /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial:       01901DED56790A9E4AF2C280469F2FA78B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
Manifest number:          0842
Signing time:             Sat 15 Jun 2024 22:03:31 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:31 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:31 +0000
Files and hashes:         1: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: vZx9WBkDwgQQjaDZuqfIOUWEIcDIx7LBcYHp4aXVbQQ=)
                          2: R-QzQ7DREobxXbLRHeZLv2QXf-Y.roa (hash: IL24i/zccRCyUOv2LgU7kL0qbRkj51TTHHKW9dSswmE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:56:79:0a:9e:4a:f2:c2:80:46:9f:2f:a7:8b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
        Validity
            Not Before: Jun 15 22:03:31 2024 GMT
            Not After : Jun 16 22:03:31 2024 GMT
        Subject: CN=ad6208e0493d0032240b1abdfd3ccf131abac992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:4c:e3:6b:10:11:be:f9:a8:41:4d:5c:47:
                    22:56:7b:01:8f:9c:09:99:e9:ab:8d:39:81:e0:97:
                    8f:e4:9b:15:af:a6:28:e1:2a:2c:03:c0:85:46:14:
                    b8:39:d4:66:7d:f1:e0:84:3e:2d:41:f3:bf:bf:7d:
                    48:03:42:d8:07:91:94:4f:11:44:7b:ea:73:f2:c0:
                    84:a4:b6:57:08:d1:1b:84:d8:ea:0d:c4:13:af:fe:
                    ed:45:ee:51:82:fb:51:34:a0:09:4d:be:2a:87:ff:
                    d4:37:67:19:ac:d2:4a:ee:3f:07:16:29:9a:be:f6:
                    e5:76:2e:cb:9a:4e:a2:80:f4:e7:4c:7d:49:09:34:
                    ce:c0:39:28:78:d0:fe:76:0d:a6:dd:2d:54:35:ef:
                    f4:7b:85:7b:ce:b1:8d:42:c6:ed:94:c3:da:ea:78:
                    cd:25:3c:6b:4c:e2:d9:ca:a4:18:be:bb:1e:f9:99:
                    cd:df:f7:55:4e:6d:07:ea:5c:56:16:76:84:51:2e:
                    b2:a2:62:fa:df:cb:76:59:e9:d4:95:72:ea:c1:09:
                    fc:a5:a2:2c:a1:33:81:8d:bd:67:c6:0c:32:14:b1:
                    84:fe:df:8b:b4:6c:22:21:83:86:16:96:1b:c2:eb:
                    a6:bc:e4:66:c9:ac:bc:e3:77:12:f6:29:cf:da:5d:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:62:08:E0:49:3D:00:32:24:0B:1A:BD:FD:3C:CF:13:1A:BA:C9:92
            X509v3 Authority Key Identifier:
                keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f3:95:38:7c:36:4d:2e:10:38:f7:59:da:1a:f7:fd:81:86:
         04:d8:c1:97:d8:11:18:2f:a5:20:50:56:e8:07:ef:05:58:41:
         f8:3c:77:e8:b9:e1:e9:47:3a:f0:e2:43:62:b0:bd:99:66:a6:
         14:38:a8:e0:4e:97:86:96:68:d6:ee:60:49:8e:c7:bb:17:7b:
         07:a7:c3:0b:fc:51:08:65:71:52:eb:bb:7f:e2:b5:69:49:ea:
         94:2d:70:0b:ff:05:a5:18:a9:a4:78:77:d2:5a:9d:d8:92:83:
         47:01:e4:45:6f:e2:5f:3e:fa:fd:77:6c:92:90:ce:f2:49:00:
         14:69:06:cb:1a:4a:6c:82:db:e6:68:d2:31:f3:0e:3e:2f:c7:
         ca:8a:42:0f:c5:2f:31:dd:d4:71:88:e6:47:63:b1:b1:35:ae:
         ec:5c:04:d0:32:cc:f8:65:77:05:43:bf:ba:28:81:28:bc:55:
         f3:d3:e3:46:fd:82:44:af:83:13:5c:e0:9e:76:0c:7e:a8:69:
         a5:9d:30:1a:7f:fe:6d:a3:20:b8:5c:e8:87:1d:e1:79:bb:25:
         e3:41:10:cf:21:4d:cc:87:e0:ba:71:cc:29:71:5e:84:53:6d:
         fd:f1:1a:59:15:57:34:92:d6:53:89:24:c9:02:4f:60:30:96:
         5f:0e:3e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:12:32 2024 by rpki-client on console-ams.rpki-client.org