Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File:                     P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier:          7OG605Yb9X3uGTJEtptm7omk+twSHnR2ME0aGatwfrw=
Subject key identifier:   BF:56:41:3A:1D:5E:37:8B:7D:A4:5A:6E:6B:C9:47:7D:B4:B2:E1:BD
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer:       /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial:       01901D45F3BABA46815651021BE5805B0CBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number:          01AC
Signing time:             Sat 15 Jun 2024 19:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:41 +0000
Files and hashes:         1: HjAjT39aXpYLw1z7v6rIupa-Ygk.roa (hash: XkaQZ5RK/xIryCN1D25OfDv6bzkrGzvh/7ttQ2ao2Mw=)
                          2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: Z/bsWmehxLGbTzLXO6EjoLDptBShZl1xmPGnI3bexK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:f3:ba:ba:46:81:56:51:02:1b:e5:80:5b:0c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
        Validity
            Not Before: Jun 15 19:00:41 2024 GMT
            Not After : Jun 16 19:00:41 2024 GMT
        Subject: CN=bf56413a1d5e378b7da45a6e6bc9477db4b2e1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:e1:a0:1e:30:d5:38:57:86:67:c4:a4:74:
                    ca:44:35:46:de:f6:9b:33:cf:19:3f:81:87:2f:d6:
                    59:2c:b7:84:80:39:f3:3b:30:06:7f:e8:57:5a:4f:
                    b4:c6:6c:8d:ae:80:a8:08:68:b6:96:cf:e8:2f:c7:
                    be:21:43:f8:1b:79:77:37:9d:f7:63:01:6d:52:77:
                    3d:0f:fd:75:c4:3f:79:78:86:19:7f:8b:70:f2:60:
                    e6:43:1f:09:22:77:4d:61:a3:12:66:26:7e:02:f3:
                    af:f0:7a:f9:fd:d1:9a:1e:e0:13:fb:e8:3c:b1:63:
                    20:4a:82:5c:3f:99:10:c9:c2:55:14:a1:0a:1c:73:
                    2b:c9:ee:bc:4f:57:84:a2:63:1c:c3:1c:34:9b:cd:
                    3a:20:44:6e:26:b0:dd:36:19:43:51:07:cd:69:71:
                    5a:9d:59:df:32:17:df:05:54:69:e1:2b:e0:4d:56:
                    89:db:ba:56:ae:9b:fc:6d:fe:7d:a8:05:e0:c4:85:
                    c0:3e:bf:e3:f1:2f:f6:2c:39:48:4a:f8:de:e2:c1:
                    1e:69:db:9c:a9:ca:83:f0:ca:3d:e6:e1:70:6f:32:
                    e4:d4:17:e5:ba:50:7a:ac:f5:8b:a3:b1:8e:a1:09:
                    71:d5:de:21:fd:f0:99:fc:33:ee:71:75:6c:11:39:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:56:41:3A:1D:5E:37:8B:7D:A4:5A:6E:6B:C9:47:7D:B4:B2:E1:BD
            X509v3 Authority Key Identifier:
                keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7a:d6:dd:33:e3:65:1f:e1:63:b1:f0:86:1f:95:27:d9:12:
         cf:a8:3e:35:54:a8:0f:aa:3b:f4:95:e3:4f:25:03:4f:6b:87:
         ae:05:e5:73:3c:2f:e3:d6:bf:51:64:ec:e2:2b:e0:1a:73:09:
         e3:b0:35:2f:da:4b:29:ed:c0:83:f6:67:50:94:1e:4a:3c:3b:
         55:66:e0:5d:a5:b9:ff:bd:87:df:d0:fa:74:37:cb:40:2f:c1:
         ce:9e:25:8b:fb:fb:38:ea:0f:81:17:46:79:a7:a2:ef:70:f1:
         6b:ac:cb:a1:c6:6e:3d:9d:b1:bc:a5:dd:74:66:b5:23:34:34:
         b9:96:67:9b:32:a5:0e:6b:05:14:20:86:15:28:83:5c:8b:0a:
         e6:5e:f8:af:7d:9f:c9:06:15:e0:dc:00:ae:30:6c:c0:bb:a4:
         a2:d2:47:8c:54:e5:55:1d:f3:41:60:4f:b3:e5:ce:04:91:67:
         03:cb:f0:1e:ed:4f:1a:f5:d6:ed:c0:1c:b0:a9:8c:78:28:c8:
         75:ca:91:8e:02:aa:74:c9:07:7d:99:1f:81:3e:37:8e:1c:34:
         c3:a8:2e:eb:bd:1b:e5:cd:da:47:d7:8d:f4:e3:f8:0c:61:da:
         69:33:6c:7e:d6:7b:49:69:db:09:52:59:81:22:22:6c:09:66:
         d0:05:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:20:24 2024 by rpki-client on console-ams.rpki-client.org