Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File:                     mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier:          za5Vtm/k02je9TON8AL+5N76ArGRGVcyYJqWm0mlpN0=
Subject key identifier:   87:8F:43:0B:C2:87:D3:E6:95:F3:B5:EF:11:30:28:35:0B:2E:62:F4
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer:       /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial:       01901CD822E12B6FF2056E75295EFB33F73B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number:          07D8
Signing time:             Sat 15 Jun 2024 17:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:45 +0000
Files and hashes:         1: I-irsGOwF0ydjBZsc21qXjNDmXc.roa (hash: gmGkSpmlT3J4kvCWRhM+aXTtwXn7YsohHMSu8pdXaG8=)
                          2: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: VQVtmRVsGwUOr6t2GfMePfwWb+8jqL+mLp4dVQZ5NEA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:22:e1:2b:6f:f2:05:6e:75:29:5e:fb:33:f7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
        Validity
            Not Before: Jun 15 17:00:45 2024 GMT
            Not After : Jun 16 17:00:45 2024 GMT
        Subject: CN=878f430bc287d3e695f3b5ef113028350b2e62f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:6f:05:0f:31:6f:8d:a7:fc:92:9a:db:bc:
                    d3:21:b2:ba:ee:21:1b:3f:e3:fd:18:ad:a7:8e:64:
                    22:2b:04:a3:8c:22:c2:84:e9:34:b5:b7:31:06:82:
                    d1:dc:5a:04:7a:e9:09:58:c9:fb:ce:a7:de:82:32:
                    8a:9c:09:a4:1c:02:b0:5e:a1:8e:ae:e8:f6:0d:81:
                    be:26:27:71:f1:95:26:f4:5c:42:47:c8:e5:91:7b:
                    a0:d8:0b:e3:26:dc:1c:fa:4f:06:7d:9f:df:2a:f1:
                    73:da:da:79:9e:0a:c3:cb:1e:23:cc:43:15:52:21:
                    74:2e:ff:a8:a8:c2:4f:d1:84:28:53:8c:74:c4:5f:
                    bb:b0:8c:c5:bc:b4:5c:dd:05:85:56:92:3c:0b:31:
                    06:73:6b:a2:2c:22:8e:8d:0c:c3:2d:60:ef:9c:67:
                    26:69:61:4d:af:c4:ed:f7:e4:a2:cf:17:86:ac:3f:
                    f6:a4:ee:1a:ba:c3:4b:16:04:e7:3b:47:75:56:0e:
                    2c:d3:b6:cc:db:a2:07:a7:26:cb:ad:71:e1:a3:ae:
                    28:d9:cf:a4:8b:6a:0f:f0:32:90:8d:f7:4f:ce:d4:
                    32:aa:9b:f2:82:8f:03:5d:ae:b4:61:a6:cd:95:0d:
                    a5:cf:ad:d6:c7:c6:c6:d7:e3:ff:31:5c:3b:cf:2f:
                    f9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8F:43:0B:C2:87:D3:E6:95:F3:B5:EF:11:30:28:35:0B:2E:62:F4
            X509v3 Authority Key Identifier:
                keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:58:3b:3c:e6:54:8b:04:9a:f6:9a:b4:ef:41:17:fc:dd:f0:
         38:48:96:2b:64:65:62:10:ae:60:09:a3:c6:96:52:ae:64:9b:
         86:3b:8f:57:15:f2:6d:bb:90:56:96:06:75:24:2f:31:32:9a:
         36:6d:fb:c0:6e:fa:44:e9:4f:ab:08:33:da:35:43:18:0c:c1:
         21:09:43:2e:f4:bf:f4:cb:d2:8e:bf:90:4a:e6:bc:8f:64:41:
         a0:f7:94:d4:a2:28:27:cc:fa:4d:36:e0:46:7e:e4:f2:2d:55:
         05:28:52:73:ad:11:16:19:50:71:21:95:bf:0a:e1:8e:f7:51:
         d6:12:3b:7d:97:f1:16:8e:82:46:39:93:fa:70:04:4e:bf:7c:
         d7:f1:f1:7f:e4:e8:a2:9a:f4:95:b9:5c:6e:1f:ee:33:45:d9:
         ff:dc:5b:1c:ec:de:ad:4e:67:c2:f4:84:b7:77:79:86:db:81:
         5e:26:8c:00:2c:47:a0:64:41:e1:7c:8f:b5:dd:b0:cf:e3:d9:
         21:9a:12:17:bf:20:49:e7:c0:5d:a0:6a:9a:91:29:fa:10:bd:
         95:ae:63:20:00:e8:91:f2:d0:ec:ca:a2:53:b8:21:6f:bc:5e:
         1b:0e:df:cb:41:63:33:da:e9:7a:10:d9:63:51:ab:7b:d8:d8:
         aa:f0:34:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:20:32 2024 by rpki-client on console-ams.rpki-client.org