Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File:                     0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier:          n93Xlk2TgZGrtaYrvFQBRprHUgH4iTvw3fVmcvVc/h0=
Subject key identifier:   E2:46:CE:2D:6B:F6:D4:3E:C9:A7:26:A5:6E:F8:0B:09:4C:61:4A:9C
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer:       /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial:       018FF224A730942BD79E7C354EFE9D4740A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number:          11AE
Signing time:             Fri 07 Jun 2024 10:00:39 +0000
Manifest this update:     Fri 07 Jun 2024 10:00:39 +0000
Manifest next update:     Sat 08 Jun 2024 10:00:39 +0000
Files and hashes:         1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: Ym9k+z2em/JPe3DZ4o84xRyNEVnm+ZO500tolBeVg3I=)
                          2: Ly64dheAKvHm6ytW_A_ytKSUCHw.roa (hash: ZVZiXmpQMityYcCyeUzDNejMdR9ffSGeIJWzk0nz7DA=)
                          3: SL3tnMcbWHllCvaUCXkQPG5tIGI.roa (hash: 0joFu3n9RoJ/8XiPXiFB2FAX8Q/QGlpSJ5CpKyryaf8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f2:24:a7:30:94:2b:d7:9e:7c:35:4e:fe:9d:47:40:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
        Validity
            Not Before: Jun  7 10:00:39 2024 GMT
            Not After : Jun  8 10:00:39 2024 GMT
        Subject: CN=e246ce2d6bf6d43ec9a726a56ef80b094c614a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:69:8a:3d:15:ec:31:00:5a:91:4a:7f:df:e5:
                    48:fe:7e:1d:ef:02:07:a5:07:f7:a1:b1:02:36:7d:
                    45:03:d5:98:13:ca:61:ba:fb:98:fb:cf:73:de:e1:
                    33:70:c3:d6:42:58:13:1e:d8:ce:05:f0:6e:b1:06:
                    9e:82:37:c1:03:df:0d:e4:44:62:11:5d:fa:a6:b8:
                    ec:51:32:81:a2:a7:74:25:bf:e9:99:4f:45:c8:27:
                    29:10:37:71:aa:8a:fb:bd:5f:a7:e8:df:4d:a5:98:
                    59:26:6f:6e:71:11:ae:72:87:e7:0e:f2:ce:e1:76:
                    f3:08:05:48:06:9a:41:30:7a:8f:6a:16:82:8c:42:
                    74:e6:b5:66:5f:c3:b6:84:b8:29:dd:12:81:89:4c:
                    69:bf:05:e5:f5:1f:e6:2d:f9:fa:34:49:79:13:b5:
                    e4:d9:6f:d1:b9:fa:92:4f:cc:6b:44:0b:48:e6:47:
                    21:f6:97:cb:53:7b:2e:6e:d2:00:c9:1e:09:e9:b9:
                    e5:bd:6e:34:39:88:fc:d8:08:d0:32:a7:32:78:51:
                    5a:02:65:2f:e7:2e:ac:80:c3:e5:04:14:0a:ff:34:
                    91:d4:59:c7:33:c2:46:d3:02:74:41:ca:99:07:07:
                    e4:dd:c9:48:b7:68:af:6a:b8:ff:d9:85:a6:34:f5:
                    33:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:46:CE:2D:6B:F6:D4:3E:C9:A7:26:A5:6E:F8:0B:09:4C:61:4A:9C
            X509v3 Authority Key Identifier:
                keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2a:f0:c1:aa:ca:d1:b0:aa:3d:16:d7:48:2d:d2:e0:1b:37:
         8f:c2:90:7c:34:f2:a8:7e:cf:25:ae:73:cd:af:c4:83:b3:51:
         25:79:8c:85:c1:b8:36:61:b0:46:a0:06:41:47:85:7d:96:26:
         25:5a:91:8c:ff:bf:41:cd:c8:9f:18:f3:fd:cc:56:98:30:0c:
         65:14:22:ea:f1:ff:65:1c:b8:88:06:34:10:8c:d5:c0:ce:04:
         1c:ae:df:60:a2:a8:b0:84:2b:03:be:23:06:3d:23:3c:9d:81:
         42:53:29:f4:c6:cd:00:3d:b4:38:0e:50:b3:0c:2c:80:7a:15:
         86:db:f7:5f:85:5f:4e:20:c4:59:99:b6:1d:50:4d:fe:28:53:
         81:6d:89:56:11:07:4f:46:c2:38:58:6b:e0:d4:af:9b:55:0d:
         81:8b:5f:41:f9:29:5d:f6:0b:d6:12:4b:78:40:a7:8e:e3:00:
         88:64:a9:0e:96:97:46:05:5b:89:66:da:39:ed:0d:4c:c0:cc:
         26:8b:bf:00:f3:2d:ad:40:b3:aa:34:ef:54:5b:19:db:2d:4a:
         ed:56:2a:55:da:94:df:38:b9:43:39:d7:30:70:b8:a8:99:c5:
         20:0f:a1:dc:e3:df:bb:f5:e8:2e:f7:88:22:17:97:8b:db:23:
         98:79:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:40:44 2024 by rpki-client on console-fra.rpki-client.org