Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File:                     k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier:          8LyvtGF4seoN8qEZTlq7XB2VQTvnixlgQF963MAFXrU=
Subject key identifier:   58:A4:D8:54:85:3D:61:77:1F:2B:9D:24:D1:B7:1E:EA:07:F1:C1:7F
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer:       /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial:       019053590C7ED3B7AA67442C993C11535A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number:          11E3
Signing time:             Wed 26 Jun 2024 07:01:03 +0000
Manifest this update:     Wed 26 Jun 2024 07:01:03 +0000
Manifest next update:     Thu 27 Jun 2024 07:01:03 +0000
Files and hashes:         1: FFw_5Dlhm9jjfyxy1g_vXoShNRE.roa (hash: mtIeTmRlOUdPExIGmeOufw90bYGUuIazXwq569QNFe0=)
                          2: KfM4cZuaqKPM_aLCyTRU27gzc1I.roa (hash: A7XwVk9/fxy3KeKkpEJZZTbQEVqQQ7Jhr/fQTzkJUW4=)
                          3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: RiruNIDEYWgw/oTrAspeVxfvxjN0ORkOEYPWP/RxKog=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:59:0c:7e:d3:b7:aa:67:44:2c:99:3c:11:53:5a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
        Validity
            Not Before: Jun 26 07:01:03 2024 GMT
            Not After : Jun 27 07:01:03 2024 GMT
        Subject: CN=58a4d854853d61771f2b9d24d1b71eea07f1c17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:55:80:30:ee:43:bf:be:08:29:e5:e1:1a:
                    ad:3e:95:7c:f4:36:26:1d:70:e8:3d:ef:be:e7:01:
                    7a:ec:3b:5a:94:73:a5:13:07:a9:23:1b:b2:22:2d:
                    1d:f8:4e:36:75:ac:8e:a7:c7:3e:3c:6b:b9:f2:64:
                    11:ca:27:59:41:63:d0:79:0f:a7:16:1d:1b:6b:2a:
                    21:2c:00:d1:17:97:39:18:7f:7a:7d:a3:b4:d8:4d:
                    f7:01:fa:b9:75:91:ab:6f:c1:4f:95:79:d6:80:af:
                    a3:a1:e4:ad:36:40:30:cc:77:2d:c9:8e:2e:a9:9a:
                    40:c8:81:61:fd:f4:a0:7e:60:74:f7:d2:81:52:29:
                    c9:86:0f:9f:c7:21:c4:25:c8:c5:ec:37:ec:50:e3:
                    72:fe:32:38:3a:ba:91:53:a0:c1:6a:ff:f6:10:c3:
                    09:1e:c7:0c:3d:c9:6f:ba:c9:20:1d:b0:83:ff:17:
                    4d:ee:f0:6f:1d:5d:02:8b:16:9a:07:5b:1c:b5:ef:
                    eb:cc:0c:a0:6b:95:75:6e:30:06:4c:e1:e7:0a:1a:
                    97:69:cb:6c:ac:a8:5f:65:0d:ac:4a:da:ce:d0:e3:
                    cd:2f:eb:b8:ea:d2:5f:04:1b:5d:35:a2:d5:3a:81:
                    a8:ab:ef:94:0d:23:ac:d4:c0:ee:35:fa:4d:46:29:
                    65:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A4:D8:54:85:3D:61:77:1F:2B:9D:24:D1:B7:1E:EA:07:F1:C1:7F
            X509v3 Authority Key Identifier:
                keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:06:0e:18:9e:6c:71:2f:88:0b:e2:68:ef:92:bc:56:3f:00:
         1d:28:f8:d4:3a:79:23:9d:99:9f:1d:00:f9:88:30:f7:75:a0:
         cd:69:f5:eb:52:71:10:4f:8c:30:b1:f0:2c:6e:9c:d2:60:e2:
         88:21:b8:6d:d4:64:4d:88:81:d0:39:84:cc:cc:71:e3:f1:3b:
         26:a6:73:a2:63:cf:00:d6:d5:89:b7:62:62:09:b2:99:41:17:
         b5:55:bc:b1:ad:6c:a0:42:a0:56:ba:b0:12:77:58:5f:f6:e9:
         10:2b:29:1e:2d:cb:c1:b8:ac:97:82:cf:69:1f:cd:ff:3c:55:
         da:8c:c8:77:ee:66:17:c5:8b:66:44:2a:96:f4:00:7e:a7:5c:
         ab:3d:86:a8:9f:d1:04:d5:bb:d1:65:ad:84:c5:57:73:33:45:
         29:6b:e6:f7:d8:d4:6f:36:ba:78:3e:1a:db:4d:24:40:87:98:
         9b:3d:e8:3a:16:84:21:04:0a:db:38:6c:12:98:51:66:14:fe:
         dc:fb:bd:8b:d8:aa:21:d6:cc:f4:35:da:a8:d8:38:f4:51:a7:
         53:96:7b:6a:e3:52:59:8b:01:de:c3:cb:35:d1:d2:71:f7:97:
         ed:6e:29:20:92:0d:6e:98:93:bb:a9:90:30:00:b4:2a:14:35:
         74:e2:d6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:39:03 2024 by rpki-client on console-fra.rpki-client.org