Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File:                     9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier:          6xaIjSxNRiRHh2S5Wb/yk/BQEwffkMXk9yxg0CkZ0kc=
Subject key identifier:   F2:5E:E4:29:F4:CA:7E:39:A7:88:3E:47:C7:B9:2C:35:EE:D1:6D:7F
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer:       /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial:       01906D18336D062B0F08E0FE5AD5B363DCA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number:          11F0
Signing time:             Mon 01 Jul 2024 07:00:20 +0000
Manifest this update:     Mon 01 Jul 2024 07:00:20 +0000
Manifest next update:     Tue 02 Jul 2024 07:00:20 +0000
Files and hashes:         1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: cyPqRqXLvgZq93y+BsWD4NYzDjzOtEG5JMzWAfX6L5o=)
                          2: Lhp5h20BeVNgzdpV3oZtU0U74Hw.roa (hash: 9TF5OwHLkOPq24bDn1r3IZB4+7hRCdG0OjvClob1+co=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:18:33:6d:06:2b:0f:08:e0:fe:5a:d5:b3:63:dc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
        Validity
            Not Before: Jul  1 07:00:20 2024 GMT
            Not After : Jul  2 07:00:20 2024 GMT
        Subject: CN=f25ee429f4ca7e39a7883e47c7b92c35eed16d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:85:f2:b7:5a:ca:6c:52:77:8a:96:2a:78:
                    8f:ec:7a:d9:24:0d:8d:43:21:42:23:25:d6:2e:e5:
                    1f:6e:ae:b9:0c:e0:30:4c:32:60:f3:e0:22:4d:0e:
                    28:47:e8:18:96:93:da:31:9d:d9:5a:22:10:68:74:
                    3a:55:e0:8e:24:86:60:a8:cb:b7:3c:cc:72:e1:2e:
                    f2:7d:96:fd:86:3f:2d:4b:b2:71:ca:c2:d7:83:23:
                    1e:36:8b:f6:e8:9d:2a:d5:cf:ac:51:f5:d5:1e:08:
                    d2:a3:8e:b1:19:4b:ad:ca:b2:52:93:d6:99:bd:14:
                    ab:9d:1d:e6:e4:73:83:27:83:21:8c:7e:ee:53:9a:
                    35:1b:e3:02:74:89:d3:9d:4b:0f:41:ee:a5:07:33:
                    b7:65:4a:8e:2c:b3:fb:77:d1:7a:a8:4b:6b:5b:ce:
                    2f:0d:fa:9c:e5:22:58:90:0e:60:8a:f7:47:34:07:
                    1d:e9:d9:66:5a:f6:b9:95:10:24:80:38:ec:86:6c:
                    90:95:3a:53:26:01:b3:0f:4b:1e:0b:fc:32:ab:23:
                    3e:0f:36:3a:95:68:5a:93:76:0d:06:e9:31:09:9d:
                    6c:cf:46:5f:4c:e3:0e:35:d1:5b:f0:bd:a9:52:bb:
                    2c:04:e9:2a:b2:b8:0f:80:6f:07:72:98:6e:ee:bb:
                    63:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5E:E4:29:F4:CA:7E:39:A7:88:3E:47:C7:B9:2C:35:EE:D1:6D:7F
            X509v3 Authority Key Identifier:
                keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:cf:6e:fd:4b:27:4f:2d:42:76:53:c7:fa:a2:89:be:1d:3a:
         c1:9d:4a:d3:2c:4f:c3:93:b3:d1:3d:6b:4d:35:6f:8f:92:50:
         fa:59:14:1a:6c:43:3a:1c:85:40:5e:0e:f8:0d:92:cc:a6:66:
         f8:e4:69:f3:6a:60:9c:f7:62:d7:d2:8a:82:a1:86:c5:03:39:
         aa:50:7f:eb:61:a8:25:60:30:d7:05:f4:90:21:b8:11:fa:bf:
         aa:99:ad:db:ef:87:c5:0e:50:75:25:cd:fb:59:ae:b3:3d:f8:
         36:05:64:0a:1b:10:31:63:86:00:1e:83:32:4b:7f:0b:3d:90:
         cb:9c:eb:d9:4d:f9:d6:b6:7e:85:74:2d:2e:e1:eb:a5:62:c9:
         a5:7a:3f:4a:f3:e8:e4:ec:30:0a:96:c3:8e:26:a8:14:09:a9:
         63:d0:b5:c9:dc:00:a6:40:67:e3:ab:68:44:30:1c:5f:45:5d:
         91:ee:f7:25:f4:1c:0a:c6:71:c6:38:2a:78:fa:8d:a5:aa:f0:
         44:bd:f8:37:ba:44:21:76:7c:76:15:1f:8c:a2:a6:42:8c:1b:
         36:fa:eb:d2:d4:48:47:7b:e5:86:72:54:ff:49:c4:a1:f5:d8:
         99:1a:4f:fd:0f:88:b6:d2:6b:c9:60:7b:85:4b:a2:a9:ec:19:
         68:ff:c7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 15:53:18 2024 by rpki-client on console-ams.rpki-client.org