Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File:                     IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier:          NNSu4h2mKssIOUeGeZLUwuvHFpIWrZklSTxnLchI7nE=
Subject key identifier:   2D:47:7B:74:D6:58:8C:05:0C:E3:BE:49:7B:A8:F5:0C:C2:C4:45:65
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer:       /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial:       01906F090B06D6365F9F57DC65B5D31D72D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number:          0CB0
Signing time:             Mon 01 Jul 2024 16:03:01 +0000
Manifest this update:     Mon 01 Jul 2024 16:03:01 +0000
Manifest next update:     Tue 02 Jul 2024 16:03:01 +0000
Files and hashes:         1: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: FAuJHPGHNAmMTi7N1bp3N5w8AGms9UqUeJirKeEtzZ8=)
                          2: hMBf_1SUv-HOMl1iNjeB-HQ5czk.roa (hash: IvwRlOceL2uG/hwiFZQ+bxvQP/yPdsRFdu9Np57ZKVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6f:09:0b:06:d6:36:5f:9f:57:dc:65:b5:d3:1d:72:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
        Validity
            Not Before: Jul  1 16:03:01 2024 GMT
            Not After : Jul  2 16:03:01 2024 GMT
        Subject: CN=2d477b74d6588c050ce3be497ba8f50cc2c44565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:45:a4:f3:4b:3a:cd:e1:4e:b5:80:ef:89:
                    b9:30:90:c5:48:f5:5c:f8:0d:f2:59:86:7d:01:3e:
                    e9:d7:a3:d4:af:02:f7:a8:e2:9d:7e:6f:95:6e:a2:
                    d7:30:99:ba:4f:4d:73:b4:8f:aa:a0:83:a1:78:5d:
                    27:7b:12:c4:02:81:c4:aa:b8:58:c9:4a:68:10:b2:
                    47:39:64:23:27:38:45:be:43:30:58:14:54:18:13:
                    a8:8e:9b:6c:ae:31:e5:62:62:00:91:76:bb:20:e0:
                    3a:42:a6:99:61:95:95:2f:6e:e5:73:b3:a0:f4:0d:
                    b6:78:d7:9d:22:cf:07:ca:da:f2:cf:fc:b8:75:b5:
                    f3:07:27:3b:68:69:03:44:57:31:08:fe:7d:56:d9:
                    15:78:0d:a4:11:26:b0:31:fd:ed:31:70:75:ba:33:
                    08:95:f6:40:ca:dd:70:23:82:a7:90:f5:3f:a4:f2:
                    70:53:65:2b:49:3b:b0:c0:d1:99:4a:b3:93:f7:f1:
                    94:c4:29:41:8d:c9:65:78:0c:f7:1b:90:a7:4f:2b:
                    20:01:0e:67:d0:90:f8:b1:14:de:95:f6:75:9f:ab:
                    25:ad:80:75:89:6f:87:24:56:7e:1a:e0:5e:1d:8c:
                    08:3b:4a:0a:a1:c5:18:17:94:ed:b8:f1:84:bd:b3:
                    44:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:47:7B:74:D6:58:8C:05:0C:E3:BE:49:7B:A8:F5:0C:C2:C4:45:65
            X509v3 Authority Key Identifier:
                keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4a:ca:4f:3a:f5:a7:8d:4d:db:f1:6c:1d:d6:e3:94:5e:4c:
         85:0a:5d:ef:89:59:8a:5a:e0:90:28:66:5f:66:2f:b4:ae:84:
         8a:08:3a:f5:eb:67:c1:90:95:ed:93:eb:c0:93:82:41:df:9e:
         09:69:15:e1:ad:98:b1:6b:35:9a:de:a6:c4:a2:df:c9:71:e7:
         71:21:59:e1:a4:0a:f4:bd:cd:29:cf:f3:6b:6c:2f:11:67:5b:
         f2:b7:94:f4:77:25:61:8e:ec:d7:c9:34:c7:19:45:20:05:60:
         29:48:05:49:83:9b:61:7c:26:9c:38:87:69:c4:0e:25:87:8c:
         2c:26:08:2b:5e:f3:9e:0a:8b:ee:a8:40:10:ea:fd:11:7d:de:
         d2:8d:25:99:42:21:73:31:38:fc:28:39:94:4d:fe:36:1b:4a:
         27:d5:17:38:ce:ef:c0:ca:58:c2:49:64:a2:13:9e:d1:a1:7f:
         2d:ce:d3:01:6b:20:ec:cd:c9:98:1d:5e:88:be:cc:d6:d3:27:
         99:14:10:b5:ad:dd:07:a4:1b:03:74:6d:a2:ae:29:a4:8a:02:
         6f:88:7e:ea:a1:1a:5b:b5:e8:40:69:59:4a:19:fa:cf:f1:f0:
         7b:9c:39:94:26:33:f4:5f:8f:05:d5:cc:a0:e0:de:29:15:14:
         66:96:51:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:14:27 2024 by rpki-client on console-fra.rpki-client.org