Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File:                     sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier:          YFIpAT6AD8N26e/ahDCQF1a3D92mshEJGkFf2F7vplU=
Subject key identifier:   11:E8:40:14:B8:7C:F9:FE:55:19:EC:58:0E:1E:71:6A:EA:6C:D5:39
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer:       /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial:       01902A5CF9AF8273799E0A312259D2F78B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number:          0F08
Signing time:             Tue 18 Jun 2024 08:00:54 +0000
Manifest this update:     Tue 18 Jun 2024 08:00:54 +0000
Manifest next update:     Wed 19 Jun 2024 08:00:54 +0000
Files and hashes:         1: gbma0zCcoMPi16meHVVHvJ9PzbY.roa (hash: jZhcRhNWNnm2ZaHjBQqccrXMwv9PWlV2cSEWnUJtSpE=)
                          2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: F8t+KhJW1EleCf+7F5w1KOTW/LsymjpWOmTgQwm/Hng=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:5c:f9:af:82:73:79:9e:0a:31:22:59:d2:f7:8b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
        Validity
            Not Before: Jun 18 08:00:54 2024 GMT
            Not After : Jun 19 08:00:54 2024 GMT
        Subject: CN=11e84014b87cf9fe5519ec580e1e716aea6cd539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a6:ab:30:d1:71:b7:a8:b4:30:71:9d:34:47:
                    0b:22:1a:9c:0f:14:d9:fc:d6:b0:48:2d:84:41:36:
                    23:21:40:c3:d5:cd:26:a6:2d:66:60:97:32:0d:78:
                    7a:83:bf:37:3b:53:dc:66:33:52:25:33:9d:1d:8b:
                    2f:f5:8d:c3:27:e1:ae:b6:38:2e:7b:3c:b4:56:6f:
                    ed:0f:80:4f:99:e4:a5:04:62:d2:5c:af:fa:04:6e:
                    c2:41:f5:99:3b:32:65:fe:79:3c:e9:d9:2d:ab:41:
                    ec:b2:ea:3d:8a:d2:1e:b5:10:39:3b:d3:9b:6e:c5:
                    c9:d2:74:58:86:29:6b:6a:30:96:e9:f7:31:58:e4:
                    c9:49:8c:2c:4d:ce:ac:62:6a:f9:a0:10:0e:77:b2:
                    b1:ac:5f:f3:6e:3e:5b:14:db:0f:da:6c:55:0f:2c:
                    d3:67:60:df:30:1d:0a:44:e4:d0:03:52:76:52:60:
                    a7:f8:a5:d0:32:37:b0:4c:db:65:99:f8:ab:8b:0a:
                    d2:b5:f5:c5:51:37:4d:8d:46:ae:9b:42:0f:1a:c6:
                    34:63:c4:7d:c2:fa:47:00:01:90:e5:78:db:b4:5c:
                    fd:11:f1:f4:c4:22:82:52:27:fa:f7:4e:3f:48:57:
                    ff:84:3f:f2:c3:80:7b:71:c9:8d:a3:59:d5:7d:1f:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E8:40:14:B8:7C:F9:FE:55:19:EC:58:0E:1E:71:6A:EA:6C:D5:39
            X509v3 Authority Key Identifier:
                keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3f:34:1e:14:2a:1b:a1:7e:66:f5:35:08:b4:b9:1d:99:b8:
         b2:31:5d:8a:7b:df:b4:c2:91:6d:b2:a2:67:dd:08:69:c4:33:
         62:33:65:ad:6e:0f:59:8c:e2:27:1c:f1:5e:cb:40:5a:33:19:
         b3:f4:99:7e:b6:f2:39:e2:dc:2d:48:a4:05:94:f6:bd:f8:7a:
         33:b5:8b:00:ea:9a:59:a1:0d:dc:3b:d7:9a:28:7d:bd:aa:3b:
         0e:0c:d7:fc:bd:c8:3f:81:b7:e3:70:92:0c:be:be:79:ec:69:
         e6:68:30:70:90:1a:b9:3e:4d:e6:54:ed:45:79:2a:25:8a:42:
         7b:0a:c9:45:0c:86:37:01:84:13:a7:81:fa:18:02:97:09:73:
         e9:a9:01:6e:ae:9c:32:69:0d:e8:52:9f:48:a1:19:22:18:a0:
         a8:d8:4b:c5:0c:a3:14:bc:84:aa:7d:8e:e5:4a:5a:14:54:3d:
         9c:62:c6:87:ec:a3:39:c5:6c:a0:76:6d:78:c1:38:07:d0:7d:
         bb:2c:7c:f3:75:ea:e1:23:a2:81:c0:6e:6e:a0:cb:13:62:fd:
         27:49:5c:7b:73:37:82:3d:07:b7:2e:64:d2:bb:9a:85:40:c0:
         03:80:2a:7c:13:f1:74:18:4b:9a:b0:d8:e9:4b:c7:e6:a2:3d:
         47:38:83:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:54:42 2024 by rpki-client on console-fra.rpki-client.org