Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File:                     u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier:          1pu/GpAqckPevXMUgWu030Z8LXGLF9UCZfchzjmqwnc=
Subject key identifier:   4E:25:53:0D:3A:9E:78:E4:D4:C6:7A:9F:A5:6D:84:ED:9C:23:6C:4E
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer:       /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial:       019040B085292C353F0C36107428E8BE7C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number:          11DB
Signing time:             Sat 22 Jun 2024 16:03:48 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:48 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:48 +0000
Files and hashes:         1: c-zuOwPENbj2Xgue9dnJEreGYvw.roa (hash: cGfEOARxixGPvVWrKf/JvKs2WOe59XaTrFTLWFxep/E=)
                          2: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: Sy+MYIebZWd2T+3cdfLj0ZP/1KG9Eou/wYZ6bdmQcy4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:85:29:2c:35:3f:0c:36:10:74:28:e8:be:7c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
        Validity
            Not Before: Jun 22 16:03:48 2024 GMT
            Not After : Jun 23 16:03:48 2024 GMT
        Subject: CN=4e25530d3a9e78e4d4c67a9fa56d84ed9c236c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e9:c5:ed:75:18:01:6e:f6:e0:2d:f6:dd:c8:
                    2b:f9:4f:06:15:28:00:5a:40:37:91:65:1c:63:88:
                    ad:e2:e7:b3:86:3f:4b:ff:22:04:d7:53:61:de:2f:
                    c3:72:69:8e:98:67:c6:d6:6d:cc:2e:99:d6:ad:3f:
                    29:db:98:12:e3:dd:1f:1c:31:86:fd:c3:bd:ea:3c:
                    6a:99:39:23:1c:d7:b5:c0:de:18:87:00:23:37:98:
                    0d:db:64:3f:63:4c:15:3f:48:8c:5c:18:85:26:73:
                    ea:38:9b:66:9d:1c:57:b2:a2:68:77:c7:64:e0:4c:
                    8f:c5:a2:5a:88:b9:6e:15:74:00:20:ed:52:06:a8:
                    7a:5a:7d:56:64:49:58:6e:ce:e9:73:bb:b2:19:d8:
                    9e:16:e2:88:b7:7f:40:a3:b9:53:6c:ca:98:6a:d0:
                    7b:35:60:72:ab:b9:06:8d:ff:74:ae:03:64:b8:8d:
                    81:b7:ee:f9:21:7b:3b:64:ae:0b:38:ab:7a:28:db:
                    12:fd:26:2a:42:51:cc:53:ff:12:6b:1c:10:2a:a5:
                    8b:0e:74:88:a2:2b:43:77:fc:16:56:9b:49:af:a4:
                    d0:c6:03:f2:61:c2:d6:36:99:61:f3:14:77:b0:0e:
                    a2:4f:c7:50:66:9f:fe:7e:b2:83:53:89:0b:a4:48:
                    99:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:25:53:0D:3A:9E:78:E4:D4:C6:7A:9F:A5:6D:84:ED:9C:23:6C:4E
            X509v3 Authority Key Identifier:
                keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:08:44:d2:77:52:b8:88:5a:38:04:0f:6c:c5:eb:86:84:14:
         60:fd:a1:c4:9c:df:db:43:ec:f1:a6:b6:31:d2:8b:05:ab:c8:
         89:f5:ca:e2:7a:f1:92:54:53:42:5e:ca:13:48:e1:07:17:6f:
         ce:8e:ba:d4:97:c3:42:83:6e:ff:bf:35:24:92:6d:82:1a:f5:
         b7:46:c3:3c:2c:5a:ff:c6:e1:e6:16:05:e4:bb:a3:86:9c:c5:
         50:4f:62:6b:d6:a5:d7:6a:8f:71:49:be:99:8d:dc:b1:67:15:
         b1:bd:86:c8:aa:2e:83:a4:e0:6c:6c:12:27:26:61:69:1d:16:
         37:38:04:1c:37:0e:f0:e1:e2:fa:c6:fc:1f:19:b5:99:b4:23:
         a8:59:e1:e0:ca:3d:37:b8:19:19:4f:fc:01:a4:9e:5b:8f:23:
         29:b7:02:b8:9d:6e:85:fe:e9:a2:bb:e8:a4:65:04:f7:09:97:
         3a:1e:5a:f7:1f:4c:b5:65:d2:90:1e:c9:8b:5a:f3:30:ae:23:
         e3:ab:4a:c9:b4:87:ad:26:25:72:7b:02:cb:6d:a2:dc:d1:16:
         45:08:20:51:11:c1:40:64:01:f4:bd:5f:02:8a:51:38:5e:bf:
         67:67:c2:87:85:0e:0d:99:09:da:33:06:4d:1f:59:1b:25:f3:
         fa:18:78:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:47:29 2024 by rpki-client on console-fra.rpki-client.org