Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
File:                     n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft (raw, json)
Hash identifier:          lPdp6S3Ro2V1KqyXbY+HmC7CuJ56WxiObHoe3oCjQ3w=
Subject key identifier:   36:C9:9B:89:6B:62:CD:D8:40:D9:16:04:E0:A2:2B:B5:63:A3:81:1C
Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Certificate issuer:       /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Certificate serial:       01902A261C87FDBD247ED10A6D29F2C86D72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
Manifest number:          0638
Signing time:             Tue 18 Jun 2024 07:00:59 +0000
Manifest this update:     Tue 18 Jun 2024 07:00:59 +0000
Manifest next update:     Wed 19 Jun 2024 07:00:59 +0000
Files and hashes:         1: n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl (hash: 663RJIcs/5fAqLFVAT9UxlO/b13Pmac21gQUBDWk2Jc=)
                          2: t96DB3WxYC0yyVGh8FOobbA-894.roa (hash: BH7Mm4nTdHoBB2p4K4PTq2cg78YuwhALHk1xbPiPJmQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:26:1c:87:fd:bd:24:7e:d1:0a:6d:29:f2:c8:6d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
        Validity
            Not Before: Jun 18 07:00:59 2024 GMT
            Not After : Jun 19 07:00:59 2024 GMT
        Subject: CN=36c99b896b62cdd840d91604e0a22bb563a3811c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2f:e3:df:c1:cb:9f:87:f0:94:cb:b5:9a:c9:
                    23:0d:df:1e:fa:09:72:ba:b3:78:83:33:74:d4:60:
                    44:13:cc:69:2a:cc:4c:5b:77:59:ed:ac:ef:0d:a8:
                    52:cb:72:23:7c:27:67:f2:b8:e9:78:3e:92:da:39:
                    b6:24:18:ae:68:17:2d:e1:89:c4:00:52:e8:6f:d0:
                    f5:ba:8d:8b:c8:c6:17:b2:ae:99:5f:9c:0d:70:b7:
                    72:11:30:be:72:c9:18:82:3f:ad:ff:3a:e1:68:72:
                    bb:69:c6:01:71:c2:b3:1d:b4:3e:53:18:74:23:18:
                    fb:dc:8d:1e:04:53:10:4e:d1:a1:20:27:6b:f6:aa:
                    4f:a9:b9:11:e2:06:f0:c5:76:5f:7a:09:00:e4:47:
                    cc:77:ab:b4:09:b7:c9:e3:b0:c4:c1:47:af:1a:13:
                    34:49:66:56:ee:44:d0:2f:5b:17:09:b8:32:47:a3:
                    87:f6:a4:ec:ff:4c:3c:1a:ee:0f:28:af:3e:8c:24:
                    57:1d:50:1c:57:d3:13:62:e6:10:5e:95:ef:b8:b4:
                    26:ba:a8:7f:f6:74:4d:2b:4a:fa:71:4b:3a:fc:0a:
                    8f:22:c0:4b:c8:02:c5:42:e0:45:4a:71:45:b0:33:
                    a0:4d:7c:2a:4a:98:41:7b:3a:f8:cc:f6:55:e2:c0:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C9:9B:89:6B:62:CD:D8:40:D9:16:04:E0:A2:2B:B5:63:A3:81:1C
            X509v3 Authority Key Identifier:
                keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:8c:59:9e:50:3b:93:a1:69:c2:fa:47:f8:c1:2e:2a:fa:39:
         80:41:94:da:54:b7:9b:06:0d:35:71:2f:92:13:d0:97:ea:1c:
         80:dd:14:72:f9:d9:76:b5:da:4c:77:bd:1e:32:84:3c:9a:b0:
         7e:00:6d:85:4f:90:d1:bb:61:9c:ab:a4:70:6a:b6:63:2c:f3:
         7e:1a:1f:63:c4:6c:7f:27:ff:87:d6:cf:e3:bd:72:2d:44:4d:
         3d:b7:04:a8:8c:41:b4:24:d8:6e:85:4d:e1:b5:d2:58:e9:a8:
         88:53:7a:a9:93:70:db:71:ad:d8:b4:26:bf:2d:de:0c:24:0d:
         66:36:3b:c0:3e:8d:c0:c3:c6:9a:bf:fe:cd:e2:aa:8c:7f:dc:
         ee:b4:47:8b:b9:ce:40:37:a2:15:6e:9d:d3:9d:9e:29:d8:b1:
         6b:3a:4d:cb:21:d4:50:a4:5a:2d:46:69:a9:83:a4:62:18:ba:
         b8:fc:81:1a:88:42:eb:cb:ee:82:42:68:27:27:b1:31:93:37:
         e0:cd:48:52:a7:3a:1d:0d:4b:40:07:a6:23:01:47:af:c4:89:
         ff:4f:f5:9d:03:15:e1:d4:31:96:99:1f:52:48:7c:bd:eb:02:
         58:b4:43:6a:81:23:da:77:e1:44:32:fb:01:57:e0:ee:8c:e2:
         8a:2e:8d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:18:18 2024 by rpki-client on console-ams.rpki-client.org