Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
File:                     riVa_-CEMRtuoC--Roa3lFNZhhw.mft (raw, json)
Hash identifier:          Vvt8lAnwWQhjCHNHEUz2u42YXtBQV5J/LedyoIYrLOY=
Subject key identifier:   01:1E:CD:F8:BD:12:87:AE:BE:57:38:B7:92:20:42:17:B8:7A:56:9E
Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
Certificate issuer:       /CN=ae255affe084311b6ea02fbe4686b7945359861c
Certificate serial:       0191F9A2830D255DB2C925F757E6C4615977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
Manifest number:          B9
Signing time:             Mon 16 Sep 2024 07:01:02 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:02 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:02 +0000
Files and hashes:         1: mjU5uqx36RgCpDI_N5neN_V-7AI.roa (hash: JHkZmtND8aZb4WElvEoqN8Dl0CSBLFiQde+G/0ERMjE=)
                          2: riVa_-CEMRtuoC--Roa3lFNZhhw.crl (hash: lTW7u3mhNN/KfI714jHe3dpb26029+IeN60hk8t5f4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:83:0d:25:5d:b2:c9:25:f7:57:e6:c4:61:59:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c
        Validity
            Not Before: Sep 16 07:01:02 2024 GMT
            Not After : Sep 17 07:01:02 2024 GMT
        Subject: CN=011ecdf8bd1287aebe5738b792204217b87a569e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f2:a6:22:5b:ee:64:b4:55:19:38:d1:42:91:
                    c1:d7:59:f1:38:e3:2e:a6:9a:bf:1f:c2:ee:50:d9:
                    13:af:28:9f:20:70:83:47:3c:60:8e:15:f5:0b:52:
                    6a:ae:61:60:bd:92:0c:99:f0:57:53:45:16:a2:e7:
                    86:98:48:af:6a:bb:fd:42:52:25:a6:e8:cc:0b:52:
                    a6:3b:37:58:0a:ef:b1:bd:0c:35:37:d8:24:39:88:
                    70:f6:a0:bf:90:66:82:9c:d9:d0:13:05:9b:06:d4:
                    1a:6a:39:9f:ef:92:70:e1:ac:b6:16:8a:64:36:c3:
                    d9:82:ec:85:5e:82:0c:46:c1:ca:e8:37:40:ac:76:
                    53:bc:87:a4:3a:5c:1d:21:4c:27:55:0b:e1:79:f1:
                    40:ae:c5:36:08:f4:07:3f:78:21:2b:11:df:df:d2:
                    52:db:10:d0:93:e8:ed:10:31:05:11:72:e0:76:c3:
                    3a:34:c7:06:d5:8b:5b:0a:b5:a3:a7:19:7f:06:40:
                    db:64:b1:d4:84:55:72:6f:5e:dc:bd:61:dc:fa:36:
                    a9:2a:05:fc:75:34:81:ea:ba:21:73:39:30:90:ee:
                    31:0c:5e:8d:cb:47:e3:99:91:b6:b6:2e:dc:03:e8:
                    40:33:fd:6e:b4:17:49:6a:3a:96:85:5e:cd:6e:06:
                    b5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1E:CD:F8:BD:12:87:AE:BE:57:38:B7:92:20:42:17:B8:7A:56:9E
            X509v3 Authority Key Identifier:
                keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:19:e3:65:17:d7:34:77:52:a3:6d:4f:92:73:fc:c1:b9:0d:
         bf:46:74:bc:f5:bb:05:57:ff:b1:1d:aa:68:2e:3b:d1:29:fc:
         54:df:9d:b2:1b:9e:7c:5e:ea:11:b1:0d:fb:41:5c:ba:25:c1:
         c0:56:fc:2e:7d:4a:d7:a9:c5:31:27:3c:69:a5:e8:6a:dd:5f:
         ff:8d:e3:bf:1f:63:72:10:4d:84:14:43:6b:f1:d8:2c:57:14:
         90:0e:f8:6f:8d:bf:d4:d7:6a:bd:5d:74:89:00:c5:01:8c:b6:
         47:4e:06:9a:62:b6:ec:57:27:2c:59:ae:b0:b0:82:be:87:f0:
         d3:e8:58:66:37:f4:a2:0c:a7:a4:66:21:6e:bc:19:09:da:94:
         ec:fd:fd:42:71:28:61:24:35:02:dc:09:d0:32:92:de:a6:01:
         0c:64:0b:3c:69:93:62:c2:b9:ce:8c:7c:b8:46:3c:24:08:97:
         d8:eb:68:ba:74:88:94:a7:ca:00:41:1a:47:0f:1e:f6:ab:ec:
         60:7c:43:e7:d2:0c:f6:8e:90:f5:01:04:a5:d0:2a:8a:da:90:
         d6:d4:a3:5b:a2:3f:a1:81:60:99:7f:81:d0:a2:d4:dd:7f:8c:
         5c:3e:f2:38:89:f0:9f:80:e4:73:b3:6b:b8:35:21:5f:3d:35:
         12:57:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:18:38 2024 by rpki-client on console-fra.rpki-client.org