Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File:                     o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier:          CJUEvK055Cb0fvrNrxTRiWDyvPu00i4Ye9rTtOErpS8=
Subject key identifier:   2B:FF:1B:37:89:D6:EB:FA:E8:01:7F:7A:17:98:65:BD:5E:62:45:B4
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer:       /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial:       0190343BEF52B21BA6CB46F50BF7C66AAE63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number:          1111
Signing time:             Thu 20 Jun 2024 06:01:01 +0000
Manifest this update:     Thu 20 Jun 2024 06:01:01 +0000
Manifest next update:     Fri 21 Jun 2024 06:01:01 +0000
Files and hashes:         1: VD4ni9UiF7Q3aW0-bubY4qKlm-4.roa (hash: 2VSauzYkVF/83m1L9h8zYtv5O6T0ybOQeT5AhcEBkKI=)
                          2: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: PDraitQfYr36B/hv3AO114L/FzMRPumuOdkOqnb4nBc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:3b:ef:52:b2:1b:a6:cb:46:f5:0b:f7:c6:6a:ae:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
        Validity
            Not Before: Jun 20 06:01:01 2024 GMT
            Not After : Jun 21 06:01:01 2024 GMT
        Subject: CN=2bff1b3789d6ebfae8017f7a179865bd5e6245b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:84:1f:14:f3:15:55:8b:14:e7:6c:c7:2f:
                    28:a4:3c:77:44:b2:78:b8:15:c2:bf:e9:41:ae:92:
                    65:56:a1:53:e5:35:64:3a:bf:aa:80:2b:84:ef:75:
                    05:a8:85:dd:36:db:61:f8:f7:6b:10:d8:16:81:55:
                    f0:10:55:93:27:fc:0a:16:9c:27:13:ba:ef:47:03:
                    61:05:f2:74:f3:fc:ef:08:00:8e:2a:cf:61:f0:ec:
                    a5:1a:b5:e0:d8:1f:bf:4d:e8:fa:e1:07:b4:34:5f:
                    91:ae:1b:53:ef:60:48:1c:c3:c5:b4:2f:d5:4a:f4:
                    ad:30:f9:28:55:db:c1:4d:04:6c:a6:12:23:12:66:
                    ee:6d:26:77:db:af:c3:82:2d:ab:09:3a:c9:c3:e7:
                    44:35:60:74:3c:da:8c:31:9e:48:b4:8c:9d:63:7a:
                    b1:e1:60:82:55:5e:ae:d1:73:96:4a:ab:f2:34:8d:
                    8f:13:79:7b:d7:09:15:e0:c6:93:bc:56:ca:91:15:
                    58:3f:13:ec:d9:f9:8c:14:18:15:07:9f:2c:fd:ca:
                    b9:25:94:81:98:85:e6:5e:28:27:43:d9:0b:a0:08:
                    ce:79:35:65:77:56:a8:31:75:e9:8b:70:d0:2a:ba:
                    14:a5:03:67:76:ea:68:7c:f6:23:46:a3:20:e9:bd:
                    c4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FF:1B:37:89:D6:EB:FA:E8:01:7F:7A:17:98:65:BD:5E:62:45:B4
            X509v3 Authority Key Identifier:
                keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e0:13:ec:4d:c8:d7:21:59:89:8c:3d:96:e2:9f:b6:bb:8d:
         ed:42:1f:c5:f8:ec:a8:29:e7:02:4d:83:1a:76:68:fe:ff:b0:
         f5:37:af:40:60:0c:d0:ae:dc:77:8c:44:d6:2d:c7:80:b8:53:
         7e:5f:21:c5:1a:73:a6:1d:6e:0e:72:c5:51:9b:89:8d:77:ef:
         a8:78:73:fd:26:72:0b:25:fc:49:c5:1a:0e:60:14:37:8b:08:
         f6:33:04:70:bd:ea:62:61:6c:aa:c6:ca:06:1b:96:6d:33:b3:
         2c:7a:3b:2c:11:bf:34:91:62:78:cd:37:08:5d:3b:b7:72:52:
         bc:a4:cd:58:9d:6f:f6:81:26:22:24:c2:3d:aa:e5:56:f4:68:
         eb:12:1f:53:de:ea:d9:62:f6:9d:ff:04:c0:96:08:44:42:dc:
         0c:a3:18:84:c2:38:d0:7d:47:5a:3f:c3:3a:65:50:bd:46:6f:
         83:bd:f9:9c:3c:28:d5:6e:97:ef:14:e2:be:aa:c3:f0:fa:95:
         cd:3c:46:ee:6a:21:82:3a:8c:62:7c:35:77:2e:7a:5c:07:15:
         d8:8f:ea:a9:8d:27:d6:4a:63:45:88:91:a5:f9:e4:f9:aa:15:
         4d:3b:bb:87:35:da:b4:b8:d8:fc:5c:a0:35:93:cb:ee:1a:ba:
         32:eb:a0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:39:28 2024 by rpki-client on console-fra.rpki-client.org