Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File:                     XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier:          ZxVEgu3aiPq38/Z/xTid90TfnikNN2DzVol9l3r5weQ=
Subject key identifier:   5E:F5:3E:70:0F:9C:FC:39:06:A7:03:5B:C1:B5:1F:91:27:49:63:42
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer:       /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial:       01905211343E543018AC2F5984BD3547B663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number:          1151
Signing time:             Wed 26 Jun 2024 01:02:57 +0000
Manifest this update:     Wed 26 Jun 2024 01:02:57 +0000
Manifest next update:     Thu 27 Jun 2024 01:02:57 +0000
Files and hashes:         1: 0wrjQ-aZBX0Y0hHne0lcEKzSpAU.roa (hash: bpQ+oALdIgKDN8MgT07KJs/paBsG4wNbHAwm6occFQs=)
                          2: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: JqTuP7kV03TohbUPAEGXlQDfX/6jpvWw+oGpwlC95MI=)
                          3: pU3TAr8ROVvCB_iRU49bILZzoas.roa (hash: aIrOTyq5ElibqaetiObSxXLL+LibKJwmQIkzLTVmdGo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:11:34:3e:54:30:18:ac:2f:59:84:bd:35:47:b6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
        Validity
            Not Before: Jun 26 01:02:57 2024 GMT
            Not After : Jun 27 01:02:57 2024 GMT
        Subject: CN=5ef53e700f9cfc3906a7035bc1b51f9127496342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:29:d8:fa:71:14:26:89:07:4e:a3:fe:4b:
                    6b:b7:75:5e:a5:ff:67:45:0f:59:08:eb:79:53:84:
                    a8:24:c1:61:da:df:5a:95:ce:2e:ea:4b:d9:76:10:
                    78:a3:1a:d3:bc:38:cd:cf:a5:fb:b9:42:3e:cd:96:
                    68:30:53:2f:21:21:1b:19:ea:7c:be:d4:4e:10:c2:
                    c7:ae:90:17:3f:ef:fe:ec:8a:58:82:67:55:02:24:
                    5b:66:70:50:0e:da:a8:df:c3:87:7f:55:6f:7d:aa:
                    a7:28:8a:d8:de:a2:a9:0b:13:cc:f5:e0:b4:36:bd:
                    64:12:f1:a4:b8:b4:37:0d:3a:6c:3e:1e:84:a4:8e:
                    51:49:32:64:b8:4b:93:94:78:92:a8:53:1e:5f:93:
                    69:f0:23:e9:2e:be:5e:49:57:fa:ab:80:f5:32:eb:
                    3f:3a:65:f3:59:04:c0:44:2f:09:c3:99:b3:ae:0c:
                    c5:80:ba:b5:45:3e:05:59:8f:fa:13:61:db:75:6e:
                    29:ec:cf:f7:5c:c0:2d:59:a9:2a:2b:49:0b:8f:86:
                    c1:8a:4d:08:02:ab:56:21:8f:45:b6:4d:18:39:b8:
                    5f:f9:ad:11:3e:7f:ba:1c:1f:3c:ba:d0:91:0f:c4:
                    03:7e:da:b1:4d:e7:75:53:0a:22:62:0f:8b:c7:9d:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F5:3E:70:0F:9C:FC:39:06:A7:03:5B:C1:B5:1F:91:27:49:63:42
            X509v3 Authority Key Identifier:
                keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:79:3e:e9:c6:0d:9e:3f:ea:d6:d5:ef:62:2c:98:20:e3:86:
         68:b8:a6:8d:5c:c3:49:c5:8b:11:c5:2c:0b:98:cb:93:a2:ab:
         fe:39:3c:46:21:c0:6e:e7:e8:ef:2c:e4:84:87:5a:74:d4:12:
         d8:85:cb:4f:ba:fb:9c:bb:9d:0a:3d:ed:a2:6f:19:c1:89:ec:
         a8:79:c7:fe:c4:f4:fd:e7:96:fe:d3:83:98:85:d7:da:e6:a8:
         14:d7:ff:0b:c7:32:35:bf:1f:6a:de:c7:58:35:79:91:86:a8:
         e9:77:81:17:ff:da:36:36:50:ac:1d:af:5a:8e:9b:3d:95:18:
         91:53:f1:3b:dc:6d:07:ed:2c:c1:e9:5e:a1:5a:0b:11:86:3e:
         fd:da:11:e3:e8:c1:52:0f:b5:24:bc:b7:fd:d7:9c:a1:dc:bc:
         86:96:6d:da:34:37:7c:56:52:fa:a1:18:b3:69:63:5e:ba:a5:
         ec:6b:7c:96:4d:d0:f7:03:ec:59:4a:51:9d:1e:72:b6:9b:53:
         00:23:30:90:36:9f:da:d6:28:52:94:a0:dd:c6:3d:1b:f2:ec:
         74:a0:a8:65:e8:94:9e:1d:12:a4:49:18:37:9b:89:6c:a6:6b:
         4f:7f:94:67:28:06:67:c6:47:04:08:26:69:f6:34:61:5f:e2:
         cf:c1:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:59:31 2024 by rpki-client on console-fra.rpki-client.org