Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
File:                     I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json)
Hash identifier:          fTZTE+88FDyR0PVwOvO5Fzxtm0a1gUzSMX0qfn+yw0A=
Subject key identifier:   11:34:57:BD:B5:C7:28:93:49:31:61:29:EF:9F:22:13:B3:7B:16:97
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Certificate issuer:       /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial:       018FD8D33C06E7147A04938337329F93E56B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
Manifest number:          11A2
Signing time:             Sun 02 Jun 2024 12:01:13 +0000
Manifest this update:     Sun 02 Jun 2024 12:01:13 +0000
Manifest next update:     Mon 03 Jun 2024 12:01:13 +0000
Files and hashes:         1: F7FEj2CinHEr6ELU3YDPe-hpCDQ.roa (hash: gyCJAb60LOtSLHYgddWWE5zxjOdPvzx3Frcb9nOFEQU=)
                          2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: mzv2PxMzfzYmqyrHKQbLBnZGT1MP/vLYWvjs8D9I7ls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:d3:3c:06:e7:14:7a:04:93:83:37:32:9f:93:e5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
        Validity
            Not Before: Jun  2 12:01:13 2024 GMT
            Not After : Jun  3 12:01:13 2024 GMT
        Subject: CN=113457bdb5c7289349316129ef9f2213b37b1697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:0c:7d:87:04:b9:77:10:fb:13:27:52:05:
                    09:0d:91:81:5b:56:a7:20:cd:ba:b7:da:c3:f3:34:
                    e1:c0:a0:82:01:ec:49:46:24:f8:dc:22:1e:14:42:
                    27:23:28:18:72:5d:70:a6:e2:83:8b:74:21:56:f5:
                    71:32:a8:d9:6d:0d:54:74:b6:3c:f8:b1:91:9f:16:
                    7b:e0:79:3a:2e:29:1f:fc:0b:10:76:30:bc:87:75:
                    1f:2a:41:88:42:40:72:ff:2c:75:6b:74:fd:60:67:
                    d5:33:52:1c:65:3a:a8:3a:ac:94:33:76:2e:a7:be:
                    34:fd:5f:3e:f3:02:e6:73:93:4d:c9:99:a7:d9:5d:
                    8a:e7:75:fa:aa:2f:9c:ad:10:b8:ab:7b:16:23:50:
                    62:87:24:c4:f1:2b:3e:21:08:39:bc:75:bb:db:62:
                    83:df:29:6b:b3:79:07:20:43:84:2a:36:72:b7:c8:
                    88:aa:ef:f2:be:93:54:99:a0:87:61:39:8e:e4:1a:
                    f3:18:9f:18:74:de:7d:56:81:6f:65:c8:13:58:34:
                    38:79:32:11:67:94:68:fd:c9:60:56:c3:f9:00:3d:
                    d2:51:aa:63:c9:e7:15:ee:0f:d5:dd:0d:25:15:80:
                    99:c0:c4:42:6a:c1:dd:97:f4:9d:88:4e:95:ed:bc:
                    3f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:34:57:BD:B5:C7:28:93:49:31:61:29:EF:9F:22:13:B3:7B:16:97
            X509v3 Authority Key Identifier:
                keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:af:ec:31:b1:99:8f:74:74:c2:72:20:78:c9:f3:09:77:1e:
         be:38:5b:2f:37:0d:11:1d:60:82:77:f3:1f:21:6c:c0:4c:a9:
         25:22:36:83:0e:0c:10:16:74:b0:11:cf:0c:7b:e7:ff:01:34:
         a6:80:49:d2:5c:a9:b7:08:8c:8f:1a:33:a3:71:b6:f5:79:64:
         59:5f:8d:d2:01:c9:df:df:1d:0d:e0:3d:89:3f:ca:42:a6:7b:
         17:52:50:f2:9d:11:1a:97:9f:eb:a8:b8:d8:b1:66:0f:e1:3b:
         65:11:a6:d9:59:36:b5:a3:0b:69:c1:6d:fa:c2:4d:73:f4:17:
         63:69:2a:c4:a5:30:d5:2f:7c:9f:87:9f:a7:be:f8:a9:dc:a4:
         0f:14:f6:6e:67:43:8e:08:01:79:f5:79:23:e1:61:36:1e:f5:
         b2:5a:8e:43:d2:3d:77:ec:70:2f:df:ab:10:75:42:3e:a4:18:
         b4:e2:bc:4e:d8:60:4b:93:03:9f:e7:83:49:a0:56:27:32:16:
         1c:c8:83:31:c2:aa:6b:8c:a1:8a:16:3a:f9:09:52:f2:1b:15:
         84:8b:d9:33:36:dd:46:4c:50:b4:91:87:ea:a1:8c:93:68:5b:
         5f:89:fa:18:65:c4:05:22:65:d9:83:76:cf:e7:bc:5c:03:68:
         6e:ed:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:14:23 2024 by rpki-client on console-ams.rpki-client.org