Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
File:                     sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft (raw, json)
Hash identifier:          iKwNGL77Xk45buLtiExDVHYldr/g0hdEwiXBWdUe3xQ=
Subject key identifier:   E7:D2:42:10:46:B3:B1:2D:71:AF:9C:5F:28:82:2E:86:1B:7E:5F:AE
Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
Certificate issuer:       /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Certificate serial:       01906F097D7ECCA430E51937AE762EA2C1A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
Manifest number:          11EE
Signing time:             Mon 01 Jul 2024 16:03:31 +0000
Manifest this update:     Mon 01 Jul 2024 16:03:31 +0000
Manifest next update:     Tue 02 Jul 2024 16:03:31 +0000
Files and hashes:         1: FoEK8J5BxzpneHMAKHDobBjLsVE.roa (hash: V707aoQPAhDqKKP6lgiTbIWz0oYhRXdignZlR8oH7U4=)
                          2: sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl (hash: 78eq3U+pasoV6kq8F+rEXza315mYDvTGKnXPvcuglNE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6f:09:7d:7e:cc:a4:30:e5:19:37:ae:76:2e:a2:c1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
        Validity
            Not Before: Jul  1 16:03:31 2024 GMT
            Not After : Jul  2 16:03:31 2024 GMT
        Subject: CN=e7d2421046b3b12d71af9c5f28822e861b7e5fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:49:e4:62:61:78:75:14:a9:a8:80:75:38:
                    c3:17:01:1e:52:8a:59:44:07:b6:4b:a3:96:5e:c7:
                    72:0a:06:08:59:59:b4:23:ad:8b:40:df:c9:99:2a:
                    3e:26:d7:d0:d8:64:33:51:ad:a4:b6:83:f4:33:b6:
                    af:b2:83:85:ba:4e:09:dc:25:a4:63:88:11:df:3b:
                    d9:b6:90:9b:f9:7f:76:2b:de:e9:71:46:c8:1d:ab:
                    9e:b8:8d:d0:cc:89:39:a5:22:a6:67:a2:4a:fc:63:
                    84:a8:20:e5:6a:24:1f:78:97:fe:45:55:86:d1:87:
                    6a:27:ee:8c:70:46:82:31:a3:08:62:e8:bb:78:a1:
                    08:bc:c2:90:eb:2f:6d:02:11:c0:ab:ca:40:f2:b0:
                    91:a9:65:01:b0:c7:1b:34:28:09:a6:47:bb:ae:c7:
                    b5:cf:42:c7:4b:a5:78:d2:0c:bf:26:2a:ef:11:08:
                    eb:82:fc:86:4e:d8:9e:bc:2b:57:6d:64:5f:92:78:
                    6c:fa:a2:06:41:7c:6a:66:4f:2c:d7:c0:61:05:fa:
                    6f:6b:34:ac:b0:df:40:ce:12:f1:80:b2:57:7e:c0:
                    03:fc:7c:18:db:fc:8e:9d:01:1f:96:60:0b:32:c0:
                    a3:e4:b1:8a:2b:78:c4:20:71:a4:a0:fe:2e:3e:7f:
                    87:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D2:42:10:46:B3:B1:2D:71:AF:9C:5F:28:82:2E:86:1B:7E:5F:AE
            X509v3 Authority Key Identifier:
                keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b1:9f:61:9d:c4:93:d6:ba:10:27:0c:e8:40:c7:55:a3:09:
         ab:ef:11:08:a8:fd:80:cc:65:94:7a:e9:34:da:ee:54:11:6d:
         6d:33:ca:8b:80:16:f4:e0:02:7c:ed:7b:ce:bd:f8:a2:ab:50:
         41:c4:6c:0e:10:ee:f1:0b:ec:16:ed:66:64:5c:16:fb:c7:75:
         48:b6:9b:ac:12:58:8d:35:31:6f:ee:15:9a:ed:3e:e8:c7:46:
         d1:e6:0d:6b:8b:e9:96:b6:7d:78:39:0f:65:72:3c:32:17:44:
         b4:d4:7f:c8:9a:70:31:bc:4b:82:d8:43:82:8c:89:c0:77:f6:
         ff:23:9d:f5:00:cd:bd:e3:10:19:a1:ca:36:56:9b:3a:3a:ee:
         cb:85:92:13:61:1d:1a:34:f7:f2:b5:fd:e9:eb:c4:31:fd:3b:
         29:51:7f:05:56:08:a6:b3:f1:23:90:59:5d:70:2e:8e:30:41:
         a5:72:a2:03:9f:99:dd:0a:dd:0e:ee:1e:22:69:8c:fc:1f:0e:
         3f:ed:1d:66:a3:8b:87:9b:c1:85:bd:cc:0a:bf:f8:43:c5:5f:
         5e:89:31:66:79:06:ee:c3:1e:1e:77:c4:3a:3e:f2:7d:8d:e0:
         83:29:6c:ed:53:89:f1:78:b5:3d:97:df:99:93:62:fa:9d:7e:
         20:96:07:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:55:30 2024 by rpki-client on console-ams.rpki-client.org