Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
File:                     mnRIG4fez2ODfiaXRiyeRHANS90.mft (raw, json)
Hash identifier:          +6F2zlCXiIQ7cwC0vseHb6NMHIIchjQLGDhgNNDCR7U=
Subject key identifier:   06:7F:9D:FE:08:01:4C:18:E4:77:CC:73:F3:47:81:9D:F9:97:64:58
Authority key identifier: 9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
Certificate issuer:       /CN=9a74481b87decf63837e2697462c9e44700d4bdd
Certificate serial:       01905057A91E8FA9E7D1F55F46BC8D2ACF02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
Manifest number:          0198
Signing time:             Tue 25 Jun 2024 17:00:40 +0000
Manifest this update:     Tue 25 Jun 2024 17:00:40 +0000
Manifest next update:     Wed 26 Jun 2024 17:00:40 +0000
Files and hashes:         1: mnRIG4fez2ODfiaXRiyeRHANS90.crl (hash: +8sLDlJHhSrL/rXmeE0L0nhFlQyMh92KLkLpO3FFPyo=)
                          2: z4RFsgtdJLQ9ClX7XqhGHv0anNg.roa (hash: WLv3cDi2URM2G09/ftoU3IXd/mXsQzs0+UwbZTQ879w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:50:57:a9:1e:8f:a9:e7:d1:f5:5f:46:bc:8d:2a:cf:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a74481b87decf63837e2697462c9e44700d4bdd
        Validity
            Not Before: Jun 25 17:00:40 2024 GMT
            Not After : Jun 26 17:00:40 2024 GMT
        Subject: CN=067f9dfe08014c18e477cc73f347819df9976458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:57:f0:6f:c9:c2:ac:3e:85:7b:ba:29:36:
                    35:8d:15:56:1a:bd:a6:f6:2c:05:ed:c4:76:6c:08:
                    1c:b6:bf:43:7a:20:46:5e:23:5f:48:ea:ab:b9:34:
                    01:38:0b:14:ee:7f:af:f8:e1:bf:89:bb:b7:7f:62:
                    96:c5:5a:db:4c:74:4a:b8:f7:3d:77:39:19:d7:51:
                    5a:04:0d:3d:47:31:94:67:28:37:93:f5:51:91:5d:
                    9a:a0:e4:40:45:e3:6c:a3:79:cd:cc:bf:37:58:22:
                    30:e3:b0:18:31:c2:45:d4:0b:e7:c9:67:a6:a1:13:
                    fc:89:1e:fe:6f:45:9c:10:de:fc:c9:f7:8f:5a:79:
                    fb:66:80:66:b2:6d:75:32:59:c8:2a:9c:f7:9c:51:
                    69:48:43:23:4f:fe:81:c6:3b:f5:de:a7:c3:e2:9f:
                    bd:38:40:f1:e4:ec:42:fe:69:7e:34:be:cc:1d:80:
                    43:91:0e:42:ef:9a:c2:b3:de:45:0e:8e:9a:d0:c4:
                    16:6b:6c:01:df:7d:8d:ae:89:fd:16:8d:3e:1a:bd:
                    ea:69:30:62:25:68:0b:cc:d8:55:d7:68:56:df:f3:
                    11:96:c7:8d:df:84:78:45:7a:c2:76:cd:7a:9a:d8:
                    34:99:c6:ac:ca:6c:2b:b7:92:72:af:05:30:e2:87:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7F:9D:FE:08:01:4C:18:E4:77:CC:73:F3:47:81:9D:F9:97:64:58
            X509v3 Authority Key Identifier:
                keyid:9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:03:f9:09:e0:73:b3:50:12:06:80:ae:9e:c7:ea:7f:06:82:
         7a:e3:6c:b0:df:1d:eb:85:e6:ae:6e:d6:e1:87:14:6e:41:da:
         5b:07:0b:9b:1b:03:ec:ac:c0:cb:3f:25:0d:36:0a:76:b0:e5:
         5e:79:23:cd:63:ea:de:06:ad:e4:dd:17:22:3d:f8:2b:ed:82:
         7d:11:2e:f4:b5:f4:3d:f1:2d:c9:0f:dd:0f:e5:0d:6f:71:5c:
         a4:3a:1f:d2:9b:2e:66:87:f5:c4:54:9b:ac:f6:8a:84:90:13:
         81:f9:8b:e1:11:82:e5:e4:31:7a:59:21:d1:85:5f:3d:63:5b:
         10:7f:57:11:0d:47:c9:58:7a:fa:f6:18:c8:0f:66:52:1f:d3:
         f5:8a:b6:47:c2:bf:e2:3b:8f:8e:ab:51:68:75:22:91:73:bc:
         0d:d3:b1:4a:24:c8:50:54:79:f7:9b:6e:13:59:46:03:ae:9b:
         f3:cd:87:c7:8f:3a:67:ec:24:95:5b:1b:f9:01:b1:7b:fa:05:
         5e:4c:27:85:c4:e6:89:3b:39:f9:4e:a8:48:1a:b1:06:2c:a6:
         4f:7e:d9:0d:c8:ae:3b:21:4a:b1:91:f7:02:e5:23:3f:87:cb:
         25:ab:24:a4:d0:a1:75:df:ba:fa:6a:3c:aa:ae:98:b8:54:3a:
         dd:0c:2a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:49:13 2024 by rpki-client on console-ams.rpki-client.org