Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          MMbhQPCYOwSL58GTQI8JvQbdALYefTFDPKzpHD1Hu80=
Subject key identifier:   B3:75:34:43:A7:E9:D8:49:8C:4C:6C:B8:9A:DF:45:5D:E5:2C:F2:29
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       018E82951FA7AF8B11717137BE5CEE572C9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          10FB
Signing time:             Thu 28 Mar 2024 01:03:14 +0000
Manifest this update:     Thu 28 Mar 2024 01:03:14 +0000
Manifest next update:     Fri 29 Mar 2024 01:03:14 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: 8iVwKsryUB0IeHRXGzfX+oSa2WJ4twTkgQx3icg7g3A=)
                          2: 5hfXeD5ausEWsbLY_pXjT6n0Tlw.roa (hash: 7qKFHDoJIA22cNuCGx0Qp/ILYer0GQ2j71dH2GhdF48=)
                          3: FFo_kiOtg80eByptUnLK9AZNRhQ.roa (hash: mpWrJWmknlI+fWiDQrXRAUZ56YAgrN1tZcIAjUKNMRk=)
                          4: Uu0gyqe1I-mxyREq2SRbKswNBy0.roa (hash: sqjldu1tFo48f1K0XN3w5dfuZ8FGJkPU1PGNYC/Brok=)
                          5: tccwADvlk7kjv6boKi1KTycDkFY.roa (hash: 3oD0CtNhK5PBFJpkZTAi4q5VxdQ/X5RQ3emZHNaTD1o=)
                          6: x2mRk4_i_RH8oTclzfEZYyM9ORI.roa (hash: Fe53Fphpc6LcKFE3jokg7E5hCT0qdCv1qWrTYFWRp1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 01:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:82:95:1f:a7:af:8b:11:71:71:37:be:5c:ee:57:2c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Mar 28 01:03:14 2024 GMT
            Not After : Mar 29 01:03:14 2024 GMT
        Subject: CN=b3753443a7e9d8498c4c6cb89adf455de52cf229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:a7:8e:73:ff:af:db:e3:72:e8:d1:20:02:
                    b6:d3:1f:37:22:fb:27:a4:a3:13:ab:f4:6f:ce:a4:
                    7a:c4:6d:03:1b:3e:f8:27:fa:b2:cb:d4:12:9b:9c:
                    05:69:f6:c7:3b:82:28:7b:b9:12:e1:32:de:af:4d:
                    e7:0d:c8:51:87:0b:5f:57:30:cf:41:24:f3:2f:84:
                    5f:82:e7:4b:17:a3:e9:07:b2:cd:1c:fb:05:0e:89:
                    10:d3:44:87:b1:6d:6d:38:e0:c8:ea:25:ec:cc:4e:
                    0c:73:10:b7:a3:57:f9:07:ab:d9:29:bf:b3:c3:9d:
                    ef:01:fe:fc:93:67:b3:a6:ae:0e:81:1e:c9:f3:7d:
                    d0:2a:c2:3d:b0:3c:43:da:d1:1f:33:b3:cd:32:ce:
                    ac:3d:05:ca:1f:a0:dc:e1:d4:57:8e:fb:a6:92:8b:
                    1c:1f:36:98:8c:8e:35:ef:a0:15:45:73:bd:4d:5b:
                    69:41:db:20:46:b8:f3:ab:51:27:e6:29:01:fb:d1:
                    ae:32:6c:fc:03:0a:60:32:03:fd:56:90:73:61:0c:
                    39:23:7b:92:28:9e:ec:22:75:f7:da:04:c3:1b:b6:
                    85:86:2c:1f:52:8a:d5:82:32:25:44:5e:86:7b:e4:
                    f1:0c:70:64:08:1f:c7:4f:a8:c8:b5:74:b7:e8:dd:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:75:34:43:A7:E9:D8:49:8C:4C:6C:B8:9A:DF:45:5D:E5:2C:F2:29
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:52:f4:2d:4e:f0:7a:f3:a2:24:df:22:16:4c:d3:2e:e9:c7:
         89:c9:96:e3:2b:3b:84:a0:c1:79:c4:e0:52:c2:54:44:cd:00:
         36:f5:df:bb:bb:9f:18:04:bc:f2:c2:fb:9c:a0:a5:65:ea:1b:
         08:26:a1:d0:cc:94:3b:c2:89:bb:94:74:ca:99:dc:d5:a1:99:
         50:ae:15:11:2f:21:c0:81:9d:5d:e9:34:18:2f:0c:ba:54:1f:
         dc:d3:f1:d2:1b:6f:0a:09:a9:df:c1:34:33:e4:d0:1f:d4:45:
         d3:7e:02:21:1d:67:b8:e1:5a:5e:be:11:7b:c8:04:c8:18:5c:
         61:bb:2c:5b:70:72:18:60:12:d0:6c:58:57:97:d5:17:56:87:
         3a:0f:83:8b:c0:1e:38:63:cb:ae:16:ac:1a:59:47:e0:59:84:
         0e:ca:aa:f3:ea:e8:8d:ec:9a:3d:49:42:e2:ba:aa:f6:9a:75:
         9a:5a:ca:4f:00:fa:b7:2b:8e:c6:13:ed:18:e3:19:c5:40:7d:
         6b:e1:68:c6:08:ca:29:e0:b9:52:c8:25:08:16:14:41:f9:a7:
         af:db:12:6c:96:90:b7:82:d8:d6:85:0a:1b:70:f9:44:6a:8d:
         47:7b:04:00:30:ea:bd:5d:64:6f:ba:8a:b4:73:ae:ce:e3:b1:
         d3:70:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 09:33:04 2024 by rpki-client on console-ams.rpki-client.org