Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File:                     SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier:          st9S4mrQdSSyHzz0NltW+eJMyCChzsVYcPSpUxQNpAQ=
Subject key identifier:   5F:10:8C:30:2E:A5:22:B3:66:CE:81:4B:C9:DA:DC:1B:7F:56:36:B1
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer:       /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial:       01906B29CC3AD691B7661EE8166ED6EC11A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number:          11EF
Signing time:             Sun 30 Jun 2024 22:00:19 +0000
Manifest this update:     Sun 30 Jun 2024 22:00:19 +0000
Manifest next update:     Mon 01 Jul 2024 22:00:19 +0000
Files and hashes:         1: 7G7P5tUIQlh_pUaER1GOX1p0vYo.roa (hash: v2YLuMts4v/hp2oKBhGF444o8f6PSGazceCz7PJcdkw=)
                          2: OQRcfzOP1c5BKCV75NGf-zc0JG0.roa (hash: jqSWQr5hS+p16E6WMEFV1CsRjiW4PUHXys4rBr326Vw=)
                          3: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: LGRTzp2iHpjOhAeWuHrZb6L3a0YNEGydg+e/8tdMegY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 22:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:29:cc:3a:d6:91:b7:66:1e:e8:16:6e:d6:ec:11:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
        Validity
            Not Before: Jun 30 22:00:19 2024 GMT
            Not After : Jul  1 22:00:19 2024 GMT
        Subject: CN=5f108c302ea522b366ce814bc9dadc1b7f5636b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:b8:bc:c2:7e:f0:ea:5d:55:62:7c:d9:db:
                    67:e2:49:ce:f8:68:01:21:35:9b:9e:99:46:52:a7:
                    39:3e:b9:98:66:27:ca:42:8e:c9:0a:78:d0:e7:ad:
                    47:be:aa:e3:38:f2:e6:63:12:f9:97:6c:8f:3f:43:
                    c6:e3:d2:a3:79:38:ac:72:3b:ef:bd:25:bd:85:64:
                    4f:08:b7:7f:76:fe:ba:dd:07:a2:f7:f2:a5:fb:70:
                    37:29:8b:70:f6:5c:ea:4a:d9:ad:88:d1:eb:78:05:
                    2c:a4:a9:42:b9:cb:03:e5:e1:e9:3e:83:df:ba:ae:
                    41:2a:c8:be:c6:ff:c5:f6:59:89:e3:67:75:5c:8c:
                    d4:7d:bf:d1:9a:0d:f9:fd:c1:d4:96:5f:e8:26:e1:
                    f1:87:ef:76:75:c2:d8:42:a3:02:76:ac:7f:55:42:
                    bb:aa:79:f7:91:c7:78:2e:f3:61:d9:e5:c4:f9:2d:
                    3e:97:65:7a:38:84:5a:cd:ea:1b:3a:d7:f2:c0:4a:
                    03:c6:b2:2c:cd:f0:36:0f:06:f8:98:8a:c8:95:57:
                    34:d5:1e:06:41:46:04:27:45:dd:1c:7b:16:91:bd:
                    b8:3d:d4:38:fd:25:90:e6:76:a4:e4:ce:ae:76:1c:
                    f6:50:62:8a:3d:a4:45:50:c0:29:3a:45:96:44:98:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:10:8C:30:2E:A5:22:B3:66:CE:81:4B:C9:DA:DC:1B:7F:56:36:B1
            X509v3 Authority Key Identifier:
                keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:b5:2e:7f:59:fa:15:65:cf:41:ab:4d:ab:d3:99:ec:e9:3c:
         9c:c0:0c:2e:e8:62:9f:ae:ba:32:c7:fb:be:33:6c:bf:95:06:
         e1:cd:7f:54:f6:5a:8a:31:f3:ae:95:98:c8:66:a2:bc:52:17:
         de:6c:74:b0:54:a9:8c:3c:8a:d2:37:ba:cc:3c:55:7f:74:03:
         85:25:ae:24:97:7c:4d:ee:a8:6e:ac:e0:3e:e9:8c:c1:46:1c:
         0c:c1:49:04:f8:ab:a9:d7:be:20:4d:cb:56:0b:c7:5a:d1:06:
         16:12:e1:14:b3:55:54:0d:1c:1b:66:da:2f:3d:6a:4d:65:55:
         dd:6f:51:f0:29:e8:9a:29:46:96:06:82:6f:28:e7:3b:0c:81:
         af:57:95:e0:6c:2a:41:6e:4f:18:dc:c8:15:ad:64:c3:71:a0:
         ba:b1:3f:9a:0d:97:f8:85:a7:20:b1:dd:b0:0f:d9:8c:88:ca:
         20:42:fa:52:e7:dd:a1:fc:c3:31:ba:6a:44:ee:a8:12:8a:ba:
         db:6d:13:d3:a2:66:77:66:0a:c8:ff:4f:52:9b:fb:99:fd:4d:
         ae:e9:4f:5e:74:e3:f0:13:32:af:ce:f0:b6:16:e8:cd:61:f5:
         1c:93:44:38:6f:99:24:ef:09:ac:2c:c1:7a:fe:cb:9e:b3:fa:
         f8:30:64:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:54:24 2024 by rpki-client on console-fra.rpki-client.org