Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File:                     mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier:          dd+keG02BwQCAzzJLjEgQC3JPzO6bWTsrUJHySlTXsM=
Subject key identifier:   C6:E2:F2:3B:2B:8D:91:B8:9F:72:96:44:BF:2A:20:20:1D:32:06:97
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer:       /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial:       0192102CA18AD57E81E8A0E3EB93CFCF63FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number:          0690
Signing time:             Fri 20 Sep 2024 16:03:33 +0000
Manifest this update:     Fri 20 Sep 2024 16:03:33 +0000
Manifest next update:     Sat 21 Sep 2024 16:03:33 +0000
Files and hashes:         1: 38nNkqNYK-t7stFNxJJAAEkR6YA.roa (hash: vYEIntnFdV4BSg2pcHvCI8qV4AMtOoSz8+Iv+C6hcm4=)
                          2: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: 4AvExC3jxrg71bIpfw5G/w2eAXwTnx3k/Hhku/AfQ8g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:10:2c:a1:8a:d5:7e:81:e8:a0:e3:eb:93:cf:cf:63:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
        Validity
            Not Before: Sep 20 16:03:33 2024 GMT
            Not After : Sep 21 16:03:33 2024 GMT
        Subject: CN=c6e2f23b2b8d91b89f729644bf2a20201d320697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:92:7f:1a:dc:2a:5f:b0:78:d7:25:dd:32:
                    0e:3f:28:e1:5a:ec:b3:42:f9:38:c1:14:11:9d:3c:
                    ab:d1:3a:e9:44:71:1f:d6:80:c3:5b:b8:6f:82:8f:
                    c9:f2:cb:74:81:de:c2:1b:e6:b6:21:d7:b1:13:81:
                    e7:5f:9c:6b:8f:5f:44:94:28:79:c0:d6:99:1d:51:
                    74:05:08:2f:06:78:47:89:78:27:a7:6d:71:6b:9d:
                    58:e1:7c:31:17:21:7f:f4:22:43:33:2d:84:92:4b:
                    e2:65:75:fb:04:44:e7:ff:e4:fe:46:54:fb:ae:19:
                    78:ea:18:5f:1d:21:4a:dc:29:ee:07:a6:7a:7a:da:
                    9f:0a:a6:cf:ea:7b:e8:bc:2a:6f:73:4f:94:a9:78:
                    4d:e6:23:ba:6c:72:01:4d:70:3e:7e:4e:0c:dd:0c:
                    58:25:27:c8:b0:34:8d:54:08:08:ec:d2:69:e8:7e:
                    02:88:78:40:66:60:03:cf:1c:cc:3a:f4:69:f6:03:
                    e0:15:de:5a:f4:7e:29:76:19:31:4e:3b:00:09:9b:
                    b0:d3:75:d8:4b:0c:5a:2b:f4:1b:f6:df:5d:9b:55:
                    6d:dc:9b:30:31:a4:b0:83:0f:f9:e6:ad:03:22:49:
                    15:d6:74:79:f7:29:b0:bc:53:61:36:20:2b:1f:d5:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E2:F2:3B:2B:8D:91:B8:9F:72:96:44:BF:2A:20:20:1D:32:06:97
            X509v3 Authority Key Identifier:
                keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:78:f1:4c:a4:9f:0c:03:7b:1f:82:2d:3b:a0:6d:bc:de:
         cc:a9:f5:61:db:11:8f:9a:b7:89:66:ce:28:72:1a:88:bb:30:
         3c:a2:77:16:13:71:37:00:ba:23:28:d1:61:47:b3:04:a2:2b:
         8e:99:ff:21:8e:a8:e1:50:49:a8:4f:9d:5c:6d:d6:2b:13:15:
         58:c7:91:e6:61:bb:e2:9e:96:4e:fd:0f:97:40:60:47:39:85:
         41:f9:58:4e:6c:0e:fc:6c:6b:85:a2:e4:5e:ee:1f:45:27:46:
         62:6e:81:a0:db:0a:70:bb:c5:ef:8c:b7:07:e2:b3:80:b6:11:
         66:51:99:7f:a9:e1:ef:f1:28:e4:a0:ce:6e:c3:07:f5:2b:58:
         11:6a:b0:7d:9d:5e:9a:2a:79:85:3f:70:4d:06:a7:4b:e7:19:
         95:8c:5d:bb:f0:5d:b5:a7:ab:db:09:a7:78:fc:52:30:f6:2d:
         20:f5:06:a8:84:e8:0d:7b:87:a2:8b:12:ae:7e:10:98:ca:de:
         4e:ee:48:d6:c7:81:f6:91:fc:7c:48:8e:fe:71:68:5d:4f:90:
         69:94:97:e8:98:19:f9:74:77:59:3c:9f:70:80:3f:a9:07:1b:
         09:c2:0c:1a:46:17:7d:8c:d6:fe:b9:04:5e:0a:9b:4b:31:33:
         e5:07:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:17:13 2024 by rpki-client on console-fra.rpki-client.org