Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.mft
File:                     CCpuN38ciFptc_P1af0G1-pMekU.mft (raw, json)
Hash identifier:          R0wi3CcgyDvRhg+Dfm0TqGyeaf6lq6GwSBG0VMTnIMs=
Subject key identifier:   78:21:90:47:EA:F6:C9:47:55:16:61:09:3F:02:CB:11:BC:C7:98:19
Authority key identifier: 08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
Certificate issuer:       /CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Certificate serial:       01906370B92A0BA22D3999F43716235A01D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.mft
Manifest number:          11E9
Signing time:             Sat 29 Jun 2024 10:00:50 +0000
Manifest this update:     Sat 29 Jun 2024 10:00:50 +0000
Manifest next update:     Sun 30 Jun 2024 10:00:50 +0000
Files and hashes:         1: CCpuN38ciFptc_P1af0G1-pMekU.crl (hash: x/N6ykmicndlRqpUmwqUgFLTOb35IN739R08X0nH0Bo=)
                          2: bHNmbDFHUX9LljKOHRhQtJ-TJ5Q.roa (hash: cll3XTW1O0hPqO3XsvqV14fZqz8MJG4jFtcdNy16qZI=)
                          3: i_OwqYQ4eJ_T1-ssG4RT_t_anP0.roa (hash: aRwaMYnNlZwAcLQFAIsvUz9uQRQlE2ljvhAQOABALJI=)
                          4: uunAflW33Bdh7QAwWUnCtkSY9Zk.roa (hash: AYwm6foQcCedRY8TqLm6YjHohdg9d+qCvDemDsibofk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:63:70:b9:2a:0b:a2:2d:39:99:f4:37:16:23:5a:01:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
        Validity
            Not Before: Jun 29 10:00:50 2024 GMT
            Not After : Jun 30 10:00:50 2024 GMT
        Subject: CN=78219047eaf6c947551661093f02cb11bcc79819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1a:53:96:bf:be:38:cc:4b:56:5e:62:58:f9:
                    cf:9c:34:b7:05:d4:29:20:7d:a7:04:37:7d:f4:db:
                    c9:3d:6b:f4:50:6b:ed:ab:29:07:ab:0f:4c:6f:d0:
                    dc:45:c3:6d:e1:85:6f:7b:da:ab:76:a9:54:fd:a4:
                    ac:e9:40:00:d6:18:b9:b2:36:ee:b1:e8:70:97:45:
                    65:db:ed:d7:1e:98:00:ad:a0:23:d9:b9:09:1d:93:
                    9b:a6:2c:13:ae:68:98:ea:4c:0d:4a:8d:00:f6:6f:
                    77:ee:90:a9:fd:00:93:91:d6:2a:02:c0:5d:67:71:
                    52:b8:51:92:b3:ef:bb:16:55:74:33:96:2f:c1:1a:
                    fb:b5:d4:d7:06:d7:db:54:69:8a:99:00:4d:c1:ad:
                    8f:29:4c:a8:0e:35:2d:9f:b5:dc:7a:69:9d:47:cd:
                    f9:fb:a9:68:40:b8:ed:17:86:fc:d2:6c:59:ef:f8:
                    62:72:ad:39:66:03:e8:18:c0:c0:c3:cb:64:f1:21:
                    48:a5:64:bd:ac:da:2c:37:f9:3c:55:26:f7:e9:91:
                    f4:06:78:fa:eb:a6:b7:96:df:80:aa:c9:fb:35:53:
                    e8:41:8e:15:5e:bf:33:44:aa:a1:07:e0:2f:83:d0:
                    02:95:31:e4:ce:cf:69:18:bf:67:64:61:1d:7d:6f:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:21:90:47:EA:F6:C9:47:55:16:61:09:3F:02:CB:11:BC:C7:98:19
            X509v3 Authority Key Identifier:
                keyid:08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:aa:f3:d0:50:14:f6:4e:79:9f:a6:76:94:51:30:16:55:36:
         1f:b7:0f:34:26:4d:bb:32:65:bc:36:03:fe:11:0e:8b:31:81:
         73:87:f3:6a:f4:00:0c:40:ce:96:e9:41:1f:fe:82:f5:b1:30:
         68:f4:1e:e8:74:1b:74:e6:3f:c6:6b:bc:45:5d:ae:32:e2:26:
         c8:ab:8a:39:96:d5:8e:cf:ec:43:4a:81:50:6e:54:33:94:49:
         0d:86:ee:06:e6:40:13:29:72:d6:2e:09:73:58:b2:63:76:cf:
         66:ca:2a:e2:dd:43:ab:aa:34:d1:32:0f:45:de:1b:b3:78:5b:
         74:e5:96:04:e3:8a:10:f6:4c:e8:02:57:4c:a3:29:93:f7:82:
         85:10:7d:52:a6:f0:0f:b7:f3:b3:22:d2:95:07:b7:c5:cc:c2:
         af:47:4f:9d:c2:69:5a:32:39:73:fc:55:31:d9:1b:26:5c:a8:
         9a:0a:85:95:72:cc:b8:1c:08:66:62:97:73:31:92:14:44:28:
         18:fb:cf:f4:4c:1b:e3:9c:01:6c:0f:f3:86:19:e9:55:7d:c8:
         a0:25:62:80:f1:0d:a1:fa:7c:f0:ec:04:55:eb:89:4b:a4:c6:
         fc:3c:59:85:dc:f1:ab:51:a7:2c:00:c0:38:aa:da:02:82:74:
         57:2e:77:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 11:40:09 2024 by rpki-client on console-fra.rpki-client.org