Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
File:                     fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json)
Hash identifier:          DnQ/PEoBI/LHC7xES6pTSErJfOsbgieJScRsnwDpOUE=
Subject key identifier:   5D:5E:FE:0F:61:9A:81:FA:8E:23:9D:82:BA:69:A1:1B:4C:F2:7D:B2
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       01902981B5040218FB9EB9312D475E82E723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
Manifest number:          11DC
Signing time:             Tue 18 Jun 2024 04:01:24 +0000
Manifest this update:     Tue 18 Jun 2024 04:01:24 +0000
Manifest next update:     Wed 19 Jun 2024 04:01:24 +0000
Files and hashes:         1: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: U05lJaEgWQTXJV3jQtnzPW9L39c4nJLrl8ogoVegNfw=)
                          2: koxE91jDUcH11HZ4rUTPe6WGQTo.roa (hash: k+HvecOxbIMr1GsaAz2iC57/oVdKrwOFd+2hsRiTGwk=)
                          3: oD8kAv-o9eVYnjLoAgToxJe2TsQ.roa (hash: yK7g4aIRWN50zLSMYmkQgW8H2aDP/DPqJCRjD8imXow=)
                          4: ooP2O7l31QcvvXQ1EZx2rBY2Xq0.roa (hash: xzTk8sfshR/jSKHNjT1GDf2Y6ubQX/t+O20drLotzsQ=)
                          5: zB8vLgonXw95iTubUaenQT57vEQ.roa (hash: 6BoMbGr4x1XE+8eQVgNL0m+orvTIxzF8h4oCjHG3qY4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:81:b5:04:02:18:fb:9e:b9:31:2d:47:5e:82:e7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Jun 18 04:01:24 2024 GMT
            Not After : Jun 19 04:01:24 2024 GMT
        Subject: CN=5d5efe0f619a81fa8e239d82ba69a11b4cf27db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f7:35:24:41:08:b5:0b:5c:70:6e:e1:01:93:
                    60:ce:a9:14:83:c5:89:98:c8:ca:e4:af:c4:56:7d:
                    c1:ec:48:ce:a5:d8:f4:ef:72:6b:bd:c4:c4:8a:91:
                    53:32:ca:c6:7e:3a:6a:82:32:9e:15:ac:03:bf:ed:
                    02:90:71:ab:80:e9:f9:0e:c5:13:34:c9:20:d6:b7:
                    43:39:22:01:61:fc:23:28:04:91:ba:b0:9a:c9:44:
                    ca:1d:4c:0d:b3:56:6d:50:3d:91:69:88:70:03:05:
                    21:59:84:0d:41:57:2a:9e:43:cd:31:99:3f:69:95:
                    21:26:b7:9c:a8:47:dd:41:02:d6:f3:a3:da:12:18:
                    5b:66:3f:36:bf:6b:30:55:5c:fa:3d:94:64:36:42:
                    51:8d:58:8c:70:43:17:98:23:d7:eb:e2:98:71:e8:
                    e0:ae:d6:bf:a2:f1:47:40:98:55:b3:e1:bf:11:46:
                    91:c2:37:8d:cf:94:27:4e:ee:be:64:89:f9:00:c0:
                    af:5d:c4:00:29:55:c7:9c:4a:af:47:4f:cd:bb:7c:
                    08:91:58:1a:fb:f2:b6:88:36:4d:59:9d:89:47:0c:
                    82:6b:d2:11:ff:83:a1:8f:f0:2e:fa:08:45:28:1f:
                    86:a9:61:57:cb:71:18:88:38:a4:33:03:c0:cc:cb:
                    80:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5E:FE:0F:61:9A:81:FA:8E:23:9D:82:BA:69:A1:1B:4C:F2:7D:B2
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b6:4b:b8:8f:dd:f9:5c:0e:03:b8:7e:bb:bd:4f:af:35:9c:
         23:51:4e:49:9f:79:68:f1:94:6d:7d:ba:a3:75:a8:83:ce:44:
         64:aa:b2:0c:d2:fb:0e:13:87:03:4b:a9:8f:11:27:dd:bf:2e:
         c4:0b:d9:c1:a5:b6:e1:78:ad:77:b5:c0:58:c4:ba:20:b3:c3:
         04:6b:fb:a4:fe:9b:bc:42:86:2a:0d:33:2c:8b:5c:7f:4a:24:
         4b:d0:ec:23:ca:23:e9:8c:46:96:05:eb:b2:45:82:52:89:eb:
         4b:c5:d4:48:c0:8c:1e:f1:5c:92:97:00:3b:4f:8b:ec:ab:83:
         ac:13:6c:24:b1:93:ac:0f:2b:8c:2b:1f:69:d5:8a:f2:c9:1d:
         52:95:f6:02:2b:c8:89:90:20:22:50:cd:c7:27:a5:80:cc:cb:
         87:95:bf:4a:b5:eb:8c:a9:72:b0:ec:6b:3f:08:87:d3:5f:84:
         66:fb:b0:e4:d2:1a:1a:4e:4e:65:f1:e2:93:8a:8b:ee:97:c8:
         8a:e6:dc:eb:6a:2b:0e:60:95:39:32:b4:fc:68:8f:39:2a:8a:
         fa:13:30:2a:36:44:6f:80:7b:d1:63:a8:80:42:17:5c:b5:3b:
         0b:dd:15:fb:75:a9:7f:04:58:f0:62:5c:f8:d8:63:51:6a:8e:
         47:39:6f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:55:30 2024 by rpki-client on console-fra.rpki-client.org