Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File:                     DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier:          bfcG9hmBb6opvvuOqlXi5DodUfZDVadPjW3TlGn8dqA=
Subject key identifier:   BC:21:06:55:E1:A4:7F:FF:55:27:02:A8:D5:7C:55:FB:15:38:3E:72
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer:       /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial:       019060DDC7DE16A0C4B74B884190B5B461CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number:          11EA
Signing time:             Fri 28 Jun 2024 22:01:05 +0000
Manifest this update:     Fri 28 Jun 2024 22:01:05 +0000
Manifest next update:     Sat 29 Jun 2024 22:01:05 +0000
Files and hashes:         1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: DAb9o9TCxeqbGkurQua1qkjYWAqneJWB9ny0xfvCm/4=)
                          2: gQ21BzSnQKazXeYKK_Q8ASXjzB0.roa (hash: TvCWyuWF1iDbwL3asmYv8xUW/MZAMSJyyhz12ksPQMw=)
                          3: m-acSG5gAAzRw30MYkCovoY8mKs.roa (hash: fGhiK6SumqrNQdofqP7NOnoKujEyxUk4Ho6hUUFX7Yw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:60:dd:c7:de:16:a0:c4:b7:4b:88:41:90:b5:b4:61:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
        Validity
            Not Before: Jun 28 22:01:05 2024 GMT
            Not After : Jun 29 22:01:05 2024 GMT
        Subject: CN=bc210655e1a47fff552702a8d57c55fb15383e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:d8:85:a8:18:b9:f6:99:fb:f9:f9:f6:4d:
                    d3:1d:69:bc:e4:a7:90:81:77:82:16:b3:39:ce:25:
                    e9:21:34:64:8f:7a:54:dc:80:f8:92:94:18:be:a3:
                    e0:5e:50:3e:f7:27:ae:31:43:1f:04:3f:27:97:f7:
                    c5:12:4e:f0:79:db:dc:8d:8b:1b:e9:d9:dd:50:b3:
                    48:ee:df:dd:1f:86:ae:04:d6:a7:ae:c7:29:35:9b:
                    16:de:8f:ee:bd:d3:5e:92:b8:8d:71:ee:48:f4:35:
                    d3:ca:22:a7:7c:22:01:1b:98:c4:9c:91:89:08:f1:
                    ca:c2:3a:7a:23:f4:1c:df:2d:dc:0e:8f:32:e0:d5:
                    da:c4:85:37:da:6b:fa:16:bc:11:a3:38:a5:e2:5e:
                    ea:0d:de:0e:86:08:32:ce:6c:a8:fe:9a:89:64:28:
                    63:cd:cb:a5:d0:7d:a3:25:33:27:7a:ba:5d:71:b2:
                    e7:57:54:b4:0b:b3:00:5e:04:ed:51:83:9e:20:6f:
                    ba:75:cb:fe:20:0f:77:c1:64:52:c1:bc:68:99:96:
                    d8:61:9d:8e:55:09:0f:0f:7a:d1:34:15:1d:c4:8d:
                    8c:f4:56:7f:a4:43:e5:d8:4a:db:53:5f:2f:0c:e0:
                    fc:58:29:61:21:86:a9:35:ad:9d:d9:a9:ca:54:e3:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:21:06:55:E1:A4:7F:FF:55:27:02:A8:D5:7C:55:FB:15:38:3E:72
            X509v3 Authority Key Identifier:
                keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:93:b5:dc:ce:dd:28:8d:ef:78:e2:a3:f3:45:62:b0:36:b2:
         74:f8:76:fd:83:b4:27:a2:44:41:0f:2a:58:c0:1f:4b:9f:c8:
         85:e5:a8:eb:73:64:12:3e:04:69:16:2c:fd:c5:ba:15:54:0e:
         3e:1e:7b:1f:9c:79:1a:73:cb:29:b6:d2:e7:61:37:1a:08:02:
         6f:19:1b:75:c1:e9:3e:1a:0e:0d:f5:00:b0:61:6b:51:70:8a:
         97:91:1b:1b:de:f1:1b:cd:18:45:a0:78:e9:dd:35:59:07:47:
         13:18:22:2a:b6:8e:17:df:c2:b6:3d:5d:3a:9a:e7:c0:9a:6d:
         4b:fe:66:cc:db:6f:49:fa:f6:2e:5a:58:bf:ce:39:73:60:80:
         04:83:4a:a0:8b:de:67:c7:00:d1:ee:87:22:58:a0:7f:0c:53:
         1b:9a:50:e6:4f:9d:bb:fb:18:66:dc:87:92:13:99:cc:aa:00:
         0f:61:08:dd:cb:a4:56:64:a6:b3:48:cb:78:b4:66:44:d9:b7:
         46:c4:07:b5:e6:55:0c:17:88:ac:50:f2:ac:02:0e:4d:73:0c:
         ce:d8:28:6c:89:5d:7b:0a:c5:3b:72:c5:52:73:7e:c8:7c:87:
         ac:fe:6f:28:37:2c:e2:82:4a:62:f1:e5:28:f7:34:e8:5e:cd:
         1b:46:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 05:27:35 2024 by rpki-client on console-fra.rpki-client.org