Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File:                     CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier:          UnLTSTCN4PHOMjD0Ly8SzxSCsCz91zDLurZfONybgj8=
Subject key identifier:   99:8B:EF:00:A6:47:EB:79:79:35:2C:72:3B:89:70:D8:9F:01:8F:25
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer:       /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial:       01901E58F996E198A50B4C2E671861B402DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number:          0D08
Signing time:             Sun 16 Jun 2024 00:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:05 +0000
Files and hashes:         1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: kqqavCnG7r/f6wwHoffIrxmQFILmy3uzTe/frpuYS+E=)
                          2: b0P5CX4bGy7eskWLB0Wy0wp7yZU.roa (hash: JJCStBdPAOZM9cRkK3ShwxPKN9CUxJTbQTAHmBvAH/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:f9:96:e1:98:a5:0b:4c:2e:67:18:61:b4:02:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
        Validity
            Not Before: Jun 16 00:01:05 2024 GMT
            Not After : Jun 17 00:01:05 2024 GMT
        Subject: CN=998bef00a647eb7979352c723b8970d89f018f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:da:5e:62:14:44:f7:45:ea:26:f5:61:a6:
                    a2:b6:4b:18:ad:3b:d6:df:24:a7:a8:0a:b5:0f:38:
                    02:56:21:21:15:5e:d1:2a:04:fa:bf:9a:d1:32:78:
                    2c:5a:47:51:50:36:e0:02:ad:31:59:ad:35:ff:a6:
                    63:98:38:c4:87:dd:01:98:69:b6:b6:4a:f7:8a:35:
                    83:50:dc:75:b2:58:96:75:f6:41:02:8e:98:19:89:
                    50:9c:d5:15:8a:8e:76:56:01:7e:f4:85:57:cc:80:
                    aa:86:54:2a:e1:4a:21:36:c9:6f:e5:b8:c7:f3:3b:
                    db:53:a8:c8:9a:68:5f:a4:f2:57:e4:d3:10:96:11:
                    65:b3:65:69:23:14:fd:be:d5:3f:93:0d:89:f2:87:
                    0b:90:a2:b9:80:2f:e7:3a:03:76:b2:e4:51:1c:a8:
                    32:24:f6:c2:cc:0b:bd:50:88:be:5d:c9:9c:59:bb:
                    3e:e0:8b:7e:30:68:9d:f5:42:a0:e5:4c:6f:51:73:
                    e3:98:f3:a3:05:b1:de:0f:ac:ec:1b:b6:1b:11:b9:
                    e7:d5:40:20:f0:7d:59:07:57:c1:83:b5:02:e9:b4:
                    72:e4:b7:6f:a1:fc:53:ce:78:2d:48:6d:aa:18:45:
                    61:c9:2d:0e:8a:a0:fe:69:e4:2c:72:1d:fd:86:4f:
                    72:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8B:EF:00:A6:47:EB:79:79:35:2C:72:3B:89:70:D8:9F:01:8F:25
            X509v3 Authority Key Identifier:
                keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:55:4e:80:0c:8d:32:eb:69:e2:ae:fc:ce:75:dc:7c:cf:b8:
         13:61:c6:98:31:38:d3:6f:ad:46:9d:00:b5:5d:cd:f1:6e:b1:
         6f:60:5b:72:9d:27:de:77:44:73:ef:ee:e9:3e:c7:21:f0:93:
         56:b4:4d:55:46:25:5d:d1:fe:f2:bc:99:82:9c:93:c4:d0:ff:
         54:13:e2:5c:ea:80:26:d4:e8:2a:b6:4e:f7:b7:e2:9b:8c:6d:
         6d:7b:78:fc:da:95:89:c0:f3:51:ca:eb:b6:37:00:31:f7:11:
         6b:7b:74:6f:77:a7:1e:61:3b:6b:6c:1e:95:e8:e1:65:34:a4:
         bd:7a:dd:e9:f4:ea:59:e2:7d:fc:a1:e9:72:c0:c2:5e:06:fc:
         af:a5:35:d9:dd:2f:8e:1b:9a:96:9d:a6:bb:62:3d:74:25:55:
         81:57:c9:7d:d5:f0:f1:34:f6:72:4d:be:57:b3:c5:97:78:0c:
         23:99:a8:c9:b3:19:ed:52:e9:43:31:6f:ea:df:66:ae:63:22:
         21:11:17:d3:6d:73:36:b0:b3:9b:de:20:ac:50:c1:2a:49:94:
         de:e8:1f:4d:3c:89:e8:65:9c:e3:e0:2d:3d:8c:d2:f9:f5:a4:
         7d:32:db:89:ea:14:84:c2:7e:83:ab:a8:6e:bc:aa:a7:f5:ac:
         0b:23:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:33:59 2024 by rpki-client on console-ams.rpki-client.org