Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
File:                     x8_M1olXoPcEOajWD_PIuNkRowg.mft (raw, json)
Hash identifier:          tEfZBDVs2WHrzQ0CAIvLk3FEMLucAo4xoLeBhhVcNn8=
Subject key identifier:   AA:9E:AA:89:80:05:98:1D:74:62:AD:60:94:0C:84:49:5F:2B:BA:42
Authority key identifier: C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
Certificate issuer:       /CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
Certificate serial:       01904152E9DED38CC64DD2BF9E77393CC72B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
Manifest number:          095A
Signing time:             Sat 22 Jun 2024 19:01:11 +0000
Manifest this update:     Sat 22 Jun 2024 19:01:11 +0000
Manifest next update:     Sun 23 Jun 2024 19:01:11 +0000
Files and hashes:         1: Auz_YhnD-jko2BzJWfDsS5d1580.roa (hash: CJEKXWvNDahrWIQuEoQapdbVEv+D1nJghdompHDTyhQ=)
                          2: x8_M1olXoPcEOajWD_PIuNkRowg.crl (hash: pEi1GFYJcnJtDum+eU+Tg2lSlb6O/2Df0AAHZFER1KY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:e9:de:d3:8c:c6:4d:d2:bf:9e:77:39:3c:c7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
        Validity
            Not Before: Jun 22 19:01:11 2024 GMT
            Not After : Jun 23 19:01:11 2024 GMT
        Subject: CN=aa9eaa898005981d7462ad60940c84495f2bba42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:74:f8:3c:28:3a:61:1d:13:97:3e:58:e8:ec:
                    5e:17:c1:a2:b9:e4:c1:db:d3:8f:af:bd:01:23:f6:
                    9f:ef:7a:54:4b:c7:73:82:ff:c6:d3:4e:7b:56:96:
                    7e:a1:52:b7:6a:99:d3:ab:f3:cb:8d:58:3b:0d:36:
                    41:92:d3:4b:a6:d8:99:ab:4a:a4:3d:a9:8b:42:40:
                    9e:63:a5:6b:1e:58:3f:b5:ba:0d:a5:b5:60:24:83:
                    6b:a5:9a:aa:f4:05:a7:ad:f5:49:74:5c:b9:73:3b:
                    eb:b3:9d:d2:35:24:c8:5a:72:8e:35:36:e9:21:c9:
                    18:35:30:fc:32:e0:fb:43:75:16:b9:50:76:8e:e4:
                    7d:6b:dc:89:6c:b4:e5:43:7b:72:a1:13:ec:6c:7d:
                    56:94:c9:47:4b:49:64:74:3a:6a:39:d5:a9:35:38:
                    75:2d:9b:a5:24:bd:36:63:03:f6:21:ec:80:2a:46:
                    a6:8c:82:93:a6:1d:ab:0b:f2:12:f5:30:48:ab:33:
                    4c:61:ce:ac:53:b4:f4:b5:7a:35:6a:f3:3d:5a:57:
                    e5:24:5d:6a:d6:09:0d:be:75:f8:23:cf:ac:d7:7e:
                    ec:8e:14:29:50:fb:7c:db:2c:d3:01:c3:ef:ba:1d:
                    56:9f:6b:3d:19:32:62:f4:4c:a5:68:19:4f:df:c2:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9E:AA:89:80:05:98:1D:74:62:AD:60:94:0C:84:49:5F:2B:BA:42
            X509v3 Authority Key Identifier:
                keyid:C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bb:c7:b9:ac:d9:af:94:1e:0a:d1:2a:6d:12:7d:b1:70:51:
         f2:51:a0:17:8c:bf:a1:02:2d:bb:a1:72:49:94:3a:61:22:00:
         f0:d5:57:7a:61:a7:8a:2d:63:a7:62:29:d2:44:0c:0c:88:20:
         12:35:ea:0f:4a:01:c1:6f:ce:39:a2:89:1a:f6:94:31:ac:9e:
         c9:4b:3d:cd:50:5b:e7:c1:69:af:72:14:e8:0d:fb:f3:43:97:
         b0:72:de:5c:21:4a:1a:ee:aa:1c:e4:43:f2:d2:dd:76:65:0e:
         c7:d0:24:40:64:1b:fc:eb:10:5f:6c:23:bb:08:35:93:f1:78:
         7c:80:7e:10:b0:d7:77:5d:e8:0b:13:dd:c2:b1:99:07:a8:82:
         01:c5:ff:56:b2:32:e1:4d:a8:cd:a2:45:41:ef:a8:30:c3:3a:
         71:2e:40:69:c8:2a:e2:e5:00:67:32:74:f7:7c:d3:8f:7b:c0:
         15:d2:32:df:57:24:f4:11:fa:00:ee:c7:91:3a:5b:54:6b:af:
         59:d4:2d:95:3c:53:c4:8f:b4:7f:ae:54:59:a9:32:ba:7d:68:
         40:c0:6b:c4:c5:17:19:67:5d:3e:af:da:07:bc:0d:ca:39:83:
         5a:f7:95:6c:79:9b:69:f1:85:bc:9c:df:c9:33:98:16:e9:fd:
         39:59:ec:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:48:42 2024 by rpki-client on console-fra.rpki-client.org