Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File:                     0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier:          xYCDNujdGin9zlE+1X+F6z6awh3N1vgbV0j7Df7gsNc=
Subject key identifier:   7D:03:84:60:B2:4B:A5:25:08:36:52:20:21:99:92:E4:4B:C1:17:29
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer:       /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial:       0190448B18C7E7C17C5277AD58D6D62DBB4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number:          098A
Signing time:             Sun 23 Jun 2024 10:01:24 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:24 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:24 +0000
Files and hashes:         1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: ug8GVcALh/AWY/mB2rDg//kQ2PO+o8xdfLgSbPp7Zoo=)
                          2: ciATZQc93HGhX5gAVAObQTJsAnQ.roa (hash: NYapWYDMa0zMTjlI8Uhxu/x5TjBEXleJzWxS2FLcbss=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:18:c7:e7:c1:7c:52:77:ad:58:d6:d6:2d:bb:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
        Validity
            Not Before: Jun 23 10:01:24 2024 GMT
            Not After : Jun 24 10:01:24 2024 GMT
        Subject: CN=7d038460b24ba52508365220219992e44bc11729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:05:ae:8a:f4:93:c3:46:22:9a:c6:f0:3d:
                    cb:35:fc:4c:4d:0b:9b:02:2f:61:11:17:aa:82:84:
                    66:97:98:07:77:c6:29:07:dd:99:f7:f5:f9:cc:d1:
                    cc:db:d1:e4:1c:84:f4:1e:bf:e8:d9:e3:fb:a9:91:
                    6b:f7:66:cb:26:31:58:bd:36:b7:d1:41:af:88:88:
                    5d:d0:44:45:2a:a8:2c:bb:49:bd:65:5a:79:0d:16:
                    ef:6f:ae:e9:05:60:72:59:a8:86:4e:ec:0b:58:64:
                    21:48:5e:b8:b7:9d:3c:85:48:c5:f1:ec:50:39:c6:
                    0d:b4:c1:52:9d:0a:ed:98:84:14:56:64:17:ae:a8:
                    b5:46:e7:d7:92:3c:00:8a:fb:dd:98:a9:21:2d:e9:
                    48:58:64:f4:05:50:d3:ef:b2:af:dd:e5:83:a1:2b:
                    37:2f:a7:7c:90:54:f7:ab:30:fe:23:d0:54:3b:05:
                    67:a8:d9:d9:c5:92:06:9a:f0:38:18:61:67:cc:ef:
                    03:a0:18:9d:3f:b8:4a:23:a0:eb:e8:3e:a6:26:fc:
                    3a:21:bd:c3:e6:e3:a3:44:9e:d2:b7:9d:ea:b2:42:
                    97:75:a2:a6:14:2b:00:0d:9d:1c:4f:98:df:42:47:
                    90:87:1d:40:c3:62:5e:d9:3c:80:d0:ca:ef:cd:17:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:03:84:60:B2:4B:A5:25:08:36:52:20:21:99:92:E4:4B:C1:17:29
            X509v3 Authority Key Identifier:
                keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:81:7f:4a:f4:7f:8b:c5:a1:68:e2:c7:6e:96:56:bf:7e:
         e8:1c:dd:41:c0:24:e7:db:92:6f:79:65:8b:20:19:90:b6:c5:
         07:d7:ee:e7:d0:11:8d:52:65:7b:27:e8:13:32:22:96:a6:58:
         37:1a:41:a2:9a:76:fe:83:11:94:98:91:6c:59:ce:96:62:f9:
         ee:fb:e9:5a:10:09:fc:83:64:43:34:60:a7:f2:2d:34:25:92:
         ea:d3:95:4e:18:4b:8a:6c:ef:cf:ac:88:b6:7e:f7:6c:f0:6b:
         08:2d:03:f6:7f:e4:bb:e9:51:f4:df:88:ff:cb:f4:9a:9d:3f:
         52:28:88:7e:21:7d:97:b2:20:d2:89:9e:f5:4d:9b:f4:b6:27:
         cf:8e:c1:1c:54:9c:ec:06:ea:0b:ec:39:2e:e4:3f:a5:8e:53:
         61:27:3e:57:06:02:09:61:80:11:24:c8:1c:56:47:32:6d:b7:
         48:d2:86:15:80:7a:26:86:cd:d9:c7:5e:2e:09:82:9f:f7:97:
         10:23:8b:09:7a:4c:28:bc:e3:6c:2c:7d:10:c3:01:62:05:45:
         23:4b:45:9e:be:ee:90:ea:0b:be:57:56:13:f6:4a:ee:d1:ad:
         dd:f2:07:76:16:71:ed:1f:40:f3:18:da:8d:bc:a3:c7:a1:f4:
         dc:6a:40:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:41:53 2024 by rpki-client on console-ams.rpki-client.org