Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File:                     sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier:          GlYrYxTtCaqvSxmo0qjeUqvk+z3MVr0X5j1ohs7Yk/4=
Subject key identifier:   8B:5D:51:89:2A:70:DA:90:AA:49:68:FA:53:E2:4B:84:9B:F5:F2:D6
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer:       /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial:       01901EFDA1A582B510EC3DEC109798B15184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number:          1159
Signing time:             Sun 16 Jun 2024 03:00:56 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:56 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:56 +0000
Files and hashes:         1: YXm5y-WOgIFgpIBoOkw5Gb-LiE4.roa (hash: KQh0AHwc0Xmc3z/+bh2TpMj4l+e4GV4oZo0Y4NqRYTk=)
                          2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: vUp/p6TubWkQmvTLhWN80zVuuSNZTRYNSxQpvgBCC/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:a1:a5:82:b5:10:ec:3d:ec:10:97:98:b1:51:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
        Validity
            Not Before: Jun 16 03:00:56 2024 GMT
            Not After : Jun 17 03:00:56 2024 GMT
        Subject: CN=8b5d51892a70da90aa4968fa53e24b849bf5f2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1c:e1:d9:5d:9a:85:f4:7e:80:be:bc:4a:90:
                    73:7e:69:2c:61:24:13:e5:fb:e3:b7:e7:21:b5:df:
                    29:87:ae:c8:ae:86:7d:1e:b1:ae:b9:a7:dc:19:7f:
                    9d:ef:a6:99:65:91:df:4f:e7:53:5e:fe:ae:a2:4e:
                    8e:aa:71:09:15:a8:97:19:04:48:b8:7c:bd:98:76:
                    48:94:e1:07:6c:32:e1:a7:4f:4d:13:4c:99:00:51:
                    b7:90:39:2f:38:2a:a9:0a:70:33:bd:a6:0d:61:06:
                    a2:16:45:b2:24:88:d0:3f:d6:9b:e1:86:9c:60:6c:
                    4f:df:0c:5b:45:a5:c3:f8:68:2d:2f:cf:2f:07:d7:
                    f8:1b:39:9e:57:7f:3b:11:89:80:8c:42:1b:f5:23:
                    58:cf:18:ee:5a:7d:41:92:18:8b:8b:34:c3:b9:81:
                    e7:57:f4:2c:f9:b3:95:d6:d6:36:80:0e:88:da:e3:
                    ce:5a:fc:8c:cb:28:19:57:b7:af:ba:72:e7:9c:5a:
                    4d:8f:9a:15:fd:3d:5e:b9:3e:e8:8e:2f:96:d7:7d:
                    8d:2a:0f:24:e4:5e:0c:f5:24:e7:47:de:a5:1d:1f:
                    9f:fb:e0:7e:d2:e7:72:e6:c7:a9:eb:1e:97:40:c0:
                    29:08:61:f8:54:05:2c:13:77:78:d7:88:91:ba:4e:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5D:51:89:2A:70:DA:90:AA:49:68:FA:53:E2:4B:84:9B:F5:F2:D6
            X509v3 Authority Key Identifier:
                keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cc:2b:c2:a6:66:1f:f9:ec:a1:2f:02:e5:bc:dc:e9:38:38:
         f1:37:e1:7c:ae:2a:7a:a2:76:5c:d4:35:61:f9:33:dd:a1:2b:
         92:a2:4b:3b:9d:d0:40:e1:f5:1e:1d:25:0b:f4:41:05:2e:93:
         45:5b:c0:d3:9e:f9:80:c4:ca:22:2c:59:6d:85:f5:15:e6:04:
         8a:3c:95:10:7b:4f:04:3e:25:cd:5a:42:a5:82:f6:5b:6e:3e:
         94:af:34:e7:4e:6d:22:73:7c:b1:3f:5f:ab:35:73:ee:c4:80:
         3e:b7:b4:c9:78:8f:79:43:85:fd:38:3c:e1:f2:dc:b5:52:54:
         fe:3d:1f:29:93:c1:1c:0a:e4:73:d0:8e:98:e4:cf:46:02:c1:
         c2:fe:55:27:da:9d:3e:79:03:51:62:09:a2:e7:82:60:5c:74:
         c5:d2:d1:bb:f7:48:2c:a7:7a:3b:e7:f2:21:a0:88:9a:d8:f4:
         31:02:55:b6:c9:73:6e:d7:06:00:a9:0f:ce:00:ab:4c:5d:44:
         5a:b0:90:88:f2:00:14:84:ae:8f:0e:79:0f:b5:f3:a0:49:32:
         db:48:2d:54:98:2a:1d:2d:08:bb:90:24:bc:b7:77:89:18:e5:
         95:92:f3:c9:37:61:62:76:4c:c5:a4:73:68:e5:86:77:32:50:
         7a:e1:6c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:51 2024 by rpki-client on console-fra.rpki-client.org