Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
File:                     mK_pac8OqToOjlfulYjK9VcrOyI.mft (raw, json)
Hash identifier:          CFA5vu0QACy2QmYvUFr7RoBgm4/6b3+snHJM4fzAYSI=
Subject key identifier:   02:0F:55:5F:43:35:F7:B2:0E:AD:E3:49:FD:24:7C:10:07:40:DD:06
Authority key identifier: 98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
Certificate issuer:       /CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Certificate serial:       01907C54709CB2F0996C4F0AB69BDCAC58B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
Manifest number:          1B
Signing time:             Thu 04 Jul 2024 06:00:26 +0000
Manifest this update:     Thu 04 Jul 2024 06:00:26 +0000
Manifest next update:     Fri 05 Jul 2024 06:00:26 +0000
Files and hashes:         1: mK_pac8OqToOjlfulYjK9VcrOyI.crl (hash: 5ZcSYTlWUO90khhftTG7ZGTlDs00lnE2AzPPE6bsqeo=)
                          2: tnZ23ESXSMpZTpRo_eGIE2sBXeo.roa (hash: ho1iGFdpsd7UJzqy7dqJIXAfbJ4hgImkpBW0NTJ9qkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jul 2024 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:7c:54:70:9c:b2:f0:99:6c:4f:0a:b6:9b:dc:ac:58:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
        Validity
            Not Before: Jul  4 06:00:26 2024 GMT
            Not After : Jul  5 06:00:26 2024 GMT
        Subject: CN=020f555f4335f7b20eade349fd247c100740dd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:48:60:94:45:5f:04:d1:c4:59:1a:0a:dc:
                    1a:b3:00:d1:ed:9e:b8:e3:37:a4:bc:52:08:b0:51:
                    d8:41:dd:ad:c2:53:63:cd:18:11:05:18:f5:14:92:
                    db:25:6d:4c:53:cf:e1:76:a1:c7:46:75:69:c1:d9:
                    cd:5d:c0:68:0e:69:1e:ac:71:6b:4f:0d:07:ca:25:
                    21:a5:5e:95:48:4e:77:76:8d:6f:13:13:7c:d0:f7:
                    3d:81:21:50:d6:b5:1a:f9:6f:9b:a1:94:ef:7d:72:
                    8b:9a:37:fa:b8:70:1b:a7:d4:b5:56:c1:35:0e:ae:
                    00:c1:69:42:ba:37:45:8c:48:a1:62:5e:d2:f7:1a:
                    14:fb:f4:fd:40:14:ef:4e:f1:3c:41:34:aa:8d:3a:
                    d6:7f:0f:9f:92:e3:47:9f:82:8f:68:18:1f:0f:16:
                    fe:76:ff:98:da:1f:cb:bb:9f:6b:4d:aa:ea:2e:3c:
                    0e:cd:4c:0b:23:4f:05:c6:c4:10:be:25:d6:75:7a:
                    5d:a4:f4:74:c9:0d:e2:f3:90:0e:73:72:6d:4c:51:
                    a1:95:ac:3d:fe:a7:23:5e:ba:47:93:73:81:bd:32:
                    61:08:fc:a4:5a:35:27:5c:68:b9:a7:52:6e:ea:c8:
                    b9:cb:1e:d4:d3:59:03:f7:68:8d:0a:4a:60:11:e2:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0F:55:5F:43:35:F7:B2:0E:AD:E3:49:FD:24:7C:10:07:40:DD:06
            X509v3 Authority Key Identifier:
                keyid:98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b5:c0:ef:60:74:de:64:b7:55:94:35:ba:dc:9d:77:3e:a3:
         fc:ee:ac:0e:f1:73:e3:1a:c8:98:4d:81:42:b4:19:bb:7e:9c:
         b4:31:3e:4f:a4:4d:c6:69:d2:f7:08:2c:f8:9a:ea:b2:79:9a:
         65:36:c5:c6:4b:34:f3:d2:6b:14:f4:8a:c1:89:ac:af:2a:9e:
         bf:19:6b:c8:b6:48:78:14:9e:7f:83:3f:1e:76:ae:b5:1e:86:
         22:cc:d8:11:80:3b:dc:fc:99:23:8d:77:5b:c2:7f:61:db:9b:
         22:54:9f:be:69:91:25:cf:ed:a1:24:89:cc:24:6e:09:0a:4e:
         c2:67:7b:89:ea:c9:f4:88:23:c4:13:48:bc:92:05:8b:db:85:
         24:10:fc:75:3b:5c:be:b8:93:c4:28:8c:91:bb:2c:03:b7:2e:
         d5:09:94:c3:66:d9:84:66:bb:9d:39:0b:a2:98:89:86:9c:4b:
         b7:1a:d1:32:9e:59:a3:84:61:e8:0b:8d:4c:2f:cd:92:51:cf:
         b2:0c:b3:2f:96:00:b3:6d:50:22:6f:9a:b7:90:cb:f9:ca:95:
         54:50:aa:77:18:e0:4e:67:3b:b5:b3:09:11:6f:fc:ae:82:c3:
         da:22:1c:d5:aa:2c:92:8b:63:51:67:cf:dc:91:30:6d:39:da:
         34:e3:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 15:14:27 2024 by rpki-client on console-fra.rpki-client.org