Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
File:                     drC8_CzbBSuJ4pylp1u-8pIsgMM.mft (raw, json)
Hash identifier:          pmEbVmzkFSeKTwKHJJIAx5E2qdMmrX2YACZ65wOWK1w=
Subject key identifier:   B0:8C:FB:AA:BA:91:60:4B:AB:DC:46:C2:C2:DA:A8:05:71:55:DC:C9
Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
Certificate issuer:       /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Certificate serial:       0190448AAC1BC27E405C02C510DDA2829E54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
Manifest number:          11D8
Signing time:             Sun 23 Jun 2024 10:00:56 +0000
Manifest this update:     Sun 23 Jun 2024 10:00:56 +0000
Manifest next update:     Mon 24 Jun 2024 10:00:56 +0000
Files and hashes:         1: drC8_CzbBSuJ4pylp1u-8pIsgMM.crl (hash: GUjC4DXpy6xJ89xVjh19jrCEMNgmKJ4ZT3Z84mACWvg=)
                          2: jN3p0OhMnjbtQdqpwq1-Y9Moxms.roa (hash: lbFWDNb/7KU7WSQbz3CyZIzb8H/blSJbBGRdhRVTQmY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:ac:1b:c2:7e:40:5c:02:c5:10:dd:a2:82:9e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
        Validity
            Not Before: Jun 23 10:00:56 2024 GMT
            Not After : Jun 24 10:00:56 2024 GMT
        Subject: CN=b08cfbaaba91604babdc46c2c2daa8057155dcc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:72:72:92:7f:e2:31:47:82:0f:29:39:cc:d4:
                    70:0b:97:98:3b:fd:da:29:d8:49:ad:2d:58:f9:78:
                    1a:0c:2a:63:85:9b:2e:80:47:83:25:d3:2e:eb:a0:
                    0b:8a:ec:ce:26:7e:3e:0c:13:f5:cc:c9:ee:9b:e3:
                    bd:83:7d:f6:fb:83:15:a4:f2:61:0c:40:f9:41:e8:
                    c6:f4:7f:cb:93:f7:ea:52:44:4d:ce:0b:13:f4:70:
                    d3:ba:a5:b6:16:32:0d:86:95:9b:92:60:ef:a2:d9:
                    bb:b8:ad:20:b0:f9:a9:17:a8:46:7a:35:94:5b:e2:
                    f6:85:6a:7a:8a:d9:cd:1c:9b:92:e3:87:cc:50:20:
                    61:e4:90:ba:f4:b2:00:6b:d5:12:8e:9a:33:71:b9:
                    50:06:72:7d:82:47:f3:bf:1f:fc:10:36:ea:c7:c5:
                    d9:97:a9:16:76:62:d0:e3:62:cb:d0:2a:04:01:3b:
                    75:bb:17:97:5d:1f:72:75:54:bb:fd:43:76:1a:89:
                    d9:71:79:c1:42:83:70:84:80:7a:33:11:0b:f7:10:
                    2e:cc:39:a8:da:55:21:44:fe:d3:10:c2:e5:0d:24:
                    3d:db:32:ee:7b:cd:ce:4b:e5:c5:4c:78:2e:f5:01:
                    32:53:e0:b0:e2:cc:dc:ec:8e:79:d3:96:0f:74:f5:
                    84:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8C:FB:AA:BA:91:60:4B:AB:DC:46:C2:C2:DA:A8:05:71:55:DC:C9
            X509v3 Authority Key Identifier:
                keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:54:ca:0c:a7:f5:c7:d8:23:f8:8c:e1:84:34:03:75:c5:fa:
         94:ef:c4:80:52:98:2a:c7:bd:42:43:24:03:d9:4e:3d:8a:5a:
         ba:e8:6a:93:19:88:59:23:cd:24:b1:99:60:3d:7f:32:ac:28:
         7d:f2:76:54:63:e1:9a:d3:f0:f4:4e:f8:43:c8:d4:48:ce:84:
         84:4e:60:dd:17:6d:c8:a1:49:eb:9d:be:75:e4:bb:97:6a:b0:
         a5:e4:4e:51:e0:f1:9c:9d:f2:7c:d8:4c:36:1d:d9:27:77:5e:
         e9:10:67:22:d5:dc:35:09:a1:58:d3:64:79:d1:b4:b3:8e:ec:
         29:24:19:82:16:e4:60:2c:62:0c:2a:16:9f:ea:68:2e:b2:8c:
         f0:0a:ee:99:03:4e:25:89:5a:d9:8b:19:76:ba:af:c8:e5:92:
         a1:cf:67:28:18:fe:68:7a:71:f6:f0:8a:08:d9:3f:7a:e4:02:
         90:46:a0:4a:6d:26:1b:b2:b9:48:c5:d5:df:9d:ab:fc:70:6c:
         42:58:cb:63:03:80:2b:4b:d2:6d:4b:99:86:0f:28:55:82:36:
         32:1f:a4:05:86:b2:26:11:e9:f1:69:2a:e0:be:8e:fe:08:93:
         67:90:8d:f0:61:97:f3:82:7e:ca:58:9d:04:c1:40:80:8a:0f:
         a9:d4:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:31:31 2024 by rpki-client on console-fra.rpki-client.org