Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
File:                     0QZfT7a2eefxy92ANflnRnAQ6pk.mft (raw, json)
Hash identifier:          9tE+IByFFWwsoTxq6nyq15NE4egsZr4tHTBri9QpNto=
Subject key identifier:   FE:49:07:A6:B6:3F:9D:66:EF:F8:81:33:0E:10:A6:FC:5E:1A:54:AD
Authority key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
Certificate issuer:       /CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Certificate serial:       01901DEAECB54EBEBB8DA25DF01C242D2593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
Manifest number:          083F
Signing time:             Sat 15 Jun 2024 22:00:53 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:53 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:53 +0000
Files and hashes:         1: 0QZfT7a2eefxy92ANflnRnAQ6pk.crl (hash: pGNbdSrSTO38myNwe7kUSx1SWtOoi0ySLaVmh1/6iVQ=)
                          2: kuKhWKKYYadGdrSCFk2qt4pt8oA.roa (hash: /grYPYg5VU+KMCyf8EduL53PC5HYkkcrB3MTtq6Aw6w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:ec:b5:4e:be:bb:8d:a2:5d:f0:1c:24:2d:25:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
        Validity
            Not Before: Jun 15 22:00:53 2024 GMT
            Not After : Jun 16 22:00:53 2024 GMT
        Subject: CN=fe4907a6b63f9d66eff881330e10a6fc5e1a54ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:90:44:8e:3c:65:5a:3a:33:5f:3b:51:8c:
                    62:00:ba:79:23:35:f3:c5:9e:92:9c:b3:98:a1:aa:
                    e7:c0:86:e0:84:2a:4f:0a:55:39:9d:6b:50:92:a8:
                    45:92:ff:e6:d3:a2:05:47:22:8e:fd:82:d3:21:df:
                    9f:43:c7:a7:fe:c4:68:2d:ff:94:62:b9:85:9f:c3:
                    2c:16:99:4e:5a:e2:d8:0c:91:17:61:bc:6f:d1:79:
                    a7:ee:70:c7:fa:30:9f:65:ef:2b:37:59:e6:92:84:
                    0e:04:ef:ed:e7:20:ed:51:8b:9c:a3:31:3c:ac:99:
                    70:37:d2:dc:af:23:89:1e:92:bf:25:2e:f4:a2:5e:
                    c9:1c:d9:8d:3a:c4:db:44:41:65:f4:8b:9f:12:ce:
                    52:cf:47:af:0f:3f:63:83:ea:ce:28:d8:12:f1:60:
                    5b:e2:ff:17:5d:36:bf:72:4a:43:08:d0:cb:af:0d:
                    fb:05:f4:52:3d:3a:44:ef:4d:83:32:9c:59:d9:f8:
                    74:2c:69:1f:be:c9:ce:44:09:da:5e:ad:2e:39:90:
                    e0:92:60:06:c3:7e:75:a3:37:9b:8b:15:6b:a1:23:
                    a5:0e:7b:f7:3f:25:6a:ad:e4:67:a6:38:58:14:bc:
                    c8:77:a7:ad:57:7f:67:27:b6:99:c1:27:4b:a5:57:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:49:07:A6:B6:3F:9D:66:EF:F8:81:33:0E:10:A6:FC:5E:1A:54:AD
            X509v3 Authority Key Identifier:
                keyid:D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:96:ca:04:9b:46:4d:f3:d0:66:d8:7a:a6:d9:4e:e5:6e:
         45:96:45:bf:8d:14:85:90:b9:bf:18:65:26:3f:5e:cd:96:2c:
         6f:da:23:88:33:72:c1:3f:7d:04:2c:42:bc:c1:85:02:c7:0e:
         25:29:dc:04:f2:8b:f5:41:cf:7c:59:9e:da:e4:02:df:0f:d2:
         c9:6b:45:bc:ef:5c:ab:9f:83:bf:8b:e4:ab:61:11:84:0c:33:
         98:99:5a:92:2b:9d:7d:09:01:45:2f:67:df:55:bc:97:d1:a9:
         fa:ac:18:27:18:23:49:ef:7e:3c:b2:83:5b:9a:57:29:87:a2:
         37:24:b3:df:05:54:64:38:a5:8e:c0:a4:b4:18:b4:66:39:db:
         d0:75:07:dd:ee:e7:1f:23:1a:8c:c2:49:7e:ae:05:6a:51:4d:
         02:35:2a:da:d0:36:c5:28:83:24:9d:4c:36:79:21:16:30:66:
         c0:b8:30:53:e3:e2:d9:ec:3f:df:01:a3:f3:49:6a:f0:27:fb:
         9b:31:66:f4:95:bf:d4:f7:0d:a5:ff:c6:83:f1:f9:23:04:5b:
         d9:9a:97:63:1b:65:79:1f:0a:b5:14:55:12:f7:e7:e2:b9:34:
         d1:bd:df:d3:ff:19:1c:2e:47:1c:81:d0:f8:b2:91:5f:3e:9a:
         e0:0c:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:12 2024 by rpki-client on console-fra.rpki-client.org