Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
File:                     cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json)
Hash identifier:          sZYZYwrGrh6wUAlBuggi7BxN0rb4YALdY2wK/NKizTE=
Subject key identifier:   4D:80:28:7B:53:04:E4:04:3D:B7:DC:0E:48:5B:54:4A:D8:13:9B:AD
Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
Certificate issuer:       /CN=706f0a161b217b9cefd3781ce2611951be419dba
Certificate serial:       01904868D097CEE6E3C6C25C617A9250E889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
Manifest number:          0310
Signing time:             Mon 24 Jun 2024 04:02:26 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:26 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:26 +0000
Files and hashes:         1: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: 3uJxSVB+yIYKHpxyg+dztUicuMl3BJSVUxd4K0oBHt0=)
                          2: ld1cu9R9kp2u5r-sCQP50Qf41e4.roa (hash: dh0xCV7OvwObVXAlRXF9FEnyV5E0L/1jG2PpFukb2bA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:d0:97:ce:e6:e3:c6:c2:5c:61:7a:92:50:e8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba
        Validity
            Not Before: Jun 24 04:02:26 2024 GMT
            Not After : Jun 25 04:02:26 2024 GMT
        Subject: CN=4d80287b5304e4043db7dc0e485b544ad8139bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:37:3c:fe:6d:c0:e7:d9:0b:de:fe:cf:83:
                    0e:44:8c:72:f2:80:18:bb:e3:f5:2e:2b:b8:e4:d1:
                    8c:ff:44:34:eb:0a:65:ea:10:48:26:ae:b1:a0:2d:
                    9b:4f:48:ef:aa:69:26:31:4f:b0:eb:2c:14:94:05:
                    4b:ab:74:22:21:03:3a:66:c3:40:4b:ea:48:6c:49:
                    2e:ab:bf:2a:76:fe:49:f6:0e:19:0b:1f:13:fc:fe:
                    d6:e2:d5:1e:8a:8e:6b:0e:19:38:77:7d:19:55:3c:
                    bb:64:75:a6:7a:fc:9a:c5:3c:c3:92:6d:ad:18:bb:
                    5b:10:95:fb:43:6e:a1:c1:df:c1:7b:0d:51:da:7a:
                    e7:25:5c:f1:c1:67:66:fe:c2:97:16:66:6c:b8:82:
                    a9:bf:a2:7c:8d:27:ae:84:c8:2f:85:c4:2a:a3:cb:
                    a6:cc:c6:bf:2c:10:c2:53:04:a6:20:3e:56:51:f4:
                    f5:b4:52:25:51:7c:37:4f:13:21:32:5f:c6:58:f3:
                    bd:f7:d7:6f:d7:f7:11:b9:1e:47:65:ec:ec:b3:54:
                    94:7b:1a:fd:5e:c6:48:34:ae:35:78:a3:29:bd:f1:
                    cb:70:7f:03:d2:35:75:01:24:7a:9e:30:e4:13:05:
                    98:b4:8f:e0:51:50:98:7d:0f:15:e7:cf:ff:2a:c1:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:80:28:7B:53:04:E4:04:3D:B7:DC:0E:48:5B:54:4A:D8:13:9B:AD
            X509v3 Authority Key Identifier:
                keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:84:14:60:16:7e:cc:95:7d:fb:50:a2:93:1f:9c:4d:55:3b:
         7d:6a:16:1c:ac:10:97:95:c4:9c:da:b0:a8:8a:fb:43:c1:68:
         fa:7c:99:28:86:fb:77:7e:2b:5a:a5:01:b9:4b:d7:79:9b:8f:
         5d:fb:03:f3:92:8e:9a:a8:e0:20:36:4b:96:19:d8:ef:3f:03:
         fa:68:fa:aa:c7:3a:e0:2c:ac:a5:8f:43:e5:93:fb:dc:88:a0:
         06:c8:29:0f:c9:14:25:66:44:84:77:88:9a:83:e2:c8:d9:fd:
         fa:74:71:de:dc:05:6a:3c:b4:18:15:b1:08:54:1c:e6:68:7e:
         a8:ea:1d:49:32:4e:6f:22:81:85:ed:17:9e:90:82:84:1e:cb:
         8f:3b:28:6b:45:2d:66:76:48:84:ab:f3:2b:19:f9:ca:e2:e4:
         df:5d:89:04:e2:4a:c9:2a:86:8f:88:42:e8:c1:a5:3a:51:2c:
         af:05:9a:27:b1:1a:c4:57:11:a4:4e:cb:dd:66:41:bf:c1:0c:
         03:f7:93:2b:ba:3a:ae:95:79:cc:56:c5:41:7b:87:fd:3f:c8:
         cb:b0:8e:47:13:71:c2:83:6e:fe:90:12:66:c5:03:07:d8:a7:
         9c:02:fc:6b:36:76:2a:5e:f2:c3:11:5e:b3:91:8b:b0:73:a2:
         c2:89:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:16:09 2024 by rpki-client on console-fra.rpki-client.org