Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
File:                     8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json)
Hash identifier:          urplUdTFUv9dGc8nwJIQ4Yh+Aa+3MFvpWjFBRl31cGA=
Subject key identifier:   C2:4D:2D:28:F0:D4:E0:A1:CA:04:5D:35:BF:03:53:D6:1E:80:FF:3A
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Certificate issuer:       /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial:       01901D0EFB60A253B752B9C45B34154DAE02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 18:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:39 +0000
Files and hashes:         1: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: y9S17DVaZ+1+DkEeNQY2u9ffJ5ruefGng+h9KgFy/lE=)
                          2: 9DLNUmRJ_3LuIchOkWxxnu5rqUQ.roa (hash: 2NAkMtrKhgbuVSV77slRSdAGaE+4wTFFMBjT5FDbS5A=)
                          3: GgQsIs2X4jy_mWcV8hRXXPuRX_w.roa (hash: 6T6xIROgbi+b8XC+4EEJJIPICJxGus4uRH04Wdh50zo=)
                          4: M9fLJNPxdFy9gk7L0uBraRV2p7w.roa (hash: U4S6Bnr07HQ0HigUdzRskkza9s5/6j39lFR6hUMpRBA=)
                          5: O84Y9YaCdkkzJLyBgWQ2h--28Wo.roa (hash: m/RLM6vw2MOJJFaottelv3TFN7g+HcPRlTVzgS2IsdI=)
                          6: V0bC84UZrL-KrmpAYM6t-as_lDc.roa (hash: LXF7XW5xRIH8rZd2i3wKcz+h1I/cI2StjwZQhji5JyA=)
                          7: csf4knCgnaEDLjkdXAYPqD-fPhc.roa (hash: B8Wiv2MqZ+S5as4zGH51Ukw80QLxGlpqbtdIijvXl/g=)
                          8: nJxP-BV9jATd89OOfTKxlfQ4UQ8.roa (hash: wpwGV7RtBawwydLdzKFrCNUGFH9Ekl4Zc9Dbnr5awNQ=)
                          9: ysdND1ustZzaDsp0dR-QZ5DPLdY.roa (hash: tqcET9dCrJYnpDkN2rJWlYKEE/Doo7WJmCPmTaa+rVs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0e:fb:60:a2:53:b7:52:b9:c4:5b:34:15:4d:ae:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
        Validity
            Not Before: Jun 15 18:00:39 2024 GMT
            Not After : Jun 16 18:00:39 2024 GMT
        Subject: CN=c24d2d28f0d4e0a1ca045d35bf0353d61e80ff3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:92:92:f3:f6:12:8e:01:9e:8a:b1:4b:37:
                    3a:8c:28:34:f5:92:0b:da:1a:dc:6a:0c:58:6e:d5:
                    7f:3e:02:c5:1c:79:93:02:67:4f:fe:4d:cb:fb:87:
                    f9:e3:f2:f2:45:d5:f1:1b:18:7c:a2:16:3c:b7:f0:
                    a2:31:26:ca:53:fb:f6:9d:1e:65:a0:20:df:c8:0d:
                    ac:24:86:79:6a:fa:53:9f:41:08:55:08:ce:90:ac:
                    3d:d6:bd:6c:08:d2:bd:b6:73:4b:58:ae:fe:3d:ca:
                    91:c0:86:ee:01:50:88:35:72:93:66:45:54:cb:77:
                    37:03:0d:0b:0c:e1:db:8d:c2:6d:08:3f:2c:ac:39:
                    f2:93:8c:78:aa:48:77:9c:90:e3:03:d2:ee:a9:3b:
                    c2:03:04:3c:6c:55:bf:75:73:4a:7c:e3:1b:af:16:
                    1f:53:d4:52:54:9e:ff:c4:3b:07:df:f3:e3:5d:dd:
                    91:fc:42:0c:5b:13:03:19:cf:77:52:86:aa:57:d5:
                    ba:89:a5:c7:a8:ec:da:7b:6e:dd:c1:da:b8:b3:68:
                    67:fe:cb:ad:73:3d:87:00:ca:0e:c0:01:f0:b9:6d:
                    22:b3:93:08:75:04:30:c5:b0:b7:02:ae:e2:2a:1a:
                    a5:7c:9b:5a:e9:28:f3:2a:de:58:d1:48:7c:a5:73:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4D:2D:28:F0:D4:E0:A1:CA:04:5D:35:BF:03:53:D6:1E:80:FF:3A
            X509v3 Authority Key Identifier:
                keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:96:a5:9e:1c:0b:0a:2c:0e:69:77:16:61:05:1c:36:9e:5e:
         be:25:c1:67:6c:64:d8:1c:a7:e2:fc:92:c3:81:dd:40:26:1a:
         0c:e0:ff:84:ff:e4:2e:50:89:46:8c:ce:0e:0c:6e:44:0a:9a:
         fa:2e:65:fa:72:ff:be:29:47:c1:a4:5c:75:10:0b:4c:bd:87:
         f7:29:bc:f1:5a:c6:a2:18:bf:9e:db:60:c3:40:d3:60:ce:d4:
         80:94:93:da:88:6c:85:d2:81:38:43:1f:22:f6:21:ca:55:ca:
         f0:07:b5:01:64:37:d8:1b:bd:32:9a:65:69:d8:18:a2:a4:db:
         0b:a7:c2:ae:70:15:00:36:6a:2b:08:db:70:fe:b9:98:25:e2:
         17:a9:55:a0:08:39:a1:32:b2:c0:67:b0:e8:e6:21:94:0e:fb:
         e5:02:cc:43:54:30:1e:69:16:61:4f:13:d0:6d:15:39:ba:43:
         76:8a:aa:cf:1f:8e:e3:b9:91:71:c8:3f:57:99:eb:e3:a2:ac:
         96:23:b4:50:eb:23:36:b6:10:3b:bb:43:89:fb:b9:da:21:ae:
         9d:a8:5f:9d:f5:c9:e1:d2:5f:32:16:7c:47:8b:50:ef:cf:ac:
         17:33:37:24:f7:f4:f6:6b:37:10:a6:71:71:5a:83:ae:11:5a:
         e9:97:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:42 2024 by rpki-client on console-fra.rpki-client.org