Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File:                     8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier:          ZMVbE24Qz0sOvyv2ElOs9ZCwqWmjU4SosEIhtG/eK5c=
Subject key identifier:   9D:42:3F:66:14:B2:D4:42:21:B6:01:BA:CF:8C:C9:F4:F8:12:EA:CF
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer:       /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial:       019045661E3A1EF06B2542A39953E74EE877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number:          0185
Signing time:             Sun 23 Jun 2024 14:00:38 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:38 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:38 +0000
Files and hashes:         1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: +dhKiKVF7pNSkzXPCPHqpgFUjMh600fEo6XJAJEFJVw=)
                          2: GiZHUtqOkZw-KBEJdaRtc16uLJA.roa (hash: 8BAgXrPza7gM3s899+vO5wQBu024G0aCfKsnwZN73Js=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:1e:3a:1e:f0:6b:25:42:a3:99:53:e7:4e:e8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
        Validity
            Not Before: Jun 23 14:00:38 2024 GMT
            Not After : Jun 24 14:00:38 2024 GMT
        Subject: CN=9d423f6614b2d44221b601bacf8cc9f4f812eacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:8e:0f:3f:95:5d:fb:40:c9:ac:0b:7c:8d:
                    14:28:88:19:2a:e3:c8:39:ff:ad:fa:cf:96:20:2a:
                    42:19:f3:cf:0d:f8:6e:77:78:47:09:54:20:df:ac:
                    dd:7d:a5:0b:9d:08:6c:fa:6c:7a:5c:3b:f2:12:b6:
                    4b:41:18:4c:42:6e:80:01:15:4f:8c:ec:5e:f3:99:
                    50:d8:e2:9f:92:a8:89:0b:17:00:f4:47:cb:9e:d9:
                    13:a1:e4:9d:31:85:3e:e3:8d:d3:a1:a1:c1:e7:66:
                    84:64:a4:e2:82:98:cc:76:8e:5b:e7:ef:23:72:4c:
                    c4:8e:61:ac:0e:eb:af:16:82:9e:9c:dc:41:fd:ba:
                    97:40:47:13:6f:0d:53:ed:d2:a0:f0:b7:16:60:76:
                    11:4c:14:d8:a1:89:56:85:e8:32:c9:07:66:a0:38:
                    ca:a9:f8:67:1d:24:95:77:ac:e7:a2:3b:9c:32:e7:
                    03:f8:cc:66:41:0a:ed:aa:63:a2:e5:6c:06:e9:77:
                    8d:6b:20:42:08:69:e2:13:7e:4a:af:4a:39:f2:f7:
                    52:10:27:8b:6e:90:51:8c:8f:c9:5c:9c:19:88:61:
                    9a:68:43:43:a6:35:63:64:ec:1a:ee:41:ad:46:76:
                    8b:18:99:bd:b3:3d:85:55:ff:3c:fe:dd:78:cf:e1:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:42:3F:66:14:B2:D4:42:21:B6:01:BA:CF:8C:C9:F4:F8:12:EA:CF
            X509v3 Authority Key Identifier:
                keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ec:64:60:b0:9b:8a:fb:c9:27:e4:41:74:49:59:42:87:81:
         a3:ed:a1:7e:a1:ad:8b:97:42:6e:22:44:ea:79:af:11:63:f9:
         e8:35:bf:8b:23:26:c3:86:c8:e5:7c:25:e5:d9:aa:96:fd:8a:
         4e:c1:17:4e:23:95:30:f4:17:e1:67:23:ea:5e:4a:5a:17:82:
         3b:7e:e8:74:59:63:9b:cd:3c:86:b6:4f:ec:90:7b:ec:3f:f8:
         63:73:7f:9b:2e:6a:b4:be:a9:d1:64:bf:5f:80:9a:fe:0f:09:
         fe:4e:68:5f:71:d0:a3:31:7e:7c:d9:c2:84:44:3a:86:56:0a:
         ea:be:44:bc:3a:33:77:48:6c:75:d3:27:b4:68:c8:0d:fb:12:
         a4:ed:80:00:7f:bc:38:ad:f6:84:63:4a:0d:c2:62:65:bc:3b:
         68:75:7f:c7:13:23:89:a0:10:16:ce:91:82:8b:29:3b:5c:6a:
         bf:8c:e8:dd:83:35:c4:f6:06:a6:2b:62:e6:67:a8:bc:bb:5b:
         e5:23:37:99:f1:b7:67:b3:98:d8:19:2f:51:58:9f:f9:5b:64:
         e1:92:18:4e:8d:90:c6:df:06:d4:94:68:70:bd:7d:f6:f2:3a:
         da:c1:64:46:f4:ad:05:b8:56:b7:43:78:57:d2:0a:e8:f7:5b:
         80:49:d6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:01:59 2024 by rpki-client on console-fra.rpki-client.org