Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
File:                     8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json)
Hash identifier:          MjH1gnLO9roDS5daQQDaDybgGqzVj+HA2CW9yaoeIos=
Subject key identifier:   D3:E9:B2:93:0C:66:28:43:36:E5:B3:74:93:8B:9B:B5:D5:D1:CF:34
Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
Certificate issuer:       /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Certificate serial:       01901E8FF5B744D93B9081903A7023941769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
Manifest number:          1158
Signing time:             Sun 16 Jun 2024 01:01:09 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:09 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:09 +0000
Files and hashes:         1: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: fS6fd57k3Wfg2qSet+iqZFpBZpZXCCB3Q72uPVWJlpo=)
                          2: ZT0aLcz3pamlNrVns7TQr4489p0.roa (hash: cOlNpEQ/S8uVIMyLKFsm6sqhZ+q3Enh7gt0vc2/6CUM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:f5:b7:44:d9:3b:90:81:90:3a:70:23:94:17:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
        Validity
            Not Before: Jun 16 01:01:09 2024 GMT
            Not After : Jun 17 01:01:09 2024 GMT
        Subject: CN=d3e9b2930c66284336e5b374938b9bb5d5d1cf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:81:2e:4d:d0:e5:ea:e4:4f:27:b2:89:83:
                    de:6f:24:6c:34:61:08:dd:80:bd:ea:24:b0:d5:6d:
                    6c:21:42:43:34:ee:54:50:a9:70:21:98:ea:79:ea:
                    a5:fb:05:ef:bc:16:33:f4:a3:00:2d:f7:83:69:20:
                    54:fe:5e:c3:f2:d9:87:21:9f:2f:b0:54:02:93:01:
                    bd:3b:9d:21:8a:6c:11:b3:f6:d1:7e:d9:6c:d0:e1:
                    68:04:ca:21:9b:ce:71:7c:a6:28:c1:79:d8:c5:74:
                    a8:b8:ac:3a:a9:90:f1:bd:c0:c6:28:cb:d4:fb:ee:
                    e2:96:d3:29:d6:f7:81:fe:14:67:da:fd:83:73:c4:
                    e2:28:13:f1:95:bd:e4:f6:e8:e8:26:83:63:51:66:
                    6f:c1:57:4f:11:ca:70:5e:c5:b0:a2:78:6f:5c:6f:
                    2d:f8:b8:da:22:02:b1:d6:6d:66:bf:00:e3:93:86:
                    00:77:01:a8:71:dd:2e:31:5d:23:e3:89:62:f7:e6:
                    74:a7:26:21:5d:13:44:31:3d:8f:1b:ad:c3:fa:29:
                    89:cf:85:fd:57:c4:dc:d2:17:ce:63:22:ab:23:7a:
                    8c:d1:35:35:64:c9:ef:e7:25:0a:c8:82:62:f6:73:
                    0c:b2:14:0d:9a:83:10:28:9a:1d:3f:79:af:a1:f2:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E9:B2:93:0C:66:28:43:36:E5:B3:74:93:8B:9B:B5:D5:D1:CF:34
            X509v3 Authority Key Identifier:
                keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f0:7f:f2:e9:62:d3:53:06:6b:9b:d3:24:fe:e2:a7:5a:98:
         8f:ac:de:e9:7a:56:8b:d7:3c:f6:93:9d:1a:7c:f2:44:6b:c7:
         5f:2d:7d:cb:71:04:b5:04:49:56:1d:01:3f:dc:20:e9:6a:f0:
         20:78:46:fb:2f:30:8f:31:6a:c6:8a:d5:34:13:61:0a:3b:f5:
         1a:36:bf:1e:07:8c:d4:fa:0a:61:65:24:24:2a:15:8d:b6:a1:
         cf:cf:e8:49:5e:2c:c6:cd:65:84:24:4d:89:de:64:88:a9:c5:
         c5:df:aa:07:43:fa:20:53:db:ac:bb:30:68:28:0b:0c:56:8c:
         e4:06:8d:e5:07:5c:f1:1f:45:18:72:3f:ec:e3:a8:0f:f0:30:
         aa:bd:bf:ef:3c:1d:59:e3:13:73:3b:73:67:ac:5e:12:ec:92:
         42:78:5e:14:00:c2:b6:f6:4a:4f:bc:1f:15:10:c6:55:f6:18:
         2d:ef:40:11:2d:d4:17:26:9a:40:34:ab:8b:12:a6:93:f0:4a:
         a9:ad:fe:36:2f:f9:96:21:a6:ff:12:52:fa:c7:81:c1:04:02:
         4d:05:9b:d4:68:37:85:d1:bb:87:29:75:c1:4c:30:9d:bb:bc:
         02:31:b5:f4:db:81:63:6a:86:cd:d5:fa:ff:eb:e9:f6:7d:3a:
         54:d6:cb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:08 2024 by rpki-client on console-fra.rpki-client.org