Manifest

$ rpki-client -vvf rpki.netiface.net/repo/Apricot/0/0CBB01C958FE5C38B1B640AA5D0467845C451F50.mft
File:                     0CBB01C958FE5C38B1B640AA5D0467845C451F50.mft (raw, json)
Hash identifier:          oWlUs8dLFkqot6ttD61mqGyW77GNeMiUpLAwaTRGoCc=
Subject key identifier:   D0:F8:B5:7A:B0:0D:65:64:A8:2D:0B:01:C7:F2:DB:3A:CF:08:A7:A0
Authority key identifier: 0C:BB:01:C9:58:FE:5C:38:B1:B6:40:AA:5D:04:67:84:5C:45:1F:50
Certificate issuer:       /CN=0cbb01c958fe5c38b1b640aa5d0467845c451f50
Certificate serial:       26B07947E1B90F1A583A1C69D7AF18DD93866F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLsByVj-XDixtkCqXQRnhFxFH1A.cer
Subject info access:      rsync://rpki.netiface.net/repo/Apricot/0/0CBB01C958FE5C38B1B640AA5D0467845C451F50.mft
Manifest number:          A5
Signing time:             Fri 19 Apr 2024 06:27:27 +0000
Manifest this update:     Fri 19 Apr 2024 06:22:27 +0000
Manifest next update:     Sat 20 Apr 2024 07:29:27 +0000
Files and hashes:         1: AS215978.asa (hash: RiYDnxikAsa0aOSTDpGZrLBlQCpZQamFJfWyzJxvwvE=)
                          2: 0CBB01C958FE5C38B1B640AA5D0467845C451F50.crl (hash: 19g97aUJM9IMRwCI0zkC3po9D+fj8Ur0vLqJke5AOIU=)

Validation:               OK
Signature path:           rsync://rpki.netiface.net/repo/Apricot/0/0CBB01C958FE5C38B1B640AA5D0467845C451F50.crl
                          rsync://rpki.netiface.net/repo/Apricot/0/0CBB01C958FE5C38B1B640AA5D0467845C451F50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DLsByVj-XDixtkCqXQRnhFxFH1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Apr 2024 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b0:79:47:e1:b9:0f:1a:58:3a:1c:69:d7:af:18:dd:93:86:6f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbb01c958fe5c38b1b640aa5d0467845c451f50
        Validity
            Not Before: Apr 19 06:22:27 2024 GMT
            Not After : Apr 20 07:29:27 2024 GMT
        Subject: CN=D0F8B57AB00D6564A82D0B01C7F2DB3ACF08A7A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:9c:d1:06:be:02:dc:56:08:fb:a1:b3:3c:
                    3e:db:9b:30:eb:39:06:ab:86:a9:23:25:b7:f8:df:
                    38:25:3b:d4:ca:9f:fc:87:dc:a7:04:93:43:3e:de:
                    3d:f8:57:f9:5c:62:eb:d8:b9:85:4c:d0:6a:36:88:
                    f1:71:9a:68:31:d8:b4:10:72:fc:63:9e:0e:00:a1:
                    4a:51:1d:25:2d:8d:ea:fa:7f:72:52:5e:35:bd:a8:
                    e9:d5:1c:a2:4e:4f:d5:b7:7e:25:91:d9:ff:b1:cb:
                    f5:50:18:44:5f:9f:ce:99:d0:cb:38:25:d3:b1:79:
                    99:99:a7:e4:27:44:7a:88:85:c3:ed:77:40:23:15:
                    67:7b:a5:74:23:8f:e9:08:40:f1:59:66:28:65:22:
                    ad:ad:bf:90:2c:3c:b0:c7:28:c1:99:31:86:b8:f6:
                    f6:6b:24:dd:a4:2a:f4:dc:6c:d4:d4:48:41:cb:62:
                    8c:06:b8:84:03:12:2c:d6:c7:08:52:14:e5:0e:09:
                    c7:61:cf:4e:0b:bd:d0:1d:ec:46:fb:58:d5:e3:3a:
                    d1:52:5f:2f:ad:72:69:15:f7:79:ff:79:ea:89:e1:
                    b0:47:1c:dc:aa:6b:ea:05:91:97:5c:00:1f:d1:ff:
                    e7:bc:e9:cc:e7:08:d6:0c:b5:9d:34:5d:af:58:c9:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F8:B5:7A:B0:0D:65:64:A8:2D:0B:01:C7:F2:DB:3A:CF:08:A7:A0
            X509v3 Authority Key Identifier:
                keyid:0C:BB:01:C9:58:FE:5C:38:B1:B6:40:AA:5D:04:67:84:5C:45:1F:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Apricot/0/0CBB01C958FE5C38B1B640AA5D0467845C451F50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLsByVj-XDixtkCqXQRnhFxFH1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Apricot/0/0CBB01C958FE5C38B1B640AA5D0467845C451F50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8e:94:82:77:6a:b8:0e:44:e0:22:a0:d1:95:26:c8:46:34:
         64:da:f4:52:e7:3f:26:86:ab:29:63:31:87:fd:40:6f:06:ff:
         5d:8b:d3:04:54:e4:b5:62:48:fb:0f:c9:e3:d9:20:33:56:a0:
         39:32:01:b5:ac:ae:f3:81:b3:c7:16:73:89:20:86:33:8a:03:
         13:57:ac:ad:d7:46:fe:b5:7d:59:22:6d:9f:cc:d2:0e:39:9e:
         4a:ea:6a:d2:ff:bc:65:a5:46:7c:db:5b:4d:03:fa:98:9b:6c:
         57:88:bb:a9:bc:8b:76:24:72:3c:38:f7:44:d6:89:34:e4:5a:
         7a:24:b5:b1:2c:ac:d4:14:e7:8a:60:18:73:ae:e5:38:e7:d4:
         af:9e:4d:66:7a:8b:9e:5a:4c:d9:ae:06:d7:1b:ea:77:a4:bf:
         c8:f9:21:76:bc:d4:2c:be:38:c7:a9:74:48:bf:25:06:9f:dc:
         a9:bb:84:33:0f:c2:4e:55:ee:b0:e3:cd:35:ef:9f:6e:98:fc:
         a5:f0:9b:85:f5:fd:66:10:77:dc:64:c2:0d:23:70:29:d2:3e:
         31:1a:b7:18:f4:57:19:a6:71:1d:bd:22:39:05:c6:23:21:f0:
         33:13:eb:93:b9:66:71:83:dc:2a:a2:a6:61:79:b1:36:05:ee:
         21:33:16:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:44:51 2024 by rpki-client on console-ams.rpki-client.org