Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File:                     RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier:          LMqJ14vW3LawnbZHzab89W1+92xX2eYMz5H7vvWgUFs=
Subject key identifier:   C8:E2:38:9F:08:22:27:59:86:3B:F4:7A:C4:F0:B7:83:0A:AC:7A:B1
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer:       /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial:       018F8936D7D25ECDCC7BD26D70DC1D6A52AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number:          10C0
Signing time:             Sat 18 May 2024 01:00:23 +0000
Manifest this update:     Sat 18 May 2024 01:00:23 +0000
Manifest next update:     Sun 19 May 2024 01:00:23 +0000
Files and hashes:         1: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: H8nRJF13z8eqJSYuWPDlik6qTjaviGpjX/dELsYsVP0=)
                          2: e3m47PYjE60ySeSwtu-Y3UwnR3o.roa (hash: MemXFXawwwNRcvoCXzJP6PQri7ttHN0vxrZhEOYjJQE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:d7:d2:5e:cd:cc:7b:d2:6d:70:dc:1d:6a:52:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
        Validity
            Not Before: May 18 01:00:23 2024 GMT
            Not After : May 19 01:00:23 2024 GMT
        Subject: CN=c8e2389f08222759863bf47ac4f0b7830aac7ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:d0:74:e8:26:56:79:7b:03:46:b1:22:3a:
                    be:92:74:d3:33:6c:18:32:24:83:6a:8b:45:b1:33:
                    cb:a0:49:bc:ec:70:b4:7b:03:22:01:2c:7e:71:0c:
                    ed:83:e7:2b:48:89:35:69:bd:88:39:d8:08:b5:89:
                    99:3a:a1:dd:76:78:b0:15:89:df:f6:4f:60:32:64:
                    12:12:3b:a7:6a:d9:a2:ea:4a:cc:53:c8:19:aa:a4:
                    95:78:ba:cb:84:e0:7d:ab:e5:fe:28:3f:62:df:e7:
                    71:92:b2:c6:18:c2:b8:48:c7:19:e8:61:7a:70:e1:
                    b6:21:31:ee:70:b5:8c:e0:f2:08:47:fe:81:5c:aa:
                    b2:10:2c:45:9a:54:43:d4:a7:33:41:98:a7:de:a2:
                    8f:43:b0:13:ed:f6:31:75:99:ba:4d:f4:f1:1b:4d:
                    69:2f:17:67:9f:49:a7:09:c7:79:46:94:a0:0d:85:
                    55:cf:65:f9:ab:57:42:82:e9:b5:df:fa:7d:f1:05:
                    48:50:fa:29:d2:37:2c:86:83:7b:fa:14:0e:4e:5d:
                    78:9a:71:b0:7e:f4:5f:95:a7:79:32:29:c0:97:7b:
                    c7:77:2b:12:ec:f7:7b:9a:e8:30:c8:a0:85:e9:8c:
                    b0:2c:2c:96:d2:0a:01:f7:27:27:b5:68:f5:76:42:
                    bd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E2:38:9F:08:22:27:59:86:3B:F4:7A:C4:F0:B7:83:0A:AC:7A:B1
            X509v3 Authority Key Identifier:
                keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:63:fb:1e:83:9f:75:c5:81:97:9a:d7:0c:56:32:de:fc:9b:
         f8:95:56:02:88:d4:26:f7:23:02:71:e6:b6:1f:83:d9:67:91:
         f6:f5:38:a2:7a:fa:17:12:8c:52:39:9a:1c:24:58:ca:e2:5b:
         35:81:a3:1f:38:e0:59:99:68:0e:fc:55:f5:d9:8c:a7:52:1c:
         83:ca:49:61:87:79:03:54:3a:9f:8c:63:7b:7e:a7:fa:63:99:
         b6:dd:36:33:45:d5:8e:dc:70:d6:60:be:03:16:ce:20:bd:a8:
         2e:0e:8a:04:9f:c9:66:ad:13:cd:19:d5:3e:89:e6:98:d8:27:
         72:34:50:cf:66:a0:ff:1a:fc:3d:12:c0:86:47:98:99:05:d0:
         dc:22:4a:83:f0:9d:9b:e8:05:8e:68:65:d5:75:76:6b:f5:ce:
         f3:59:e4:2e:67:b9:65:ae:28:f6:7d:a4:b4:2e:c0:27:92:02:
         4b:ee:91:40:1b:d7:f2:6b:c6:7b:31:00:50:ce:e2:2c:b7:42:
         f2:81:26:4a:bf:ac:77:90:5a:34:1e:45:4a:50:91:f7:27:25:
         02:72:c4:16:2a:c4:6a:b9:47:42:69:d3:d7:d2:5a:e6:4a:7b:
         a6:3b:a8:80:c4:98:46:ec:bc:6b:45:63:9a:1a:98:55:c4:fc:
         f7:3a:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:41 2024 by rpki-client on console-fra.rpki-client.org