Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File:                     8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier:          e9tYVas5p9z/E/KWe6fR79p4jAmrzwsQ9SZYcl02loE=
Subject key identifier:   A2:6C:79:2E:66:6F:AE:07:F6:D8:A3:F1:93:B5:DA:E7:92:5A:F6:33
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer:       /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial:       018F44C4424D45039FCB733F99A84CE4949C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number:          0C97
Signing time:             Sat 04 May 2024 18:01:03 +0000
Manifest this update:     Sat 04 May 2024 18:01:03 +0000
Manifest next update:     Sun 05 May 2024 18:01:03 +0000
Files and hashes:         1: 29FS9Q6z0i2gDCRrAb1Bzcz1O1Q.roa (hash: LXRIiXBUAlRQC1Wn9GEmWs572hoLNA3uxsHLKPrgFeE=)
                          2: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: k0LxaFOpyqFY3mfreT8htkSMHrMXsobeI0tr2J2betM=)
                          3: j8OReRU7PaKfbSR2Y2Xnl0FQA_o.roa (hash: /56UOyZlGhQZUqWhuF/OAR78axEehwQne5DtSrypzc8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:c4:42:4d:45:03:9f:cb:73:3f:99:a8:4c:e4:94:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
        Validity
            Not Before: May  4 18:01:03 2024 GMT
            Not After : May  5 18:01:03 2024 GMT
        Subject: CN=a26c792e666fae07f6d8a3f193b5dae7925af633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5e:85:e6:50:4b:9c:b8:9e:3d:bc:a7:0a:b0:
                    6e:9d:57:e5:e8:cb:c4:ae:92:f8:0d:b5:60:c8:6c:
                    50:fe:e5:8a:04:72:ca:28:fc:22:22:b4:41:43:92:
                    bd:45:a3:4d:e3:ed:52:66:1d:7f:d2:4c:e4:01:8f:
                    86:73:67:a6:1f:03:37:f2:19:48:30:a3:ef:e6:e3:
                    48:0b:df:cc:b3:d5:f6:4c:21:52:21:5a:37:af:1c:
                    2f:a0:f8:59:77:16:6f:1e:b3:db:20:c7:3c:d9:ce:
                    f4:70:19:ff:80:c4:75:b4:2c:fd:5f:21:b3:b3:d4:
                    50:61:88:3c:11:19:66:16:fb:f2:64:f0:ce:c4:3f:
                    a6:49:bb:e8:04:c3:04:97:2f:e8:eb:6d:84:c4:60:
                    79:eb:8c:da:08:37:61:03:07:84:7a:f1:f1:a9:37:
                    1a:7f:61:f6:da:1c:ea:f5:e6:ee:39:52:2a:91:57:
                    a5:5b:0d:db:20:a9:e0:38:ea:d6:b1:04:87:94:ef:
                    a5:8f:30:ef:84:f2:73:a8:5e:1c:a4:b9:e7:db:3f:
                    f1:37:e1:43:4c:13:68:11:82:28:a9:e8:c6:8d:05:
                    29:1d:f6:f2:3e:b5:83:79:e4:6b:43:cd:a6:11:6d:
                    ff:38:9c:07:c3:3c:00:f1:78:ca:48:c1:aa:5d:a2:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6C:79:2E:66:6F:AE:07:F6:D8:A3:F1:93:B5:DA:E7:92:5A:F6:33
            X509v3 Authority Key Identifier:
                keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7d:8c:ce:11:b9:37:f5:60:fb:62:17:dc:0a:38:54:70:0c:
         3a:89:c8:c4:1d:b3:00:3a:fe:de:b1:af:da:68:03:d4:c6:75:
         58:1f:3c:6f:76:78:54:18:78:cc:70:9b:04:71:2d:92:ba:a4:
         dc:97:30:4f:a1:26:d2:1f:6f:98:70:db:67:d6:a9:01:19:ff:
         90:bd:50:cb:61:9d:74:e1:cc:c6:eb:ff:42:61:5f:d3:39:5d:
         5b:d1:62:89:ce:8b:26:eb:6e:f9:d3:90:dc:6c:0b:fc:a8:0a:
         c1:96:51:d8:ad:96:db:6e:fd:ff:75:40:d2:20:ff:45:78:a4:
         be:6c:96:39:24:ac:02:7b:3d:9a:4d:cb:61:59:5c:95:d9:11:
         c1:c0:dc:c2:06:53:c8:b3:a8:89:41:d9:cc:46:1f:ea:83:cd:
         2e:74:33:ce:99:82:48:49:23:6f:f3:08:25:97:85:8a:08:50:
         f3:6f:8e:34:68:49:84:5c:86:62:5e:6a:4b:76:15:96:15:9c:
         76:5e:56:5d:c7:e9:68:c3:56:d9:fc:99:16:b4:41:da:6a:fb:
         0e:f0:71:8e:9f:b8:20:bc:5b:e2:f0:64:e3:1f:06:22:fd:93:
         d4:40:2a:7e:b8:a6:72:b8:b8:e9:d1:84:19:fc:c3:88:65:17:
         a6:72:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:10:41 2024 by rpki-client on console-ams.rpki-client.org