Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
File:                     0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft (raw, json)
Hash identifier:          cW1bAS82RDLgEYtF8p4jsMGqB79RHJ3IM+hwWBsw4GU=
Subject key identifier:   62:93:35:91:88:E0:3C:7D:C0:28:98:2C:C8:3C:8A:D0:6B:BE:2F:28
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Certificate issuer:       /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial:       018F3A4095778E8736A0284074265C742131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
Manifest number:          0BF7
Signing time:             Thu 02 May 2024 17:01:02 +0000
Manifest this update:     Thu 02 May 2024 17:01:02 +0000
Manifest next update:     Fri 03 May 2024 17:01:02 +0000
Files and hashes:         1: 0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl (hash: JaldH7lqiRezok9jS9wjMXFA2eU51fW/FaH3DKGtHik=)
                          2: P9RyAxSqJeJLKIGhk9mKmhEAdQE.roa (hash: 6XoQ5v+TuHWm66YOecvI0KukaDphFCqC7Ob0F/h90ec=)
                          3: YVCRytk2AUxqDnHvNVxzxqfYHBg.roa (hash: EEfgAplJwfq5diIaRjZKjJZN5+k/VFbryJADLSPLXlI=)
                          4: kF1kYozzI9ZoZ-VyIbccxhFi8uk.roa (hash: 9psb1HBl+5E8BagqN6XWkfkHanzoWoZDGP/Pq/pn2mw=)
                          5: xAc1AxGnuB7PXzC1l7ffFUaqXRA.roa (hash: 53JEovt2kBniRU5i1kXcyCtVDQgxij/sIltbkUVWsMU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:40:95:77:8e:87:36:a0:28:40:74:26:5c:74:21:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
        Validity
            Not Before: May  2 17:01:02 2024 GMT
            Not After : May  3 17:01:02 2024 GMT
        Subject: CN=6293359188e03c7dc028982cc83c8ad06bbe2f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dc:eb:41:77:2f:86:58:20:5d:f9:52:8d:1f:
                    98:c7:e6:e3:8c:d5:64:37:c2:70:ea:77:25:a9:1a:
                    48:9c:10:4a:9f:6e:36:04:42:78:49:fe:e0:b6:3a:
                    51:fb:26:3a:a4:17:e1:ba:5a:3c:6c:66:2a:b0:56:
                    b9:5b:5c:27:b3:9f:42:33:72:40:1d:f1:21:0a:db:
                    d0:e7:da:31:ef:72:2b:ce:65:fa:f0:12:57:1f:7f:
                    bf:0b:a4:1d:2c:5f:4d:b7:59:6c:72:63:f0:57:19:
                    60:40:c5:53:ba:47:12:7c:55:29:bd:d5:1e:02:93:
                    63:43:b0:41:e9:73:e1:6d:94:a8:bd:c6:9e:69:66:
                    f2:19:e7:69:2d:2b:af:d2:4a:8f:1d:61:fb:68:a5:
                    b1:82:1f:71:39:5a:c9:2e:26:b9:9e:e7:c3:ec:7c:
                    9e:dd:e2:f9:25:89:8d:05:33:bd:cb:59:3d:ba:d2:
                    95:8a:b9:63:92:62:2c:03:cb:42:bf:a1:ec:89:4a:
                    73:9f:d3:fe:e7:14:19:c0:6c:be:36:46:ab:e3:5c:
                    5d:d3:9f:08:89:c1:7b:22:2e:62:ec:eb:3e:0d:3e:
                    8a:0f:3d:4f:07:99:be:a7:af:d1:0f:b8:e0:4e:64:
                    33:60:08:0d:dd:b9:72:8e:9b:0e:82:ce:ab:a2:d5:
                    1c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:93:35:91:88:E0:3C:7D:C0:28:98:2C:C8:3C:8A:D0:6B:BE:2F:28
            X509v3 Authority Key Identifier:
                keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:77:c7:13:83:b2:44:63:e0:d1:51:fa:31:dd:98:8e:72:a8:
         ab:c3:94:d2:99:12:1f:19:05:61:d4:af:fb:af:f5:bc:74:49:
         e0:03:c0:a4:46:e5:8b:9f:ab:5c:85:5e:c8:d8:a6:a8:7f:81:
         f0:16:97:32:6d:96:a5:89:a1:ba:fc:99:39:63:44:e9:5e:4f:
         c0:8c:4b:08:57:19:d8:9e:17:f2:22:ec:db:47:41:26:c3:d4:
         76:22:32:61:5e:61:32:73:26:f8:ce:03:ae:41:70:0d:cf:ea:
         92:83:ad:07:11:89:ec:c1:d2:3b:ac:d5:ac:ba:fa:94:8f:a5:
         55:e8:60:3d:3e:b7:c1:7c:1d:69:a0:5a:ff:b5:11:ae:31:bd:
         9a:09:ec:36:82:8d:fb:06:db:72:ca:45:64:db:0e:ce:b6:ae:
         87:f8:1b:dc:05:22:c2:55:b3:18:ea:e4:35:5f:82:14:ed:06:
         40:fe:e6:00:39:63:2c:61:13:ce:7e:10:3f:ad:e4:08:22:38:
         c3:1a:82:32:14:83:5a:c8:6d:bb:eb:23:c5:2f:54:f0:f6:9b:
         06:e7:ce:2e:70:bf:72:05:51:ef:65:db:aa:35:ad:87:bf:82:
         a3:4b:97:61:50:41:e8:c1:25:a3:81:26:27:6c:01:f5:a9:8e:
         98:19:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:26:05 2024 by rpki-client on console-ams.rpki-client.org