Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
File:                     0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft (raw, json)
Hash identifier:          J3XLY6rqMqVYEZVcBNLGa5hyZVo2UehDV885pv/byGU=
Subject key identifier:   00:BF:4B:BA:61:83:01:DC:14:B5:68:EF:C2:51:45:4A:F5:F9:5A:0E
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Certificate issuer:       /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial:       019357D291C32E42BB952E7B8B71DCCF4453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
Manifest number:          0E21
Signing time:             Sat 23 Nov 2024 07:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:37 +0000
Files and hashes:         1: 0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl (hash: AiGKckvVSfczeeC7Dzrvxt+gsSFHwRdM8mjXZnM0ZqM=)
                          2: STrQR7BL2DdUIi9e7eHYXN3k5C0.roa (hash: 4VWOj8ykdfZtEaW3PLRsc2/34D/WZpbJdY6OyT4CklA=)
                          3: xth1GvYA9-e2JhE6MBVN6QxGko8.roa (hash: Gash3nloJCHtpyViMUobhPqs2M7YVxxa56n5SacnKsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:91:c3:2e:42:bb:95:2e:7b:8b:71:dc:cf:44:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
        Validity
            Not Before: Nov 23 07:00:37 2024 GMT
            Not After : Nov 24 07:00:37 2024 GMT
        Subject: CN=00bf4bba618301dc14b568efc251454af5f95a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:e1:34:13:90:9b:fa:b0:d9:b5:78:b8:ac:
                    24:7c:44:6b:92:9a:85:e9:b8:05:4b:fa:24:04:e1:
                    96:b3:38:01:5c:71:1f:f5:91:35:6d:ac:65:bc:98:
                    89:75:98:1e:03:d5:13:cb:eb:ff:c1:19:27:4b:54:
                    2e:a1:6d:49:37:36:6a:db:25:91:ad:90:ae:52:be:
                    68:30:3b:61:c6:ac:40:b6:64:bb:02:47:4b:ff:16:
                    fe:3e:c8:d8:6e:b8:41:f7:28:7b:e2:54:10:9f:87:
                    3d:6b:a3:bb:7b:83:36:3f:f5:4b:67:20:98:22:dd:
                    23:9e:3c:c8:d7:69:f7:9c:47:e7:48:00:db:63:db:
                    d2:6f:82:7c:4c:df:d4:25:71:1c:ad:c2:9e:c2:f7:
                    84:0f:fb:10:25:72:86:d7:44:b2:74:04:b1:6e:bc:
                    39:36:da:1e:ac:83:4c:da:e6:f2:1d:3e:83:2e:2d:
                    91:c5:67:a4:6a:a8:cd:4d:87:f7:70:6d:53:b8:5f:
                    77:62:88:00:89:e6:c4:d8:f0:fc:66:89:68:5c:0e:
                    18:d2:1a:6c:77:9b:69:87:0f:2d:d1:f6:f4:44:f1:
                    22:79:de:8c:5d:9b:27:4c:c5:0b:bd:f0:54:42:e4:
                    f4:42:28:30:9c:ba:96:28:08:79:bb:1c:f7:c1:37:
                    c9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BF:4B:BA:61:83:01:DC:14:B5:68:EF:C2:51:45:4A:F5:F9:5A:0E
            X509v3 Authority Key Identifier:
                keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d0:2b:a1:4a:70:ce:43:50:52:b8:01:3e:7e:c4:99:c5:e6:
         ad:06:05:14:1f:7e:dc:b6:55:83:b8:fc:67:64:73:83:93:ac:
         b3:30:47:93:48:85:37:6d:fb:f1:37:2a:4d:ac:17:b3:32:f1:
         80:27:02:02:d7:c7:7b:64:76:1c:46:37:03:91:84:22:19:4c:
         a1:52:51:1b:a0:d3:a2:49:dc:69:f3:d6:c1:49:07:84:9b:ff:
         2c:33:f8:bd:97:63:5c:9e:6b:17:a9:a4:48:13:47:77:28:15:
         7a:70:16:89:c0:f8:68:75:3c:8e:81:33:08:a5:43:3d:82:ea:
         b0:8b:bc:5e:57:92:5a:ab:2e:18:00:b5:b7:5c:2f:4c:2b:e9:
         22:7f:0a:c4:b2:e3:96:5b:56:8e:c4:61:bf:8d:67:25:56:69:
         7b:70:a8:17:df:ab:f0:57:a3:12:2f:11:cd:44:30:6b:c8:db:
         50:64:92:b4:d3:f1:bc:21:22:8b:d5:15:25:fa:eb:da:ce:9e:
         a1:a7:fa:5c:8b:8c:e6:a6:94:b1:7c:b4:c1:da:8c:f3:b8:72:
         34:0d:b2:2e:c9:6a:75:a7:2f:9a:28:49:29:56:34:0d:9f:a9:
         69:17:81:6c:11:a4:60:0b:d9:eb:e1:3d:3b:6f:2e:7b:4a:e5:
         14:a5:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:08 2024 by rpki-client on console-fra.rpki-client.org