Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File:                     0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier:          XufwThXPYhF9kUbkHtUVk84gPN7Rs5dLbwvhQ/eIn5k=
Subject key identifier:   E9:C2:AD:01:E1:C1:8D:38:60:2C:E8:73:EA:8A:A2:27:6E:3C:64:33
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer:       /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial:       018F20EE1D32756C2344D86D723070B8AA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number:          1072
Signing time:             Sat 27 Apr 2024 19:00:26 +0000
Manifest this update:     Sat 27 Apr 2024 19:00:26 +0000
Manifest next update:     Sun 28 Apr 2024 19:00:26 +0000
Files and hashes:         1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: 8tbpNyAB99W3gSeqHQYU4Lx9xvZWhg/ZMcCXj3IZnt8=)
                          2: qB68wWlAfVE0WZem12ITO9mNfz8.roa (hash: RtR4J4LXdNwVG9AdzOsE/UeU6RzRxSIe/MZPPfyjL18=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:ee:1d:32:75:6c:23:44:d8:6d:72:30:70:b8:aa:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
        Validity
            Not Before: Apr 27 19:00:26 2024 GMT
            Not After : Apr 28 19:00:26 2024 GMT
        Subject: CN=e9c2ad01e1c18d38602ce873ea8aa2276e3c6433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:09:da:9d:d5:d1:f9:c2:24:0f:1b:23:22:a6:
                    8f:f9:1c:90:67:96:8a:55:fc:b9:e2:df:55:71:2b:
                    12:a3:28:7d:a6:d0:f1:c2:47:8f:24:49:bd:c5:24:
                    89:1c:7c:6f:76:44:ea:93:0d:f3:f4:88:ff:eb:ea:
                    a9:21:3c:6c:84:5a:a6:aa:6b:d9:0b:9f:2b:43:51:
                    2a:e0:cf:df:9b:f8:a0:80:6c:94:9f:d5:9d:cc:be:
                    b8:13:82:fb:5d:51:1a:13:a0:e7:6f:c5:ec:fd:fb:
                    a4:ae:32:d2:16:a3:e6:ac:29:79:14:f6:f8:88:40:
                    c7:ab:f6:2a:b3:34:39:8a:29:fd:b5:f2:33:7f:28:
                    c1:54:e1:2a:b0:98:a5:49:f4:6b:d8:b6:7a:7a:0d:
                    e7:d2:c2:fa:58:83:bb:cf:64:b2:b8:8c:c4:0d:43:
                    08:89:86:84:3f:00:76:d9:18:05:82:b5:cd:ea:2f:
                    4b:54:89:99:90:03:c9:c2:f3:f5:a8:9c:49:d2:ac:
                    4d:f6:73:6a:cd:1b:4c:e6:73:a9:96:6f:1c:87:6a:
                    44:28:a7:83:12:af:f1:61:5c:05:50:ff:3c:ad:c0:
                    ac:60:be:b4:7c:3f:a2:10:45:43:d9:30:91:31:ec:
                    9d:dd:1a:3d:c2:2b:01:df:80:79:6e:fc:1d:64:42:
                    59:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C2:AD:01:E1:C1:8D:38:60:2C:E8:73:EA:8A:A2:27:6E:3C:64:33
            X509v3 Authority Key Identifier:
                keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e2:fd:8c:c5:ae:b0:32:bb:ad:e9:dc:cf:3e:9b:99:61:a1:
         7c:97:1d:78:1e:4d:ff:ab:3d:d0:43:40:f4:5c:cc:6b:57:79:
         55:98:11:30:56:6e:74:4b:b7:d3:b0:65:06:db:50:28:e6:30:
         4a:67:3a:3c:5c:26:6e:a7:77:d6:11:05:e3:e1:6d:4e:35:48:
         5c:94:18:d4:22:1b:75:03:ac:23:23:87:9d:0b:ae:f1:a2:c3:
         2c:62:1a:87:76:d0:8e:eb:d2:68:be:af:3e:46:a6:1a:3c:02:
         03:25:65:12:ff:a1:75:98:99:7d:08:92:f9:9b:37:0f:51:0d:
         a8:fe:e7:d7:0b:fd:4d:c6:ea:49:94:94:b8:2e:b9:f5:b9:08:
         b8:ec:10:f0:00:70:99:03:08:49:4d:77:14:6b:34:74:f7:15:
         c0:48:db:4e:3f:04:11:0c:37:c5:5a:b2:13:ca:74:88:fb:bf:
         c3:42:71:4a:4e:e1:8e:0d:61:de:34:66:7b:5a:1c:9b:3f:d9:
         23:ac:a0:bb:af:79:83:77:59:9f:42:91:c4:d6:fe:ba:82:37:
         b3:7a:21:aa:8c:e4:01:98:c6:04:11:24:42:04:db:d9:e1:38:
         34:2f:c2:1c:da:91:6b:2d:2d:d1:ed:a0:49:cd:a6:4c:b8:74:
         ac:00:49:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:33:03 2024 by rpki-client on console-ams.rpki-client.org