Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File:                     n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier:          Cur3FVL7DxdQpWJypIOsSuLOUWsFEv+NbvnLZ2fg7TI=
Subject key identifier:   92:E9:45:84:C3:EB:F6:54:80:57:4B:1D:B1:A6:EE:BA:1E:DD:0E:A9
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer:       /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial:       018F8749F8307B915F7DD1C310ECA6FF26E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number:          0CE2
Signing time:             Fri 17 May 2024 16:02:02 +0000
Manifest this update:     Fri 17 May 2024 16:02:02 +0000
Manifest next update:     Sat 18 May 2024 16:02:02 +0000
Files and hashes:         1: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: jOY3rKpxXFADNbCVVDkMAsjjwfr6v4ZIhgC6Cv+zcJI=)
                          2: yaj2IQ16nNjJwCAaigO50zZoMqM.roa (hash: SzfrMdYeKIt2EKK8d35zC8Jnu1ICIxShzBAEnclIpI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f8:30:7b:91:5f:7d:d1:c3:10:ec:a6:ff:26:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
        Validity
            Not Before: May 17 16:02:02 2024 GMT
            Not After : May 18 16:02:02 2024 GMT
        Subject: CN=92e94584c3ebf65480574b1db1a6eeba1edd0ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1b:79:ac:e7:4b:e2:dd:b9:06:60:ed:a6:21:
                    8b:ec:27:9f:90:1e:6a:f1:c5:dd:d6:04:05:b7:52:
                    59:23:3b:47:cb:e2:71:44:41:9d:7c:99:1f:8a:d4:
                    0e:25:15:87:4a:18:24:f4:ec:29:20:79:e0:f3:77:
                    7b:96:aa:ba:eb:5c:9c:3d:8f:57:b7:28:1f:4f:4e:
                    da:c7:5b:8b:be:f1:cd:78:91:6c:74:c5:08:22:43:
                    cf:91:00:eb:d6:c2:39:06:03:23:1c:bd:2e:fc:59:
                    0b:e0:c8:44:a2:a9:88:90:64:b3:97:5d:68:a3:5e:
                    bb:fa:3d:09:f6:f1:15:51:54:2d:7a:47:dc:3e:9f:
                    80:48:ba:f0:f1:98:fd:22:e6:ef:27:6c:9a:64:3e:
                    a8:c2:27:98:a7:eb:60:6a:42:9e:78:3d:49:c6:3d:
                    ad:7d:3d:d1:16:be:0d:3d:ef:88:77:28:c3:07:27:
                    60:3b:09:e2:cb:f6:18:38:72:01:cc:9a:76:6f:53:
                    58:6d:f3:d8:2f:3a:6f:77:10:d9:c7:a9:0c:c4:c3:
                    28:99:c2:f9:ae:c0:ce:7c:ce:82:12:48:92:ef:85:
                    ab:00:01:94:5c:37:87:ae:c1:3d:ce:f3:3a:c4:33:
                    4b:fb:c3:6b:ea:8d:0b:20:94:9a:36:eb:56:90:0e:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E9:45:84:C3:EB:F6:54:80:57:4B:1D:B1:A6:EE:BA:1E:DD:0E:A9
            X509v3 Authority Key Identifier:
                keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4f:03:d4:d1:a4:db:e7:24:4b:e0:36:b8:ff:3b:5b:1e:76:
         aa:c9:8b:c0:fc:a4:fb:17:4d:f1:50:69:ae:07:ad:94:40:f3:
         84:1d:e3:f8:ec:7c:54:87:74:e5:20:8e:50:db:ba:50:5d:80:
         dc:e8:39:8e:f9:42:5d:ac:65:f2:f0:00:c2:f8:30:52:33:c9:
         44:de:e5:6e:e1:75:97:52:12:a0:0d:3c:2c:7c:bc:7f:73:5e:
         36:bf:b6:f8:23:b1:eb:37:fc:c7:9b:45:6f:9b:29:31:83:58:
         67:8c:d8:7f:ab:8d:f3:47:e3:33:f6:54:08:3d:62:f1:a6:5a:
         54:6e:98:ee:2a:c7:4b:b9:53:0f:50:e5:d2:ac:b0:53:5a:a6:
         e0:6a:22:e1:7f:6c:3b:84:d8:fe:d0:a2:8e:d5:60:25:70:29:
         50:85:44:f5:3f:7d:03:b6:03:95:64:89:ea:e3:10:6b:7f:ab:
         cc:a0:ab:2f:ba:88:53:56:cb:6b:86:b9:fe:8b:68:c5:75:b1:
         19:c8:f7:43:00:6e:d0:4e:4b:63:bc:14:40:62:c7:7c:fc:f9:
         c0:63:53:c9:d1:c9:28:bb:0f:0b:0e:dc:38:1b:f0:4f:70:26:
         77:6c:af:c2:78:e5:08:37:2e:fd:4e:31:db:17:ef:71:e5:20:
         59:41:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:41:56 2024 by rpki-client on console-fra.rpki-client.org