Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File:                     dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier:          xcsLajifHzG5jBuMXwUGKPPSeQCwL1n5cW50YDWEFPk=
Subject key identifier:   9A:05:CE:16:32:7E:A0:2B:94:91:D4:F2:A4:D9:85:E5:80:69:19:3E
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer:       /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial:       018F8891CDC1E22CF34152AB947D43062A59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number:          0957
Signing time:             Fri 17 May 2024 22:00:07 +0000
Manifest this update:     Fri 17 May 2024 22:00:07 +0000
Manifest next update:     Sat 18 May 2024 22:00:07 +0000
Files and hashes:         1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: OoeweLqzWT4ASqGDtQ9FnHYa5OV4ayKIMGgwIBfAWTE=)
                          2: zqAcylR6KM19jXxpPTt4DJupqU8.roa (hash: IvbfAZO/+ZLFKIN2lL/NpXAO4jEguwSLKG+/Te8JsMM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:cd:c1:e2:2c:f3:41:52:ab:94:7d:43:06:2a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
        Validity
            Not Before: May 17 22:00:07 2024 GMT
            Not After : May 18 22:00:07 2024 GMT
        Subject: CN=9a05ce16327ea02b9491d4f2a4d985e58069193e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:f1:77:42:69:58:85:0b:0e:cd:6f:34:ab:
                    ac:4d:61:89:08:1b:cf:2c:bc:f0:32:fa:fa:13:4d:
                    5c:cb:2c:11:39:ca:7c:5a:46:bf:c6:90:c3:dc:4f:
                    d9:83:e2:f5:bb:a7:2a:bd:86:0c:06:0c:f9:e9:2a:
                    79:f3:7c:fb:da:7c:1b:1b:eb:b4:e5:06:d6:f8:53:
                    83:7d:3a:0f:5d:08:e5:31:d1:63:50:a6:56:22:53:
                    50:d5:78:8b:ea:04:ed:58:68:ad:6a:05:1e:14:e2:
                    0d:5c:60:b7:f6:99:45:c9:51:b6:54:57:c9:c5:07:
                    50:58:35:ef:c9:1f:25:6e:5f:1d:ea:97:5d:64:82:
                    5f:6e:3d:c4:58:1c:34:4d:c6:c0:16:97:73:4c:93:
                    77:b1:89:7e:f9:a0:20:f9:47:53:95:d8:80:e9:a3:
                    db:33:d5:61:5b:b3:48:fd:37:68:1a:32:f1:05:7e:
                    15:f8:a7:0f:82:36:8f:c7:3f:06:35:88:b7:ec:46:
                    2d:f7:9f:b9:d4:65:57:02:fc:24:ae:4d:f3:56:20:
                    58:2f:a6:86:3c:be:e2:0c:55:0d:a8:76:00:a1:2f:
                    de:20:d4:1c:78:a8:ed:6f:6a:4b:c8:f2:90:8c:00:
                    3c:bc:21:65:45:98:c2:d3:e4:1b:67:52:27:31:1b:
                    15:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:05:CE:16:32:7E:A0:2B:94:91:D4:F2:A4:D9:85:E5:80:69:19:3E
            X509v3 Authority Key Identifier:
                keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:08:83:ac:b1:98:90:5a:18:2d:dd:24:3f:64:0b:28:97:fd:
         d9:e0:b2:0f:b1:e8:85:54:bb:0f:76:09:00:f7:f0:60:7a:ef:
         9c:54:8f:fc:bf:7c:0e:3c:ec:df:ff:b9:b1:4e:c4:2c:cb:43:
         4b:f9:f1:8a:99:1a:3c:5c:d9:30:cd:c8:11:08:82:93:a6:38:
         99:aa:64:f0:cb:87:2b:65:ee:eb:42:80:84:4d:f9:41:a5:51:
         6e:34:c5:32:5c:cf:f4:fe:39:f3:82:72:7e:9f:9a:86:64:2c:
         c1:15:16:10:0a:9b:a2:93:af:28:80:0a:04:94:82:79:35:a6:
         6d:c5:39:c8:b6:61:da:75:22:9c:2a:a5:e8:f0:b8:72:72:4a:
         f2:a6:fb:a9:e7:cb:96:12:6e:76:83:fc:97:3e:69:d4:0b:07:
         da:be:c0:76:5c:51:73:6a:1c:c2:90:85:b5:54:8b:dd:95:9a:
         4e:0f:02:f5:3d:d0:b4:56:99:27:60:a4:63:96:05:0a:9f:de:
         50:fd:00:eb:e7:99:b6:ed:41:68:b6:00:b8:62:8b:42:90:e2:
         2e:6f:9d:36:07:01:56:4e:ca:7f:01:4d:1a:66:ef:73:23:0b:
         74:a7:30:b6:03:06:f7:0e:a3:c1:3a:80:92:2e:a9:9d:36:ca:
         71:d4:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:55:44 2024 by rpki-client on console-fra.rpki-client.org