Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File:                     9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier:          ERF0SlBjAsp41WzEr1nyzMl+whIJQkMBI9LKhftctjw=
Subject key identifier:   8C:6A:5E:F0:B8:26:51:71:DE:6F:B2:9D:CD:C1:51:C1:FC:F4:EC:5A
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer:       /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial:       018F4C1034A9A1A8B10C464AC885DDBA06FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number:          0FCE
Signing time:             Mon 06 May 2024 04:01:21 +0000
Manifest this update:     Mon 06 May 2024 04:01:21 +0000
Manifest next update:     Tue 07 May 2024 04:01:21 +0000
Files and hashes:         1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: Yjdq9XtF2/r4F1TrB4UTvc7uv456Pkg6VSpniRdF9Ak=)
                          2: CP1eCKxKJK4yxHojhn69x846Fr8.roa (hash: NRE0vxexLmk89VN3wq8mRClcgJ9nOSvP67JRniz0xNo=)
                          3: miz2H_HUj0t370Uf87CcanT4HuA.roa (hash: G4t42NHlxbaJn0FBMROUHfBWF1rEcbgYt27SpH6Es48=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:10:34:a9:a1:a8:b1:0c:46:4a:c8:85:dd:ba:06:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
        Validity
            Not Before: May  6 04:01:21 2024 GMT
            Not After : May  7 04:01:21 2024 GMT
        Subject: CN=8c6a5ef0b8265171de6fb29dcdc151c1fcf4ec5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d0:c8:ec:c4:77:e2:d4:68:88:a5:86:fd:1d:
                    e7:73:e8:5a:05:77:e8:d1:d0:14:c8:83:28:a4:b2:
                    fe:9e:46:ea:8a:6f:d3:74:3a:59:34:be:8b:4a:39:
                    c7:32:08:dd:5b:bd:ec:89:f4:17:e5:12:2e:fd:5a:
                    76:76:e8:9d:f4:66:75:47:a1:d2:f2:59:f7:83:d4:
                    fe:1c:8f:dc:45:17:bd:22:30:bc:99:2a:fa:46:c6:
                    95:13:6b:f7:ec:56:34:e1:0f:57:9e:65:da:ed:f2:
                    39:66:bb:dc:26:9b:6e:1d:2c:b1:eb:39:df:8c:c9:
                    c9:bb:3c:0e:f4:f0:f2:86:40:78:f0:d3:10:fd:d2:
                    88:d9:e4:c7:c0:3f:db:74:d9:07:33:c0:8b:67:01:
                    e1:4d:14:57:15:2e:dd:b4:77:7d:19:53:fb:69:82:
                    82:7d:85:bd:dc:de:bd:38:d6:86:fd:03:8a:65:fc:
                    03:02:73:75:19:33:92:2b:1d:df:04:22:10:f6:82:
                    6d:56:ab:c1:75:0f:f0:e3:a3:80:33:72:de:1f:4c:
                    bc:97:82:3f:22:96:68:26:6d:ec:2b:bc:85:2b:21:
                    d6:5a:d4:f2:ca:a7:26:59:9b:ab:82:20:11:74:72:
                    83:9c:d1:71:8c:55:53:28:8a:9d:ae:61:1c:b1:05:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6A:5E:F0:B8:26:51:71:DE:6F:B2:9D:CD:C1:51:C1:FC:F4:EC:5A
            X509v3 Authority Key Identifier:
                keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:24:6e:98:38:74:0b:df:6a:03:18:00:da:9a:03:ab:bc:ae:
         bb:39:d5:da:e7:ec:fb:9d:8e:d5:ba:8d:a0:44:ee:1e:ae:2d:
         18:a8:65:7d:0a:a2:af:8f:a6:e6:cf:76:c9:9d:fb:00:f5:d2:
         82:9a:cc:6c:48:23:54:29:6e:c9:73:63:24:c2:23:73:d4:3e:
         cd:90:69:68:68:11:f0:1e:71:0d:cd:ce:20:72:a3:4f:19:6e:
         89:b9:6b:35:42:4f:51:f9:56:be:18:d5:cf:0f:bc:7e:42:35:
         e4:d4:7d:fd:d2:bd:8a:57:3c:14:fb:0c:24:39:45:e1:a6:3a:
         3f:12:e1:ca:1f:fb:d2:f6:17:0a:5f:31:e2:50:4a:d7:e4:e2:
         be:c8:06:31:36:0d:1a:74:fc:de:81:7f:48:96:df:37:fc:32:
         f1:dd:0a:38:c5:8e:69:c0:78:ab:5f:25:53:b4:bf:fa:31:66:
         3c:d8:24:0f:0f:be:c2:46:b8:9d:43:5d:3c:b9:88:d5:59:ac:
         07:85:ce:91:78:ab:dd:83:9e:36:c8:a4:34:7c:91:84:40:fc:
         33:b2:0f:73:7a:cf:20:e2:c2:23:4c:7c:e2:06:18:e6:e4:2a:
         71:8f:f2:ab:cf:bd:13:e3:70:6d:41:8d:af:ab:0c:f9:b7:da:
         cd:33:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:30:46 2024 by rpki-client on console-fra.rpki-client.org