Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File:                     Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier:          YoNdg7MCPKc6NJhF18XjaDxQT/aUHc41k91AY3kKp/s=
Subject key identifier:   E9:98:E0:7F:38:77:27:C3:B1:28:65:45:6E:6B:93:D3:66:6C:EE:0B
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer:       /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial:       018F3BFA763178EA6C3043859DA29FB2B7D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number:          0566
Signing time:             Fri 03 May 2024 01:03:41 +0000
Manifest this update:     Fri 03 May 2024 01:03:41 +0000
Manifest next update:     Sat 04 May 2024 01:03:41 +0000
Files and hashes:         1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: T+PaI17i+9AAI/KDgGWMYeCIuHkLAluI9SUpsvz+1v0=)
                          2: fMsAmDXf-ElfxuB4cfO4vVxfYRg.roa (hash: E9hwOXgW1VKQCrmhPVbPy70W+V58LLUxxBh2UydIydg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:76:31:78:ea:6c:30:43:85:9d:a2:9f:b2:b7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
        Validity
            Not Before: May  3 01:03:41 2024 GMT
            Not After : May  4 01:03:41 2024 GMT
        Subject: CN=e998e07f387727c3b12865456e6b93d3666cee0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:dc:f7:fc:fc:11:d2:8c:97:a7:b4:e5:5b:
                    0d:25:37:c8:c5:cb:83:22:cb:be:f2:8d:e7:6f:f4:
                    18:3d:14:88:df:eb:b5:68:79:45:a0:62:83:98:0f:
                    a7:ab:ad:b7:6c:4c:9b:3d:f0:74:e9:7d:4a:8d:09:
                    a5:57:86:25:e7:09:56:4b:a9:21:53:ae:ce:2c:67:
                    35:e0:b4:12:83:41:6b:a8:ec:a5:7d:38:e5:bf:9d:
                    fd:a3:21:37:1f:0f:c1:65:90:f8:61:23:77:63:09:
                    57:3c:4d:29:2d:a5:2f:24:4c:89:8b:03:bd:78:33:
                    6b:8e:0c:b0:82:bd:37:c5:2f:e7:6c:3e:b7:89:24:
                    b6:6c:78:08:3a:89:13:a4:60:99:51:15:cf:40:19:
                    ff:27:b9:ef:69:b6:dd:f0:6d:2f:fa:7c:fd:5d:ca:
                    bc:49:fd:a6:e5:fc:3b:7e:79:a7:ec:98:4f:a7:cf:
                    cf:5b:54:af:06:56:e8:45:87:30:c8:d6:37:bb:b7:
                    1a:0a:10:a3:b2:66:0b:8c:c1:24:17:5b:c4:f3:ca:
                    f6:2f:e9:64:3e:6e:5d:1a:36:62:78:11:93:ec:0c:
                    bf:23:b6:f7:5d:67:da:29:c4:3e:02:63:c4:8e:c7:
                    a9:21:52:b7:a2:b3:3c:40:f1:8f:83:e2:87:76:14:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:98:E0:7F:38:77:27:C3:B1:28:65:45:6E:6B:93:D3:66:6C:EE:0B
            X509v3 Authority Key Identifier:
                keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:28:41:a0:7b:07:45:53:46:19:26:69:b3:84:bf:53:b8:72:
         2c:f7:b8:7f:81:e2:33:bc:fb:71:87:48:09:f1:64:7b:79:ca:
         3f:b1:20:aa:d2:e5:ae:fd:68:c7:0a:ad:79:6a:17:79:b2:11:
         49:ca:aa:6f:10:59:46:26:0f:1c:94:28:cc:40:94:c4:b3:d1:
         8b:3a:6b:2f:73:cb:e5:99:1a:24:51:d5:1e:d5:a0:38:0d:44:
         f3:b3:d3:df:dd:55:f6:21:c6:12:d6:ba:2d:d7:94:d0:a3:a1:
         07:3c:6c:ee:ee:c5:b4:6d:13:fc:b7:60:ba:3c:11:06:9e:83:
         8e:e8:56:23:a4:08:be:c3:c8:e6:8c:a0:a4:6c:45:f5:d4:89:
         1f:89:db:d8:17:d3:f7:64:7e:e3:4d:ac:7b:4b:fa:71:05:85:
         08:4d:be:74:9f:21:2e:cc:8f:01:c4:59:f6:02:7d:1b:2f:cf:
         b0:85:3e:c1:d0:e9:54:e1:64:4d:75:88:41:ad:c7:79:6e:01:
         da:70:2b:de:98:20:ce:a2:f5:be:93:55:be:8f:48:50:d5:fd:
         f6:1f:85:1f:22:64:4e:4a:ae:b5:d6:25:4d:10:04:e2:7e:b5:
         d0:b8:4a:a1:2c:83:0e:4b:e4:85:2a:56:bf:27:8b:46:49:06:
         bf:d7:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:36:53 2024 by rpki-client on console-ams.rpki-client.org