Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File:                     0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier:          m+ofYR1OzGGCprEaX5+udO7hyvYEyDV3FnqmrWfhAu0=
Subject key identifier:   86:2A:2A:8D:60:00:6E:F6:BB:36:98:E6:0D:37:C3:48:8E:4F:E2:40
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer:       /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial:       019021C9A8CC2ABCF9560F8717F494D987CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number:          0978
Signing time:             Sun 16 Jun 2024 16:03:02 +0000
Manifest this update:     Sun 16 Jun 2024 16:03:02 +0000
Manifest next update:     Mon 17 Jun 2024 16:03:02 +0000
Files and hashes:         1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: DLOVXmV7yo4YPZQE1DcI1SXiXv0XYAuR3CZl7JyiTMk=)
                          2: ciATZQc93HGhX5gAVAObQTJsAnQ.roa (hash: NYapWYDMa0zMTjlI8Uhxu/x5TjBEXleJzWxS2FLcbss=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 16:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:21:c9:a8:cc:2a:bc:f9:56:0f:87:17:f4:94:d9:87:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
        Validity
            Not Before: Jun 16 16:03:02 2024 GMT
            Not After : Jun 17 16:03:02 2024 GMT
        Subject: CN=862a2a8d60006ef6bb3698e60d37c3488e4fe240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:04:28:d8:43:d7:b9:93:b8:4a:9d:bc:f7:
                    79:28:05:21:0a:b7:ee:ab:b4:6b:a8:ff:01:5d:12:
                    e7:23:70:b1:83:ba:62:26:bc:bb:10:a9:cd:a2:18:
                    69:15:41:fa:2c:85:de:f7:84:1a:dc:9a:3c:6f:4a:
                    7c:9d:30:f8:c9:97:38:5b:41:45:c8:3e:da:ac:f0:
                    cd:df:fe:fb:f6:bb:10:b7:f7:8d:1d:12:eb:20:84:
                    f6:d7:50:14:8e:6d:de:51:b6:3c:46:29:7b:cb:90:
                    dd:a0:03:76:ef:c2:a1:ed:98:e8:b7:ac:a7:d2:cf:
                    13:f8:06:4c:20:a1:39:30:36:8c:c3:5b:d0:12:a7:
                    8c:e5:c0:1d:e7:92:2f:2a:6d:d4:5d:6a:91:fd:b3:
                    f3:ba:e1:a8:d3:9c:19:c2:02:bf:ba:9b:3b:5f:d9:
                    e6:d5:d8:60:af:3c:22:ee:0c:71:11:97:97:1f:f3:
                    a2:7a:ed:42:d5:eb:54:a3:ef:20:fa:45:1a:37:57:
                    1d:ef:c5:29:33:d4:5a:95:ab:06:e1:19:30:40:6f:
                    2b:96:5f:af:95:61:f3:1b:4d:80:35:80:d9:30:b7:
                    53:ae:30:6c:41:9b:81:65:0b:fa:f2:dc:e8:b8:13:
                    5c:81:bf:86:53:6a:12:ff:3c:36:8f:dd:70:19:f6:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2A:2A:8D:60:00:6E:F6:BB:36:98:E6:0D:37:C3:48:8E:4F:E2:40
            X509v3 Authority Key Identifier:
                keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ff:c2:16:4d:49:22:ae:67:62:c3:fc:88:6a:a9:90:58:c4:
         f5:0d:e4:cd:51:23:7c:3b:dc:5c:f0:e1:df:42:fc:ca:91:15:
         b0:e0:ba:1d:3d:d0:36:0e:0d:c0:a8:89:31:28:73:79:c3:39:
         51:60:9a:37:3b:2a:e6:32:76:e8:b5:41:bc:ec:1d:21:dd:ee:
         25:5b:63:40:61:50:6f:db:8d:a3:07:ec:12:e9:63:3f:34:9d:
         c9:13:18:20:f6:ec:19:19:96:3c:11:5f:ad:2c:f5:bc:b7:13:
         92:4d:76:88:d9:0a:bd:b6:45:8e:7e:ac:73:33:01:33:54:14:
         bc:dc:e7:37:93:ad:28:dc:df:3b:ef:ad:fe:d6:0e:90:fc:d7:
         01:47:d3:e1:c8:09:79:ad:54:18:d7:a7:f8:18:cb:2c:8a:b3:
         24:66:0c:f6:be:7d:29:c3:39:4a:c8:d3:ad:bf:41:97:01:07:
         a7:5e:04:fa:0e:0a:f7:49:39:8e:08:56:ae:78:46:97:92:8d:
         67:9b:b4:8a:6c:b3:b0:80:8d:19:45:53:c1:e0:07:1a:89:d9:
         4a:7b:81:c0:c1:e1:d5:e7:5b:d6:63:ce:63:b5:aa:a9:25:2d:
         18:c7:ae:e8:98:af:02:a3:23:f8:51:36:f3:15:6e:d5:54:85:
         66:29:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:47:31 2024 by rpki-client on console-fra.rpki-client.org