Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File:                     9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier:          FZwRNeNgUT/3jsMq/6+3SsFelwNrSUvGMxcpPk8OtM8=
Subject key identifier:   92:0A:37:B8:CC:65:04:2F:47:69:0B:61:31:11:97:59:22:8D:04:A1
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer:       /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial:       018F43B266995A25CE0BC812567E882C249F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number:          114F
Signing time:             Sat 04 May 2024 13:01:56 +0000
Manifest this update:     Sat 04 May 2024 13:01:56 +0000
Manifest next update:     Sun 05 May 2024 13:01:56 +0000
Files and hashes:         1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: F9Eb0tXH/BTdag7SSfMrvrsIIlGADNuQXS7TUhNEaeQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:66:99:5a:25:ce:0b:c8:12:56:7e:88:2c:24:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
        Validity
            Not Before: May  4 13:01:56 2024 GMT
            Not After : May  5 13:01:56 2024 GMT
        Subject: CN=920a37b8cc65042f47690b6131119759228d04a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:26:60:20:0e:8c:e3:73:f4:53:93:e2:5e:
                    99:23:4b:e6:5d:3d:12:06:99:2c:d8:4a:4f:29:ad:
                    5f:19:f6:8f:e1:46:27:2d:54:d4:ad:7a:41:bc:ec:
                    0c:d5:75:21:9d:3a:41:4a:20:6c:49:40:27:70:f3:
                    19:3e:39:33:28:6a:ba:ac:14:91:87:f7:53:f0:82:
                    40:09:eb:3f:82:90:de:ea:9a:50:c6:4b:de:ee:0c:
                    13:9d:c5:b0:25:1b:82:d8:74:6d:70:80:2a:f0:b8:
                    a2:7a:d4:bf:8c:43:2a:01:78:af:e3:e7:84:55:9b:
                    78:6a:ff:de:76:f0:85:f8:f8:31:1d:ee:32:8d:96:
                    b3:6b:96:b4:29:73:28:20:6d:2b:bd:b1:19:6d:4a:
                    f5:da:65:ad:60:cf:ed:11:de:9f:cc:8c:e2:4f:1b:
                    8b:67:c9:ce:24:c9:c4:87:8e:56:58:9a:31:a9:c3:
                    ed:45:70:a3:b2:9a:f7:68:32:6f:5b:0a:8c:f0:b2:
                    5f:2c:e8:37:ff:15:c4:99:2f:56:f1:04:97:16:c7:
                    d3:b3:c8:65:13:96:8b:c9:ce:20:38:ff:7b:49:e9:
                    17:3f:28:44:1d:38:23:ba:a8:1d:a4:6f:ac:99:4b:
                    ad:8e:1d:b1:3a:a1:38:01:5d:7c:e6:82:4b:1b:f2:
                    9c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0A:37:B8:CC:65:04:2F:47:69:0B:61:31:11:97:59:22:8D:04:A1
            X509v3 Authority Key Identifier:
                keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e7:e1:a9:00:62:c2:e5:72:fe:0a:79:0e:2e:fa:fb:50:ba:
         4c:9e:6b:e5:fe:17:00:81:20:c3:27:de:28:b4:c5:ea:2c:9f:
         35:2d:59:4f:60:4a:8d:4b:d7:a4:f2:b1:c8:2a:02:75:04:98:
         b5:3c:1f:27:af:f6:28:b7:05:48:3d:81:8e:ac:96:53:4d:34:
         92:3a:b9:1e:a3:e4:35:fb:77:d3:f6:cb:41:4d:92:02:4e:62:
         66:e3:58:dc:bc:ba:e1:e9:93:bc:8e:21:81:a4:70:31:0d:c8:
         b9:88:0d:df:98:f1:e1:64:33:82:8d:a5:0f:e8:f4:3a:08:c6:
         8f:46:c3:83:12:ad:e4:5b:06:58:70:64:ab:29:57:c4:d2:3c:
         07:cb:bf:dd:d7:8f:f8:59:ed:f6:bf:42:ce:3e:9f:41:ea:0c:
         9b:08:c3:fc:69:8b:45:ba:ed:b6:60:48:a1:c0:1c:46:c0:60:
         e5:6c:b6:6f:a3:ae:d7:51:b8:23:8a:f4:c1:60:80:8e:bc:e3:
         ed:9d:0f:d2:23:e0:8e:b7:11:0a:81:ae:97:45:22:e5:00:76:
         94:d6:08:70:24:49:b0:87:21:c8:c5:37:0e:58:ea:4b:4f:07:
         b7:9f:55:9d:f7:8c:71:35:19:f4:7b:47:33:0f:88:9e:19:28:
         7b:e6:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:22:17 2024 by rpki-client on console-fra.rpki-client.org