Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File:                     0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier:          z8Wa8nIUu9ixfez9GJhqalav1I9MafGvK5cOkMRVRI0=
Subject key identifier:   EA:D1:11:99:53:E3:D8:90:01:31:21:C3:3B:6E:54:5F:7E:E6:7F:8B
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer:       /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial:       0191F9D9885704739CF7A1F79FC506371915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number:          0152
Signing time:             Mon 16 Sep 2024 08:01:08 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:08 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:08 +0000
Files and hashes:         1: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: rRjmBUSzDssTQ4snwv8bRPYMk2HvCEn8MVp0BeS38+I=)
                          2: ruKYfofeZOzJmPqnwGm6D75whrg.roa (hash: yB9e6rj9cz6KeAkU544z2N4/13zKw2qEgUqs7AQCAzE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:88:57:04:73:9c:f7:a1:f7:9f:c5:06:37:19:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
        Validity
            Not Before: Sep 16 08:01:08 2024 GMT
            Not After : Sep 17 08:01:08 2024 GMT
        Subject: CN=ead1119953e3d890013121c33b6e545f7ee67f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1d:20:31:a8:48:2f:7c:e8:ca:d2:0f:50:3c:
                    ae:bf:20:5d:19:40:fd:4c:a2:50:15:fb:43:b9:64:
                    75:11:6c:35:42:ac:b6:e1:ff:35:2b:64:e5:f4:12:
                    15:da:7f:43:45:cd:5d:b7:b5:41:a6:f7:bb:b7:f0:
                    05:a0:b4:3e:ce:f0:85:71:4b:c7:20:ba:95:b5:f1:
                    5c:1b:1d:37:c3:f4:8d:0d:e6:d4:60:d8:bf:11:a9:
                    d8:b5:87:1a:ac:49:d0:37:2c:9d:c5:96:20:d9:3a:
                    f0:12:58:3e:61:af:dd:b5:ab:57:35:e8:2d:a5:6d:
                    46:8d:c9:72:76:e4:2a:08:43:ce:95:2a:4b:1b:f7:
                    88:9f:1a:04:8e:e2:f6:e1:eb:17:12:66:99:42:fc:
                    31:0d:2c:a7:94:2d:c1:ee:06:1e:6e:08:d8:92:98:
                    d4:a2:35:1f:b8:83:3b:7c:ad:a6:b0:9c:4b:d4:13:
                    30:ae:7f:69:f3:8a:9d:7d:8c:ad:19:6f:49:02:e3:
                    ac:56:47:30:8b:44:06:5e:eb:4d:db:25:e6:a2:dd:
                    a1:72:cf:9f:4f:a1:87:10:e4:ec:a7:5c:5e:b0:b2:
                    a4:b1:8a:b0:98:c6:c0:44:38:7b:66:d0:1e:5d:da:
                    9d:f3:21:92:76:e8:e0:d7:6e:33:0f:a5:74:30:87:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D1:11:99:53:E3:D8:90:01:31:21:C3:3B:6E:54:5F:7E:E6:7F:8B
            X509v3 Authority Key Identifier:
                keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:22:29:c0:aa:ae:19:66:a9:d6:0a:7e:53:58:2c:85:92:b9:
         99:af:f6:7a:af:e2:11:85:f1:05:02:50:7d:08:13:2a:36:bb:
         1d:cc:f5:4b:47:0f:bd:64:84:41:8d:c5:05:72:c2:91:6f:c2:
         57:dd:35:36:25:dd:05:f1:8e:f1:a4:4a:ba:47:e9:b4:07:93:
         eb:da:57:56:5f:de:f7:0a:bc:1b:c2:ce:4b:6d:93:29:54:ce:
         07:75:b5:ce:05:a7:a9:d9:ea:2d:40:b3:23:b7:3b:5f:df:4d:
         c4:a1:64:81:b0:29:43:c6:f7:dc:0e:c8:5d:76:d2:af:db:d2:
         3c:f1:4b:f1:89:b6:0a:a4:55:fc:45:ca:f5:3b:ee:61:78:2c:
         d9:a1:5b:17:d7:2a:c0:14:a7:a2:ad:d3:5a:42:10:90:95:7b:
         db:ec:f9:8f:9b:2d:da:67:d7:47:a3:01:30:91:d8:72:c3:96:
         90:5c:05:63:ea:28:fb:27:68:ef:ba:7f:99:ad:f9:dd:44:bb:
         86:f4:ee:39:62:3e:11:33:d8:f0:c9:38:64:23:4b:a6:23:80:
         4c:83:99:81:d5:8b:40:03:b9:d4:cd:af:3b:66:2b:ae:57:09:
         07:96:6c:65:97:1f:f1:df:6e:96:34:7f:23:a6:c5:26:58:41:
         e4:94:73:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:15:51 2024 by rpki-client on console-fra.rpki-client.org