Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File:                     pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier:          /cCA88Hwt45gGcVy9GdiDpoJ/HFEQBcQ1yrj+lFug0c=
Subject key identifier:   45:D3:7C:2A:5B:88:94:3F:E6:11:CE:B0:C9:F8:C4:A7:EE:6A:F5:0F
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer:       /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial:       018F87B68258A8457954F42D9CC69B5872E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number:          0E19
Signing time:             Fri 17 May 2024 18:00:36 +0000
Manifest this update:     Fri 17 May 2024 18:00:36 +0000
Manifest next update:     Sat 18 May 2024 18:00:36 +0000
Files and hashes:         1: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: 38nEeTGQZ0mqA3bmrF2l4L7VpdxAXeYYRWwio0PwCu8=)
                          2: ub4OxjYJpzcfpTgkKyzYZu3RSPU.roa (hash: e0dSkfwmxgS7I9SDYqnLA66JuAF8IH2if8pg1z7TcpA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:82:58:a8:45:79:54:f4:2d:9c:c6:9b:58:72:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
        Validity
            Not Before: May 17 18:00:36 2024 GMT
            Not After : May 18 18:00:36 2024 GMT
        Subject: CN=45d37c2a5b88943fe611ceb0c9f8c4a7ee6af50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:7e:06:fd:97:73:06:04:0e:f0:21:11:03:
                    dc:43:44:f8:0a:79:20:07:69:52:d4:d7:31:27:0b:
                    1e:02:53:94:ac:d5:82:71:df:80:db:b8:98:18:fc:
                    9a:68:fe:b6:dc:8b:94:6a:83:53:b9:7c:2f:80:0b:
                    63:4b:2b:f2:3a:f7:3c:6e:8c:f0:65:55:6b:5b:81:
                    e0:de:9a:ae:e1:1e:ff:43:cd:15:3c:35:47:e7:49:
                    20:39:ff:05:19:4e:ed:6a:18:c2:8f:12:a1:ae:a0:
                    76:db:0a:7e:00:da:00:95:a7:81:3b:f8:7e:42:41:
                    91:c7:47:42:72:17:a8:26:0f:03:2b:c5:79:3f:94:
                    65:96:68:cd:ee:ce:a7:d0:0c:e5:68:7e:a6:90:31:
                    90:c6:a4:a7:67:3a:02:25:19:82:73:6a:c7:4e:b4:
                    62:d1:2d:67:aa:59:4c:2b:e3:64:9f:91:7b:2f:86:
                    89:4c:73:60:92:a9:fb:e7:0b:f4:e3:a3:cb:6f:8a:
                    d5:cc:95:57:86:69:6b:c7:0a:fa:50:57:e1:5d:79:
                    47:04:1e:2b:40:bd:24:ad:ef:45:a7:e6:43:b7:87:
                    ee:f3:f1:c9:24:4c:5c:32:e1:45:3e:86:b3:ff:74:
                    27:86:dc:a8:9e:1b:b1:23:04:02:ee:6d:2b:70:6a:
                    b2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D3:7C:2A:5B:88:94:3F:E6:11:CE:B0:C9:F8:C4:A7:EE:6A:F5:0F
            X509v3 Authority Key Identifier:
                keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:77:5b:ec:b3:77:4b:92:f3:59:0a:5b:e9:2b:34:bd:21:58:
         fd:1e:ee:26:11:dc:08:ad:09:08:9e:58:7d:ff:01:e8:44:e8:
         ac:45:4c:05:1f:30:0a:dc:08:be:68:1d:10:15:14:15:94:f2:
         39:78:5f:8b:e4:42:93:55:cf:2e:40:8e:66:9f:84:1f:72:11:
         ba:c6:13:b8:49:eb:1c:72:88:2f:54:7e:50:b1:8e:62:58:bf:
         ea:ec:67:f4:14:4a:32:eb:da:67:4e:d0:a4:cf:01:3d:64:20:
         da:44:48:ed:ce:06:df:bd:5d:97:39:c7:c9:8d:74:6d:f7:a9:
         3f:c4:b0:9f:1d:8c:98:80:2e:89:ec:46:97:f4:b3:28:82:40:
         48:70:61:fd:fd:93:9e:f6:21:52:1f:66:43:d0:c4:c6:ad:84:
         7c:39:2c:a3:5c:99:40:ef:a8:32:ee:fe:6f:33:af:e7:aa:f5:
         2e:7f:25:b6:6b:72:a2:d9:c3:cc:35:f4:e5:ab:b2:15:6f:a4:
         8d:6b:4b:b1:48:61:35:13:e0:5d:bc:70:43:b3:d5:47:b1:a1:
         d9:1d:76:64:76:8c:7d:a8:52:bd:74:aa:dc:4b:a8:a4:f0:78:
         01:22:bf:41:35:c8:ce:b2:48:da:b3:7b:a0:16:c4:10:ff:15:
         5f:21:a8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:01:45 2024 by rpki-client on console-fra.rpki-client.org