Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File:                     9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier:          tywUgoHOTpGuLrgVVsBVMTuSIz07f7wC3JKkf48+seE=
Subject key identifier:   79:1E:BA:CA:A9:B5:1B:FC:01:5C:26:38:93:3F:86:80:65:FF:15:70
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer:       /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial:       018F4CB50E64FE98770BEADEA69AFFE89D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number:          0F29
Signing time:             Mon 06 May 2024 07:01:24 +0000
Manifest this update:     Mon 06 May 2024 07:01:24 +0000
Manifest next update:     Tue 07 May 2024 07:01:24 +0000
Files and hashes:         1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: wVFLIlPM9qCOkeYAs8KT5cBWcagMwTuLjvmYFNqpP7Y=)
                          2: UkFDmZlP7sJGCE2UTx4IbrRuT9k.roa (hash: pKnaU4HjoehLZFiOboepsBcbv/6O5j8TGl42vqVYZkw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 07:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b5:0e:64:fe:98:77:0b:ea:de:a6:9a:ff:e8:9d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
        Validity
            Not Before: May  6 07:01:24 2024 GMT
            Not After : May  7 07:01:24 2024 GMT
        Subject: CN=791ebacaa9b51bfc015c2638933f868065ff1570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:92:ef:f6:75:19:16:be:8e:97:c1:e4:19:
                    21:eb:3c:6c:20:ce:58:9f:11:5b:b0:0f:5c:8b:7a:
                    dd:1c:d3:96:7b:a6:09:a9:5b:2e:e4:08:5a:33:64:
                    a2:1d:21:29:da:bd:09:97:30:b8:0e:cf:dd:a9:d4:
                    77:82:2b:d0:c8:c0:ea:cf:3f:f4:9c:0a:62:d9:53:
                    ec:58:75:1d:ad:15:72:65:1a:55:21:a7:2a:73:a3:
                    78:6e:c4:52:2d:3b:f6:64:73:d2:2e:d9:3e:45:bd:
                    5e:7a:c0:8d:62:20:37:5b:0b:19:6c:71:98:b8:c6:
                    e7:36:dd:a0:37:d7:6c:b0:c9:47:00:89:00:b7:2d:
                    90:cd:87:f0:ec:ba:d4:98:04:f9:97:98:70:8d:8e:
                    89:d2:b5:64:fd:fd:b6:98:c6:76:26:fb:c4:d5:65:
                    a1:c7:cf:3d:4e:8e:2b:fa:b0:fb:c5:80:d9:ed:86:
                    7a:10:0b:4c:66:88:e6:65:ab:2e:7f:d1:dd:0a:a4:
                    73:63:02:c2:16:e9:dc:9a:5c:fb:71:2c:a0:2b:c6:
                    79:73:9a:dc:93:46:17:34:cc:da:28:38:60:9f:3e:
                    61:5b:fd:37:64:0c:10:b6:5a:33:9b:32:93:dc:12:
                    d1:a2:27:73:2d:fa:15:0c:c9:93:1a:50:5e:62:08:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1E:BA:CA:A9:B5:1B:FC:01:5C:26:38:93:3F:86:80:65:FF:15:70
            X509v3 Authority Key Identifier:
                keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:97:af:f0:60:00:ac:19:8d:ec:5b:a7:f3:b4:41:ff:9c:fb:
         8f:fc:42:f6:65:32:24:f3:25:67:08:07:9c:52:dc:00:32:ae:
         53:8c:fa:d0:b7:0d:ad:7a:d0:35:f4:b6:e3:58:aa:48:17:eb:
         8f:c4:31:90:5b:51:f9:7b:42:ee:60:2d:3e:b3:4f:cb:1a:03:
         47:ce:09:b6:d8:96:af:35:e0:16:89:be:77:a6:3f:4b:0c:8c:
         20:82:79:20:5d:84:bd:a3:14:86:06:fd:a1:36:48:7e:70:61:
         f6:ae:9f:11:8f:0d:90:a8:f5:3a:aa:d2:84:64:a7:65:fb:4c:
         05:0b:cb:7b:36:9c:4a:9e:0f:b4:00:13:9d:f2:40:11:05:d0:
         36:0d:05:81:1e:10:bd:55:1b:61:a0:68:95:96:55:d2:64:d6:
         cf:b8:34:1f:a5:aa:8e:5e:d3:4b:14:83:5d:9f:a8:89:6b:54:
         a6:69:c6:55:2c:49:54:25:34:3e:9b:be:ef:dd:fe:7a:fe:80:
         05:9b:da:9c:c3:a0:21:bc:d4:84:ec:e5:19:07:6d:99:02:c9:
         71:61:60:bf:22:88:44:a1:0e:a5:e8:d4:98:78:5c:60:81:d6:
         aa:cd:c5:fb:0d:6d:0c:f0:1f:f8:73:43:87:65:25:f3:fc:ae:
         d3:dd:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:35:21 2024 by rpki-client on console-fra.rpki-client.org