Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
File:                     Fo8OK6LQk0M6S2EpVye5m7FF93s.mft (raw, json)
Hash identifier:          LOEMROvubFDMai0/5eKy7yny+Sr+UBaMrQwppxC9xdU=
Subject key identifier:   37:AC:EA:15:DF:63:CA:23:A8:16:82:BA:D9:BB:37:23:A5:E9:9A:A9
Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
Certificate issuer:       /CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Certificate serial:       018F98AA0988398826FDDA19272B1CAC319A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
Manifest number:          0101
Signing time:             Tue 21 May 2024 01:00:31 +0000
Manifest this update:     Tue 21 May 2024 01:00:31 +0000
Manifest next update:     Wed 22 May 2024 01:00:31 +0000
Files and hashes:         1: Fo8OK6LQk0M6S2EpVye5m7FF93s.crl (hash: kRf+5JBafNUnUDYSrnlW4lK4G+LJp8V9kVp+cjoTa24=)
                          2: qGmUTGYJ18rygAENbfEbDARXfyI.roa (hash: bdTMLd8EtxYw/Zl8CMtCXGkDL3CtNGBRAfn2fmwi5x4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:aa:09:88:39:88:26:fd:da:19:27:2b:1c:ac:31:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b
        Validity
            Not Before: May 21 01:00:31 2024 GMT
            Not After : May 22 01:00:31 2024 GMT
        Subject: CN=37acea15df63ca23a81682bad9bb3723a5e99aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:9f:f2:eb:53:00:59:8d:9c:c7:ec:03:0b:
                    ec:bb:89:93:ed:a7:91:f5:c8:8f:b1:22:6b:24:dc:
                    c3:73:22:39:3e:74:f5:f3:02:e8:be:11:99:03:83:
                    26:aa:bf:93:df:6d:e0:7b:a6:3a:27:51:53:3b:35:
                    0e:d7:a9:a8:ad:2e:fe:00:89:a6:2a:93:63:fe:46:
                    78:d6:fc:dc:dc:1b:dd:b2:c8:18:0f:11:4e:42:9a:
                    86:e4:26:b0:76:14:27:6d:b4:9a:c0:c2:28:b6:17:
                    53:8e:05:d5:1a:84:43:e7:74:38:a0:32:56:54:91:
                    7a:02:72:cf:83:ef:fc:37:3e:e3:35:f2:e3:d7:63:
                    cb:16:67:3c:df:8c:9f:3d:57:05:e9:0b:47:7a:88:
                    1c:2f:96:c9:74:f5:51:e6:29:28:43:07:ce:ac:27:
                    22:56:7e:30:f6:8a:99:6c:c3:92:cb:70:c4:24:6b:
                    af:86:bb:35:85:9b:30:8e:71:07:11:2f:37:51:34:
                    4e:f1:12:30:25:d4:f5:a6:3e:85:23:17:40:68:2b:
                    a9:1e:09:0b:d7:c3:89:fe:6e:bd:c3:ff:e7:a7:25:
                    72:49:5e:3e:80:a7:4c:c0:34:b1:13:e5:8d:a2:09:
                    30:05:91:fa:3f:97:1a:4c:71:98:3c:15:f6:85:c5:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AC:EA:15:DF:63:CA:23:A8:16:82:BA:D9:BB:37:23:A5:E9:9A:A9
            X509v3 Authority Key Identifier:
                keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d4:8b:20:5c:6c:bf:99:b0:ab:85:12:8a:e8:7c:16:42:d7:
         f5:0b:7f:25:33:65:4a:ce:3f:13:d7:25:0e:e4:2c:1c:5b:3e:
         aa:45:1d:43:80:12:ac:7b:03:d4:07:2d:09:76:9e:e1:92:7b:
         8d:1b:58:24:47:5a:07:e8:af:66:59:ea:0a:f2:45:de:46:23:
         97:51:3d:dc:e3:8b:40:97:b1:18:f5:ef:1e:21:d8:2f:f4:62:
         32:1b:32:87:bb:14:da:99:f5:c4:cd:c4:14:f9:fb:14:7f:91:
         4b:6e:f9:96:71:2e:07:98:f2:c5:b4:62:25:5e:9c:50:de:98:
         ec:cb:7e:8b:39:79:08:04:50:28:f2:7b:e1:1e:6b:05:e6:d4:
         cf:1d:af:22:d6:4c:c5:12:c1:ee:7b:8b:91:38:88:a5:4c:e5:
         64:04:fb:8f:b3:f4:f4:d3:aa:2d:33:89:7f:30:4b:dd:d4:61:
         ef:25:04:94:1e:b5:76:48:7c:08:cf:47:23:e9:5c:e6:3e:c9:
         db:dd:c9:92:3b:21:9c:dc:e7:e4:43:db:85:2e:97:24:22:fa:
         c5:f7:9f:b3:87:66:7f:8d:fb:bb:b6:68:e9:ed:c0:1f:11:5c:
         ac:eb:54:54:4b:64:a0:0c:e6:10:9f:65:56:b2:9d:0e:42:73:
         f2:a9:55:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:25:14 2024 by rpki-client on console-ams.rpki-client.org