Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
File:                     0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft (raw, json)
Hash identifier:          6q9Jv30JbDu0lTuzYB4oIZD0Qeak8/tOwpKdFa0Mm5g=
Subject key identifier:   AE:9A:72:D9:A6:12:1A:33:EE:EF:CC:12:45:47:1D:62:34:93:FB:C7
Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
Certificate issuer:       /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Certificate serial:       018F7BB270D785A0831947B2AC888CE4EDA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
Manifest number:          1172
Signing time:             Wed 15 May 2024 10:00:42 +0000
Manifest this update:     Wed 15 May 2024 10:00:42 +0000
Manifest next update:     Thu 16 May 2024 10:00:42 +0000
Files and hashes:         1: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl (hash: qWFUb1wp4cOVU+jMirkbBq2bG79aW3vzrKn2RSGHaz0=)
                          2: FuOG29ocQHRhgP6CDn5E7DrO18Q.roa (hash: Sn+6ISTJgp5vgYg5EldyecK0d1G7gmZcudtCHryntBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:b2:70:d7:85:a0:83:19:47:b2:ac:88:8c:e4:ed:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
        Validity
            Not Before: May 15 10:00:42 2024 GMT
            Not After : May 16 10:00:42 2024 GMT
        Subject: CN=ae9a72d9a6121a33eeefcc1245471d623493fbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:5b:b8:c5:29:2a:28:54:27:e9:aa:30:a6:
                    9f:98:b7:1d:7f:79:26:0d:e4:07:02:14:24:01:2b:
                    5b:8d:2f:85:42:2b:c0:bf:f0:d5:08:e6:51:dd:57:
                    c0:76:d4:b9:8e:bd:fe:59:a7:49:44:f7:bb:c6:a0:
                    88:69:70:0a:71:a2:52:b9:93:5a:c5:7f:2b:fb:c1:
                    d1:8f:0d:ad:c3:bb:00:b2:2c:4e:05:54:c3:b8:b9:
                    7b:db:71:d0:aa:11:02:22:f0:ca:b5:dd:a6:cf:8a:
                    fa:a7:70:85:4b:5b:4f:8b:d9:8e:16:c5:e4:b1:02:
                    a5:81:4f:5f:10:cd:80:3b:04:59:b2:72:bb:8d:90:
                    49:c5:c0:1b:78:b8:b4:77:df:d8:7b:bd:f5:b9:a2:
                    ee:24:f7:cb:29:42:fd:64:3c:cb:a4:a1:e3:ac:cd:
                    7e:01:d3:d0:b8:06:af:95:02:75:1e:fd:9f:69:dd:
                    aa:fe:8c:88:57:71:61:23:89:d4:0d:82:a7:7d:55:
                    dc:5b:28:32:df:4f:c8:ae:8c:ee:ab:7c:72:a9:c8:
                    cd:ec:51:4a:a6:ae:6c:0b:75:01:67:de:49:1e:84:
                    04:10:85:79:39:7f:54:16:e8:c0:df:da:33:7d:42:
                    27:6c:3e:15:98:79:d2:ed:38:11:9d:56:a6:79:51:
                    7f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9A:72:D9:A6:12:1A:33:EE:EF:CC:12:45:47:1D:62:34:93:FB:C7
            X509v3 Authority Key Identifier:
                keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a9:db:7d:97:65:0b:17:af:d9:5f:73:74:e1:a7:0f:f3:9a:
         39:24:82:06:eb:cc:2b:3f:fe:b7:11:2e:da:c6:2a:ea:06:df:
         92:1d:ee:21:cf:ca:c1:ab:f6:48:61:aa:9b:64:39:cb:5e:6a:
         d8:68:a6:b1:9a:a6:7c:7b:46:36:f0:d0:88:87:a5:f4:48:9b:
         53:50:35:de:39:be:13:2e:bc:da:57:19:ad:15:67:2a:93:f7:
         c6:8a:51:01:57:02:80:64:04:a5:e2:50:36:e5:41:a0:c7:b8:
         6b:8f:72:47:b9:e4:69:7e:c9:77:f9:1a:98:df:c4:9a:f0:30:
         8c:3c:e3:3f:00:03:4c:11:91:50:16:54:61:e2:71:7b:22:6a:
         1a:e5:02:6b:45:0a:0b:d8:c5:53:0b:27:05:0e:96:a4:82:fa:
         e3:8b:a5:39:12:70:76:df:0c:ef:22:b9:b6:83:bb:f1:ad:f6:
         7e:af:4d:06:b1:54:ce:2c:82:45:91:6c:6b:09:85:bb:dc:e6:
         30:ee:98:23:e1:24:78:4c:01:80:45:13:17:b6:17:a9:d8:bf:
         e5:b5:01:9b:5f:8e:0b:78:c4:76:b6:f8:a0:0c:ed:89:ef:02:
         5d:a2:4f:51:86:ee:f6:f8:5f:04:7e:8e:7e:71:e0:e1:80:86:
         2f:94:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:32:00 2024 by rpki-client on console-ams.rpki-client.org