Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
File:                     0PMTtkDG3nU1uB7GjEDubsmf_00.mft (raw, json)
Hash identifier:          gGF2oukV4jpclX/xk1fNUujcIEi3S2yf/BhgwzaT/g8=
Subject key identifier:   91:7F:ED:31:D0:D3:17:62:9D:4F:36:EF:B2:EF:36:EF:7F:A8:2C:E0
Authority key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
Certificate issuer:       /CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Certificate serial:       018F874A59BF0FEB17959B362EC561A34973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
Manifest number:          02A8
Signing time:             Fri 17 May 2024 16:02:27 +0000
Manifest this update:     Fri 17 May 2024 16:02:27 +0000
Manifest next update:     Sat 18 May 2024 16:02:27 +0000
Files and hashes:         1: 0PMTtkDG3nU1uB7GjEDubsmf_00.crl (hash: bZC30rEbvIiDl6UvYL18gzAeh9XJE/6V3Y/C9mfjb8g=)
                          2: tJ9MZUMDPiq310kt4eN6ud_uZrs.roa (hash: 8jaSopPSKJW6R6et8QiU5WegV1yg61h7nBFzDVjTBr4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:59:bf:0f:eb:17:95:9b:36:2e:c5:61:a3:49:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
        Validity
            Not Before: May 17 16:02:27 2024 GMT
            Not After : May 18 16:02:27 2024 GMT
        Subject: CN=917fed31d0d317629d4f36efb2ef36ef7fa82ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:ad:b8:9e:ef:32:ee:2c:6b:04:67:0f:4c:
                    9f:08:27:fa:4b:7c:82:36:59:bd:50:64:5e:ea:cc:
                    41:f4:7a:f7:e4:9d:25:52:67:ed:dd:fa:c0:7b:e2:
                    27:17:1b:78:bf:b0:8d:e8:7d:cb:8b:53:ab:36:70:
                    a6:16:40:b4:b3:99:73:cb:21:ec:f0:fe:9b:e4:dd:
                    55:b9:07:ba:17:b9:96:b4:3d:db:be:8a:0a:9e:de:
                    18:5a:7b:9c:46:01:5e:47:2f:cb:c4:8a:b4:e6:0f:
                    56:78:ed:b4:79:2b:4d:c0:85:d5:58:96:91:b8:95:
                    ce:8e:23:bd:38:a0:45:97:d1:8a:cb:ae:ee:54:9a:
                    8b:f0:88:c1:a5:e5:69:c5:33:6e:56:de:7c:ea:7a:
                    cc:91:ec:7e:c9:34:5f:9a:03:d1:51:3d:27:97:2c:
                    ba:0e:d1:de:26:a2:ef:2a:2f:21:c9:dc:c4:16:78:
                    47:2c:f3:c3:50:50:7c:c4:c9:b0:df:98:1c:ba:22:
                    1d:48:d9:bd:c9:3e:ea:9d:f4:75:13:14:5f:0d:b6:
                    01:be:86:99:00:2e:39:c9:0a:ad:ed:b4:0d:e0:15:
                    9f:61:73:c1:5d:d6:3b:c3:17:98:b5:15:d9:8e:75:
                    e2:d6:7a:be:53:f2:07:5d:07:84:83:f0:48:db:6f:
                    fc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7F:ED:31:D0:D3:17:62:9D:4F:36:EF:B2:EF:36:EF:7F:A8:2C:E0
            X509v3 Authority Key Identifier:
                keyid:D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:69:f5:a5:d6:af:eb:06:fb:d7:88:1d:8e:88:ea:17:c8:
         5b:00:a8:f2:97:96:53:d6:93:ef:db:41:bb:ba:43:aa:ba:c1:
         c3:e2:bc:4b:61:0e:e5:b3:11:a3:ed:ff:60:fe:cc:9c:c6:a9:
         57:bc:2b:13:10:1a:53:7e:2f:9a:0e:47:ae:b7:14:0a:d0:93:
         75:1c:c5:94:69:8d:93:dc:66:cb:67:3d:cc:c3:36:4f:ff:67:
         8c:be:d5:bc:42:a5:df:2c:e6:ac:d8:97:75:68:c1:70:26:25:
         1f:3a:df:35:23:e0:f8:ed:56:8b:8d:49:33:2c:06:cc:2f:d6:
         b9:5e:f7:91:e7:98:4f:6c:f5:87:a9:a6:7e:f7:05:23:b8:c4:
         69:31:35:9a:7c:42:f5:a2:2a:75:01:39:7b:6f:0f:55:24:da:
         6c:c8:77:de:52:53:8a:f3:78:28:10:30:e1:02:4d:fa:99:12:
         cf:7c:c7:aa:00:4b:e4:ab:db:11:25:04:81:73:51:23:58:f6:
         8b:8f:65:1b:d4:35:51:d5:91:52:9b:89:b8:6b:6d:51:87:15:
         47:7d:fe:c0:68:3e:e9:48:b4:d6:7c:2f:06:0d:5c:af:ef:24:
         b0:4a:47:90:e2:ea:e0:ee:7a:ff:b9:9f:9b:d9:29:ac:e5:4d:
         d9:5e:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:39:12 2024 by rpki-client on console-fra.rpki-client.org