Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
File:                     9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft (raw, json)
Hash identifier:          +xhwgmsmKFJO6Et6emKeg/v83e6Qs+LFhBWtXxJO1iw=
Subject key identifier:   4F:9A:FD:87:C7:C2:C8:8F:36:7F:DD:A1:86:BE:49:69:BC:88:51:FB
Authority key identifier: F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
Certificate issuer:       /CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Certificate serial:       018F8D135B6B3B5F6A9E1A3D95A6ED24B1A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
Manifest number:          0897
Signing time:             Sat 18 May 2024 19:00:06 +0000
Manifest this update:     Sat 18 May 2024 19:00:06 +0000
Manifest next update:     Sun 19 May 2024 19:00:06 +0000
Files and hashes:         1: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl (hash: WhKkzSBEHpmYE6rktcQKEB2HkKnlErn93C2KC3mz7jg=)
                          2: h5KrdnRauafYOXjAs_Gv4F0UCOI.roa (hash: pSPAd3SsSTRR2GZ3LqvHYMc7BI/hu6XDmiBU3D0aL28=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:13:5b:6b:3b:5f:6a:9e:1a:3d:95:a6:ed:24:b1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
        Validity
            Not Before: May 18 19:00:06 2024 GMT
            Not After : May 19 19:00:06 2024 GMT
        Subject: CN=4f9afd87c7c2c88f367fdda186be4969bc8851fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:9f:c4:f4:1c:f9:45:df:3a:31:96:10:06:
                    77:7f:9c:da:fb:c4:c9:de:18:87:dc:7c:8d:06:a8:
                    78:db:c0:1a:62:07:79:98:6e:bf:e8:34:1b:b7:77:
                    81:13:3d:dd:0b:c4:7c:8a:cd:c1:f4:79:fc:6f:c2:
                    6d:0a:95:3d:71:fc:75:bb:92:71:e7:c8:f2:91:c4:
                    cf:5b:33:95:be:e6:52:15:3c:5a:dc:41:95:e1:9b:
                    a7:82:82:21:10:dd:22:d3:e3:21:6d:95:27:95:2f:
                    63:e0:12:9c:d7:7b:b8:78:18:47:9b:eb:6b:04:72:
                    52:29:f7:97:7f:6a:9e:9b:4a:a9:04:0b:24:11:d0:
                    41:e4:f4:20:64:da:78:8b:48:3c:34:09:53:4c:39:
                    36:60:03:0d:a5:f2:54:19:c3:56:ba:5d:c1:e8:73:
                    46:c6:4d:55:b0:93:4f:38:2a:45:41:e6:b3:4f:90:
                    34:de:fe:38:fc:cd:bf:c0:c3:8f:64:5c:b4:93:7a:
                    2e:03:3a:16:83:c7:7f:bb:71:f8:a6:bf:38:22:c0:
                    df:30:7a:02:16:97:04:de:70:6b:1a:40:2f:92:e8:
                    26:42:24:84:23:e1:9a:28:6a:5f:ea:36:2a:4f:8d:
                    47:2c:60:ba:9a:06:87:b9:e2:be:56:2e:ca:10:cd:
                    06:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9A:FD:87:C7:C2:C8:8F:36:7F:DD:A1:86:BE:49:69:BC:88:51:FB
            X509v3 Authority Key Identifier:
                keyid:F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c6:00:f8:ec:6a:37:cf:f4:e2:d9:be:78:9f:3f:26:16:14:
         26:12:d7:9c:6b:eb:1f:13:4e:a3:d6:2f:76:65:06:f6:c2:dc:
         44:11:21:c5:7c:ae:2b:a3:4c:18:97:29:ac:24:49:93:08:ae:
         31:fa:6f:6e:b3:96:19:d1:dc:c9:15:cc:6a:e4:3e:0d:64:ba:
         74:9a:be:c0:a2:c0:e4:dc:08:49:95:ea:ff:39:eb:5c:96:c8:
         5b:5d:6a:66:99:b2:de:ad:7a:16:8d:45:24:b5:34:2b:a0:7d:
         82:dd:eb:db:ab:49:06:e0:68:0f:1d:ff:63:a6:4d:46:7c:36:
         9d:99:46:ab:a4:4b:89:0c:dc:22:f5:22:ce:3e:e9:f8:52:a7:
         9e:bb:b9:ba:3a:c5:a3:dc:fc:d4:5f:56:97:43:1e:78:89:0c:
         de:69:5e:60:bf:86:29:6c:ef:1e:ca:97:71:c0:6d:b7:80:4b:
         bc:52:83:74:a3:ec:3f:2d:ab:27:4e:72:01:95:f5:af:b9:95:
         33:db:66:a9:6d:ff:49:b2:82:9f:6f:ca:47:26:7a:23:08:b6:
         d5:ee:1b:93:d0:0b:8c:64:f6:69:90:fb:52:15:8e:2f:d0:80:
         4c:b7:ff:c1:b3:a0:55:59:2c:aa:c2:b9:85:e4:6d:2f:ae:a1:
         f2:a4:db:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:52:29 2024 by rpki-client on console-ams.rpki-client.org