Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File:                     9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier:          h9FRVIFmaOe6QgbZ2LmrNOZUi+j772iS1EaMSKZzPgo=
Subject key identifier:   24:11:7C:5E:AA:EB:E7:10:81:5C:0A:60:49:00:EA:6E:4A:2D:0C:5C
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer:       /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial:       018F381DD4157CAC2945C546117211137ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 07:03:49 +0000
Manifest this update:     Thu 02 May 2024 07:03:49 +0000
Manifest next update:     Fri 03 May 2024 07:03:49 +0000
Files and hashes:         1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: Oktgk6SivPbo/dys+zpiYbMhXZZLr0g36mYE2GHgJbY=)
                          2: I-omZ5vxdNlAXFKZYdKH6OEBJXA.roa (hash: oBkJzg7l1DGfT3tXbF4Gaok08jW+bVRIfyNDVZFLGnw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:d4:15:7c:ac:29:45:c5:46:11:72:11:13:7a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
        Validity
            Not Before: May  2 07:03:49 2024 GMT
            Not After : May  3 07:03:49 2024 GMT
        Subject: CN=24117c5eaaebe710815c0a604900ea6e4a2d0c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:d9:27:92:a1:38:5a:38:7c:10:cb:41:18:
                    84:b4:9b:dc:f3:8b:77:dd:34:1c:b2:a2:b2:44:52:
                    59:6f:9e:4d:78:8c:ee:a2:71:16:b3:95:00:51:75:
                    99:b4:cd:14:d2:9e:e2:4c:df:66:82:49:b6:f0:fe:
                    e5:4c:37:be:4d:4d:ce:86:39:5b:65:96:7a:7b:e6:
                    59:11:b7:c8:d4:ff:5d:48:73:2c:c1:b1:04:0f:78:
                    2a:a3:d8:8f:3f:cd:54:26:43:b2:f1:39:77:83:9b:
                    95:67:06:20:43:e1:d1:5f:16:48:dd:94:7a:1d:45:
                    b1:0d:94:f0:9d:59:cb:36:1a:51:5f:16:5f:19:54:
                    99:b6:e9:d2:4f:44:a9:24:38:ab:ca:16:cc:9a:54:
                    68:35:37:a4:6f:91:68:33:99:36:1a:e9:d1:9e:2c:
                    d9:ac:ab:d1:76:b2:f8:06:c3:6c:21:dc:3c:2a:20:
                    3e:23:00:76:58:5a:54:70:0f:9e:be:2b:47:88:3e:
                    50:d7:01:40:a1:ca:67:9f:a1:56:c7:95:7d:98:08:
                    6f:d8:18:d1:54:52:58:7e:a8:8f:ad:b9:7f:2b:7c:
                    40:58:36:ae:b7:a2:90:bc:00:45:52:cf:62:77:65:
                    b5:d8:4b:e6:c2:66:b8:73:22:74:ed:ec:d2:61:32:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:11:7C:5E:AA:EB:E7:10:81:5C:0A:60:49:00:EA:6E:4A:2D:0C:5C
            X509v3 Authority Key Identifier:
                keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:cc:bf:e6:5a:a7:e7:b5:ea:5a:7d:6f:e2:e6:73:a6:74:af:
         c0:6e:6c:1c:74:2e:62:8b:70:37:fe:58:6e:45:f5:f7:e7:93:
         d9:25:45:f1:ad:f7:27:a4:f4:50:15:da:3f:e2:11:a4:81:a8:
         6f:c1:2c:eb:cb:33:3b:8e:05:48:5a:c8:c1:38:09:37:c8:19:
         6a:70:4b:f4:a5:ff:49:57:17:b4:2e:06:6d:92:24:22:e9:94:
         aa:c1:07:4c:f3:9e:50:69:28:78:84:e7:40:62:5e:ea:d4:f7:
         82:be:7c:21:41:7f:21:ba:37:b8:7a:99:57:57:81:0e:29:23:
         a5:b9:0d:1a:ef:92:d3:1d:64:ee:f3:57:22:ce:cb:32:74:51:
         f8:79:1c:87:d5:dc:fb:f1:66:b1:75:bb:ab:98:29:86:67:71:
         2e:2b:3e:82:e6:19:ea:11:53:a4:b5:7a:cb:1f:23:7b:5b:dc:
         5c:7b:f2:ba:89:1d:45:c9:41:f7:95:53:1b:c4:f4:24:3c:68:
         c3:2a:bf:35:a2:fa:c6:5c:1e:c6:cf:0b:ed:3d:f8:a5:af:5e:
         22:95:4c:a7:b7:a6:e2:1a:78:f0:d8:85:28:b0:e0:d8:06:f2:
         5e:51:20:4e:03:51:e6:61:5b:8a:da:4c:6c:da:08:41:10:23:
         76:bf:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:33:59 2024 by rpki-client on console-fra.rpki-client.org