Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File:                     FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier:          2dX4lBf1WvZltBx/iF8vyBu9ff8K0qgYBjXdCmq7rE4=
Subject key identifier:   4F:5D:94:8F:ED:52:2A:7F:C0:43:5C:49:A9:40:33:04:13:5F:DD:B0
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer:       /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial:       018F35512771F9287E6BFEF3B8AD88BFE27E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number:          09D3
Signing time:             Wed 01 May 2024 18:01:01 +0000
Manifest this update:     Wed 01 May 2024 18:01:01 +0000
Manifest next update:     Thu 02 May 2024 18:01:01 +0000
Files and hashes:         1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: sgcvcPAltSWRwoB5UmKLBh1ldMfY2BZjyAqElhQZurA=)
                          2: GAnBcsaOYglC_8Zoq-_h__bWrtQ.roa (hash: Km/dmh7oLdeIkcIqFI9xW3jLc4fH79jBoqnP1WQgnlM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:51:27:71:f9:28:7e:6b:fe:f3:b8:ad:88:bf:e2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
        Validity
            Not Before: May  1 18:01:01 2024 GMT
            Not After : May  2 18:01:01 2024 GMT
        Subject: CN=4f5d948fed522a7fc0435c49a9403304135fddb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4f:4f:bf:f1:3d:b6:e3:65:c3:47:05:99:c3:
                    f9:d3:4e:d9:79:ec:ed:e0:e7:b4:bb:b7:cc:95:9e:
                    b1:dd:74:01:c0:48:1c:b4:cd:d7:f1:3b:3e:03:63:
                    26:93:85:2b:87:2d:0b:b7:73:d6:8b:10:1b:88:e3:
                    0c:f6:e4:40:78:94:3c:e5:ff:7c:11:b8:01:cb:99:
                    88:db:63:8b:26:39:c5:5a:b0:87:0d:a6:78:c9:c8:
                    c2:e9:81:b1:18:6b:cc:54:5c:69:a7:54:e8:1b:fa:
                    b1:8f:17:82:33:88:b0:12:99:4d:f2:21:db:73:af:
                    2a:15:4a:e9:a5:ab:2c:ba:bf:6e:81:4d:c5:f7:c3:
                    55:bf:88:d7:c8:95:71:9e:41:a4:a7:30:29:0d:ed:
                    e2:e6:96:f2:e8:9d:56:f9:79:33:8a:e4:c0:10:55:
                    a3:e3:55:9d:ef:0a:3a:4d:ff:96:c6:50:ed:7f:3f:
                    ee:6f:da:51:7e:fc:dc:7c:58:41:2f:58:b8:f2:63:
                    27:89:95:af:d3:fc:e0:23:7b:0a:29:3e:ec:71:2b:
                    f2:a8:cb:03:b3:6d:f2:86:15:b1:eb:9f:8d:67:ad:
                    4b:e9:8b:d3:ea:31:de:f7:ab:c6:f9:5d:45:b3:38:
                    6d:8b:4c:0e:a3:63:19:5d:45:d2:59:83:d8:9d:9c:
                    77:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5D:94:8F:ED:52:2A:7F:C0:43:5C:49:A9:40:33:04:13:5F:DD:B0
            X509v3 Authority Key Identifier:
                keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:95:80:c2:3e:94:11:e3:13:62:54:8b:7b:90:f6:81:1b:50:
         15:39:41:dd:72:45:18:89:a3:81:61:c5:9e:1d:9d:f7:1d:3f:
         f2:96:47:64:d0:2c:20:29:ff:63:b1:2b:9c:e9:03:a7:28:1a:
         b5:d8:d0:39:1d:a5:ec:17:3c:a9:0f:96:4c:f6:47:7f:c1:89:
         2b:22:b0:9f:3a:1d:04:7a:6f:8f:81:11:cd:bc:c1:cb:82:53:
         a8:45:7a:df:8c:f4:8d:bd:08:46:ce:67:17:7a:11:1e:a4:b4:
         d3:d4:fe:45:52:18:39:4a:71:7d:2e:21:46:59:38:09:02:90:
         34:47:06:01:7b:a6:ee:b0:df:2b:2a:8e:43:48:d9:23:cd:a6:
         0f:df:54:86:b6:9d:94:fe:94:57:f6:a3:8f:a0:40:f2:37:9b:
         af:39:eb:72:87:03:70:61:f1:d0:4a:91:f9:6f:a2:c6:d5:5e:
         c7:0b:9d:8f:11:a1:9d:88:f5:c7:8e:e8:5b:3d:2f:c1:b8:6e:
         90:84:5a:7b:39:2e:8c:49:fb:15:5b:dd:35:82:95:1e:28:1b:
         b4:0f:8d:f7:8b:1c:3e:67:a1:72:29:7c:36:28:4e:c1:04:4e:
         a0:eb:12:ce:28:4e:c5:1e:30:17:24:9b:c8:27:79:5d:c5:3e:
         cd:56:73:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:20:38 2024 by rpki-client on console-ams.rpki-client.org