Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
File:                     9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json)
Hash identifier:          B4fOoO2fQj41JypG9UjtqKbJ9s57rMno+JDvUjAJ3ZQ=
Subject key identifier:   08:12:2F:30:28:34:C1:62:1A:99:65:1A:97:37:20:9B:B8:D9:9B:EA
Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
Certificate issuer:       /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Certificate serial:       018F3251BB50AC712EA31EF6F92DA11D34E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
Manifest number:          09AA
Signing time:             Wed 01 May 2024 04:02:48 +0000
Manifest this update:     Wed 01 May 2024 04:02:48 +0000
Manifest next update:     Thu 02 May 2024 04:02:48 +0000
Files and hashes:         1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: 35ebpSgG5UDT78JkZiQuIJXcyDXxGMPXtdD0z02BtA8=)
                          2: eeNQ_4uDZ0GXRjkt167uuTve-_Q.roa (hash: orRDFf1rZivJFxg9sL9xwzISoMYvnmCFiokSvooj3nE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 04:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:51:bb:50:ac:71:2e:a3:1e:f6:f9:2d:a1:1d:34:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
        Validity
            Not Before: May  1 04:02:48 2024 GMT
            Not After : May  2 04:02:48 2024 GMT
        Subject: CN=08122f302834c1621a99651a9737209bb8d99bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:41:89:19:f6:94:b0:be:84:57:9f:c2:43:dd:
                    b8:69:dd:4b:3d:da:69:55:b6:de:6c:10:ed:f6:62:
                    96:b5:8e:b1:99:82:9d:ce:82:29:a8:75:de:02:69:
                    1e:91:b8:fc:a5:44:b7:71:88:70:0c:c3:2a:e1:d2:
                    53:9d:24:05:03:54:5d:6a:b1:96:01:e3:fa:4c:e5:
                    a8:36:0b:ad:05:3f:21:1c:f0:8d:3d:99:e8:ef:01:
                    cc:85:d6:73:40:42:04:17:9a:10:53:c8:55:b5:83:
                    56:8a:b1:4a:7a:22:37:b7:f7:78:a2:37:5f:6c:70:
                    23:26:22:c6:f1:6c:47:b2:88:32:73:57:c5:14:07:
                    5c:cd:04:8a:71:80:d8:db:34:cb:7d:55:eb:3f:92:
                    08:7c:7e:61:66:48:73:42:08:c1:c6:0b:8d:77:80:
                    de:bb:f3:af:dc:d8:8f:69:e1:4b:b7:af:f5:bc:e1:
                    d6:01:96:9b:d5:65:8f:2b:25:1a:8c:29:8e:31:22:
                    f2:e7:c2:54:1e:6b:51:5e:89:e6:2d:de:f0:c5:1a:
                    b2:d2:23:6f:9f:c4:71:4a:ad:7c:c6:7e:df:70:98:
                    c7:cc:a6:4a:c0:7b:a1:2e:7b:f1:5d:0e:8a:cf:63:
                    a9:98:e8:a0:b5:54:8c:23:6b:89:ea:05:ec:74:e5:
                    06:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:12:2F:30:28:34:C1:62:1A:99:65:1A:97:37:20:9B:B8:D9:9B:EA
            X509v3 Authority Key Identifier:
                keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:31:f8:af:4e:c9:3d:ef:d4:f2:47:0b:c1:b0:1e:73:dc:27:
         5a:ca:2f:d7:a7:6e:b2:01:16:e9:7c:4e:84:af:d7:e6:37:f2:
         b3:a9:98:bd:b6:00:7a:d0:22:c7:65:56:9d:e5:be:d8:3b:73:
         73:f0:2c:d4:f3:f4:a8:4b:e8:72:0c:47:73:8d:4c:35:bc:b6:
         03:58:f7:fd:ac:ba:f7:1e:53:2f:c9:01:53:d3:48:52:55:46:
         5e:92:e1:05:21:cc:87:b9:68:d6:ae:45:7d:74:85:0c:fe:a0:
         cb:b8:20:eb:eb:6d:8e:f7:d7:25:6b:0e:b9:06:56:48:bb:d8:
         fb:cf:d9:c7:e0:50:70:b0:47:5f:70:07:55:9f:49:39:c4:59:
         37:42:7a:1b:ce:3f:1b:f2:8f:77:f6:29:06:92:77:95:30:63:
         c6:9a:65:4a:b7:d9:7a:05:2a:3a:f5:53:c6:9b:f8:64:fc:8f:
         ca:fd:da:58:95:8a:d6:1c:f5:be:dd:e0:08:16:9b:1d:be:f3:
         42:c5:85:46:f3:59:6f:26:81:f7:38:7f:32:6d:71:e2:c9:4d:
         30:b8:91:c9:ee:17:36:10:dc:6d:68:14:23:25:0e:7d:c3:55:
         c3:5e:0e:18:dd:44:33:0f:3d:63:40:e0:66:75:d3:91:87:40:
         cd:c3:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 14:14:44 2024 by rpki-client on console-fra.rpki-client.org