Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File:                     0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier:          11eSDD1RCK0Zg1O2VfZjZpNrcqbSCB7X2feKqabg8P8=
Subject key identifier:   DE:64:30:B8:BF:A7:57:6F:E6:A7:F8:FA:85:D9:62:88:57:7D:57:15
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer:       /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial:       018F4B6DB996D6BD404323A0D2AA3AB4D608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number:          0723
Signing time:             Mon 06 May 2024 01:03:52 +0000
Manifest this update:     Mon 06 May 2024 01:03:52 +0000
Manifest next update:     Tue 07 May 2024 01:03:52 +0000
Files and hashes:         1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: I0rDN/6PZGBCn5xwouYS73Rn6jCVyK7soyWPnXt4Zw8=)
                          2: jYC1cEjsNrWxnCjnmpoeUH7gy4o.roa (hash: T+bfdfsDgd2OaWn7+JUKu/rBokQChVrK7TQPydNLPlQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:b9:96:d6:bd:40:43:23:a0:d2:aa:3a:b4:d6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
        Validity
            Not Before: May  6 01:03:52 2024 GMT
            Not After : May  7 01:03:52 2024 GMT
        Subject: CN=de6430b8bfa7576fe6a7f8fa85d96288577d5715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9c:a5:8c:cc:76:81:cc:dc:9d:94:50:d3:ea:
                    6a:96:6e:bf:9d:17:a5:28:ea:1a:ca:71:18:c5:ed:
                    96:ac:a5:c5:cf:d2:2d:a8:79:d7:13:1f:fb:06:77:
                    45:f0:35:43:b3:84:be:05:8a:63:44:d2:66:5d:0a:
                    b9:1e:a3:c6:8c:86:4c:b3:5d:88:33:2f:18:66:05:
                    ec:35:fa:0e:ab:7e:66:cb:f0:1b:8f:bd:61:c1:01:
                    b0:5e:02:5f:5f:b6:84:2d:77:17:ec:b8:26:77:c6:
                    81:d6:2c:40:91:3a:cb:f4:4b:4a:d7:10:44:40:b5:
                    bd:ec:3e:08:2a:c2:76:ea:45:20:59:38:0e:ee:c8:
                    a8:c3:2c:b6:95:e2:c2:b6:9d:48:81:73:b2:1b:5f:
                    30:a6:30:3e:59:98:99:ef:aa:9d:c7:8f:6e:57:b8:
                    e4:17:f4:b8:ee:a1:0e:97:86:35:b1:a7:39:59:8b:
                    a7:8b:c5:6e:2d:5d:a9:f3:81:22:6a:a2:6b:3f:72:
                    20:a5:00:19:6a:cc:3c:f0:75:58:bb:b7:2e:fa:dd:
                    e1:89:c9:15:a8:22:6b:13:06:43:3d:d6:ef:68:15:
                    f7:7c:f0:a0:4c:69:01:5b:e3:cd:4b:17:c1:99:5b:
                    9f:d3:22:e1:20:e5:2b:9d:f6:c5:c8:3e:57:29:42:
                    b3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:64:30:B8:BF:A7:57:6F:E6:A7:F8:FA:85:D9:62:88:57:7D:57:15
            X509v3 Authority Key Identifier:
                keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d8:db:3e:76:83:08:b2:28:75:b1:21:96:2e:11:f9:d1:41:
         3c:da:26:05:97:88:c8:b0:27:15:50:21:43:24:c7:6b:47:b9:
         91:07:17:94:c9:61:fa:bf:6c:90:3e:c8:de:77:ec:dd:ad:0a:
         e0:ed:5d:87:23:6b:4b:bd:d4:0a:9d:41:ab:5e:b4:58:6a:74:
         6c:16:82:48:9b:94:dc:65:14:23:88:2f:ee:ce:8d:71:d0:39:
         d5:99:cc:c6:98:26:5c:bb:41:cf:cb:94:75:bf:04:fb:84:e9:
         7c:60:f7:4f:04:fa:55:00:ae:8d:2c:62:1f:94:7b:23:07:60:
         b3:d1:fa:2d:1c:6d:d3:4b:53:ad:97:32:e9:b3:bb:e6:30:16:
         b9:ac:ed:8a:97:f2:d1:34:42:8a:b4:b7:36:6b:f0:0a:21:84:
         f0:57:7e:1d:c9:a4:0a:34:97:fc:b6:b7:38:31:a2:e6:78:e3:
         e1:db:ce:a0:3a:98:71:44:d7:a9:77:f8:76:d2:bd:fc:80:05:
         bb:b0:f2:3d:30:05:90:a8:4c:61:1a:fe:97:c0:3f:3f:63:77:
         3e:5c:f3:20:46:7e:99:c2:cb:76:20:a3:e1:95:a9:b9:be:20:
         3c:0e:b9:59:f1:29:22:05:f8:f4:51:46:48:b3:00:cf:30:59:
         97:b8:80:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:17:31 2024 by rpki-client on console-ams.rpki-client.org