Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File:                     84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier:          HmanapMsfif7lth/ssQ4+xS3X5uNCIe6FYwS0eHW/uU=
Subject key identifier:   96:48:DE:81:62:88:06:FF:6E:0A:46:81:9B:98:B4:61:3E:18:70:BF
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer:       /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial:       018F5702ACCB212DAC0B8D1C69BF0AF9F52E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number:          115E
Signing time:             Wed 08 May 2024 07:02:24 +0000
Manifest this update:     Wed 08 May 2024 07:02:24 +0000
Manifest next update:     Thu 09 May 2024 07:02:24 +0000
Files and hashes:         1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: QmEqsCOF+6alUQmaLw7MKq0PFm8VdZ94DNRhi6b9sZM=)
                          2: Zq5EhbptDv6RYaouXv8QLavh0Mc.roa (hash: jXWs9FCaJqAmJDuujDcf2EdXAWGZ6HUR1IHiO91yfyc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:02:ac:cb:21:2d:ac:0b:8d:1c:69:bf:0a:f9:f5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
        Validity
            Not Before: May  8 07:02:24 2024 GMT
            Not After : May  9 07:02:24 2024 GMT
        Subject: CN=9648de81628806ff6e0a46819b98b4613e1870bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:f8:59:5f:98:7d:c0:a3:f3:a2:1f:75:8c:
                    39:65:95:df:bd:f3:41:34:d7:63:16:d0:bd:1d:68:
                    a5:72:a0:da:ac:a0:5a:d4:e0:f7:d0:c8:20:dc:7b:
                    bc:43:59:61:62:fa:2b:c0:1d:b7:74:40:55:93:e6:
                    e3:57:f2:90:df:27:1d:63:d0:88:da:21:74:9e:10:
                    db:b3:52:e7:2d:f6:e9:30:46:ce:61:88:d1:b1:e0:
                    9c:0c:81:ba:72:dc:3a:c5:79:70:df:5d:50:2d:d8:
                    99:99:cf:52:60:d4:c4:ec:0c:9f:ef:74:73:30:00:
                    26:ae:65:c9:8b:7d:0f:df:83:71:d8:6c:82:c7:7c:
                    39:63:20:35:27:df:c2:46:cc:2f:52:b6:df:17:5a:
                    00:42:8d:d6:13:a6:ad:63:7d:bd:7c:c6:5a:db:97:
                    b7:83:6c:10:be:43:77:4b:70:32:ae:04:46:d4:b5:
                    42:c8:94:fd:85:a5:a9:42:41:ee:5e:30:51:0b:c8:
                    c9:0d:22:f7:52:7f:a8:7a:50:fe:0f:35:c7:e3:7f:
                    ee:13:b3:06:3a:68:b8:9c:42:89:d7:27:ca:84:6e:
                    b4:5b:70:8c:3c:4e:cb:28:96:c8:3e:f1:07:be:ce:
                    67:af:4e:a6:69:08:73:c6:07:aa:a6:bd:ef:5f:c4:
                    af:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:48:DE:81:62:88:06:FF:6E:0A:46:81:9B:98:B4:61:3E:18:70:BF
            X509v3 Authority Key Identifier:
                keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:22:00:98:07:4b:4a:3a:d5:72:02:13:1e:c1:0c:09:78:48:
         83:20:44:5c:6f:64:12:30:35:b4:eb:7b:0c:7a:05:0e:81:96:
         e8:48:7b:48:c5:5f:ce:14:6f:01:d5:6d:35:f6:bc:88:99:25:
         07:d4:ef:09:f1:6d:2c:4a:3b:fe:87:43:5f:7f:28:ef:0a:6f:
         f5:4c:21:53:ec:a3:ad:8e:e1:5b:08:46:71:9e:d9:6b:f8:3f:
         b8:03:36:89:82:ba:d1:55:82:b1:31:1a:62:ab:4e:4f:53:00:
         32:e4:d7:0b:a8:31:df:b5:ba:81:4a:d9:85:11:24:0d:c1:30:
         d8:68:be:67:28:c5:71:18:c5:2d:5f:c7:12:2a:ef:a3:ca:56:
         d9:92:57:4c:db:bd:0d:02:bc:b3:81:ed:ae:7e:c4:65:80:46:
         0b:1e:f7:a5:bd:d7:6c:e7:e9:e3:1c:9f:05:8c:b7:08:38:41:
         36:f4:01:8a:b8:83:cd:4b:f4:81:10:31:ec:83:b8:01:1a:00:
         4d:bf:3e:06:8b:e4:08:5b:5e:43:66:a0:78:91:aa:57:bf:40:
         a2:c7:d1:82:04:9b:61:cb:b1:03:1c:c8:bc:54:7f:93:b3:1f:
         ac:2b:41:e8:e2:2d:45:62:2e:bf:5f:93:a6:9c:b7:6d:9f:84:
         ae:bb:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:38:57 2024 by rpki-client on console-fra.rpki-client.org