Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File:                     CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier:          VqvGO98Rl52FyrR4yolehJAeQar1dh3TmBJF/04kt+A=
Subject key identifier:   7E:84:CA:C4:B7:5C:DD:85:F4:20:4D:DA:8A:5B:4A:16:6D:39:85:53
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer:       /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial:       018F362CDD45E41225B4186156FFDBF9E787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number:          114F
Signing time:             Wed 01 May 2024 22:01:00 +0000
Manifest this update:     Wed 01 May 2024 22:01:00 +0000
Manifest next update:     Thu 02 May 2024 22:01:00 +0000
Files and hashes:         1: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: Ur5WRsMPCnqAjYMETsWxTXECVQG1duGENXJUCc6GFkM=)
                          2: NKpdi18nUi3GAAxXY-e86fOF_wg.roa (hash: IZOOUww+C4Y4YDhXFB7dqJwXMobBYrovuW33kVNL3sQ=)
                          3: hgHE2YcNDPx46nF-478-JA9tM_U.roa (hash: 9RsBK40tolHjCTY6WH1gvTZezdYEibJNU29/AGbo5qA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2c:dd:45:e4:12:25:b4:18:61:56:ff:db:f9:e7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
        Validity
            Not Before: May  1 22:01:00 2024 GMT
            Not After : May  2 22:01:00 2024 GMT
        Subject: CN=7e84cac4b75cdd85f4204dda8a5b4a166d398553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:76:76:13:7b:ff:19:33:ec:5a:ce:99:43:
                    2a:8c:4d:5e:92:b0:dd:a0:f5:22:dc:f1:86:52:d9:
                    bf:04:4b:76:7c:f7:a7:ba:c2:2f:fa:59:ea:a0:96:
                    3f:55:a6:c1:e4:67:a4:e0:3a:a6:5c:ee:d2:76:0b:
                    a1:4f:8b:e2:95:8d:c6:ed:9e:fc:c6:cb:5f:96:2f:
                    08:be:cb:bb:0a:38:c7:48:e7:a9:23:73:da:7a:3e:
                    b8:72:8a:4a:6c:6d:93:22:2a:52:b4:d5:23:44:24:
                    e1:8d:58:8f:9c:0b:cf:2a:b7:8c:bc:af:a6:62:dd:
                    db:c2:fb:3f:11:07:b5:9e:93:79:5a:7b:b3:4f:90:
                    21:80:ea:77:61:58:c5:e5:90:48:5c:89:0b:d0:88:
                    0a:19:bc:79:b7:92:68:64:97:fc:bf:ab:81:1b:04:
                    2f:61:ce:88:ec:0f:91:93:82:e4:b5:cd:32:04:1b:
                    fd:d9:c0:0f:e6:d0:7c:a5:85:59:cc:49:f2:ec:e7:
                    e0:2b:3d:0c:30:f7:6e:73:26:c6:30:6a:f3:ee:5d:
                    7b:eb:ba:f6:f1:31:fc:e7:fa:c2:cb:02:41:fa:a2:
                    0e:28:31:5b:8a:f2:5a:93:ef:54:87:11:aa:5f:98:
                    6e:72:99:28:11:65:72:b2:c7:ab:2b:ca:46:20:d6:
                    c5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:84:CA:C4:B7:5C:DD:85:F4:20:4D:DA:8A:5B:4A:16:6D:39:85:53
            X509v3 Authority Key Identifier:
                keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:67:b4:e9:2c:d7:b3:11:e4:e2:11:29:29:ff:cb:c7:a7:c6:
         48:b3:05:d9:62:de:73:f1:e9:e4:67:a3:83:6b:f4:f6:dc:79:
         ab:38:80:7d:e4:99:bc:7e:82:f4:d0:94:94:66:8c:36:ce:eb:
         35:b7:d9:cb:5d:4a:da:49:4b:f4:5a:bb:26:53:8b:35:53:04:
         9b:fa:85:5b:b5:d4:0b:31:94:5f:15:08:a3:76:d5:d6:37:0c:
         2c:ea:e4:09:f3:02:94:a5:93:8d:5a:de:fb:e7:fa:48:f1:ce:
         56:cd:48:6d:d7:af:da:d0:cd:f0:61:eb:d8:82:40:91:74:75:
         f6:e9:82:77:78:4b:81:d1:70:9f:59:b2:0e:95:7f:48:1d:64:
         59:c9:f6:fd:e7:da:40:76:bc:57:78:b2:bf:84:fe:26:de:06:
         a0:82:90:36:d1:e9:9c:65:f2:b4:5e:53:47:54:12:7b:1c:a5:
         0c:77:17:12:de:0b:49:55:d7:18:89:65:40:2e:b6:ab:ae:4c:
         f4:a2:5f:28:ab:f3:c6:27:f9:ed:2f:d1:03:bc:9c:d0:3b:7f:
         86:74:c1:ce:07:2e:f8:6b:2c:3a:00:13:6d:a2:25:8d:52:da:
         47:29:7f:9c:f0:27:80:a7:16:cd:9a:33:39:ec:5d:c9:93:42:
         93:28:a2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:56:02 2024 by rpki-client on console-fra.rpki-client.org