Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/itdinBG2gCDXPZtlxU5QQ8NBQZQ.mft
File:                     itdinBG2gCDXPZtlxU5QQ8NBQZQ.mft (raw, json)
Hash identifier:          4Lgxv03sGF5ZzOQMHrz6dz54xkhwAlZvz2mPaSz76vE=
Subject key identifier:   A2:BD:E1:48:FD:6E:E1:B6:99:29:6A:EE:03:D6:0D:DF:EB:C0:3E:6A
Authority key identifier: 8A:D7:62:9C:11:B6:80:20:D7:3D:9B:65:C5:4E:50:43:C3:41:41:94
Certificate issuer:       /CN=8ad7629c11b68020d73d9b65c54e5043c3414194
Certificate serial:       018F8748BCEBEFE5A09BCBC8168971D290CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itdinBG2gCDXPZtlxU5QQ8NBQZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/itdinBG2gCDXPZtlxU5QQ8NBQZQ.mft
Manifest number:          0E00
Signing time:             Fri 17 May 2024 16:00:42 +0000
Manifest this update:     Fri 17 May 2024 16:00:42 +0000
Manifest next update:     Sat 18 May 2024 16:00:42 +0000
Files and hashes:         1: itdinBG2gCDXPZtlxU5QQ8NBQZQ.crl (hash: R85z7L6flyhhcUxJpHiIdkYsPcEG/2DAHGEK/S4piDs=)
                          2: oQkgBCVI3nvmcx_z_p5c9q49d8o.roa (hash: sAYDpXQFXIz/8pVpumXAQRNgVPgEz3yhzv0UPHtjZUs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/itdinBG2gCDXPZtlxU5QQ8NBQZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/itdinBG2gCDXPZtlxU5QQ8NBQZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itdinBG2gCDXPZtlxU5QQ8NBQZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bc:eb:ef:e5:a0:9b:cb:c8:16:89:71:d2:90:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad7629c11b68020d73d9b65c54e5043c3414194
        Validity
            Not Before: May 17 16:00:42 2024 GMT
            Not After : May 18 16:00:42 2024 GMT
        Subject: CN=a2bde148fd6ee1b699296aee03d60ddfebc03e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:6e:3e:d0:43:6b:9e:8f:a4:73:47:3c:1a:
                    6a:49:23:9e:fe:c4:5c:8d:e4:fc:5e:25:0b:32:10:
                    19:e6:74:e4:dd:4b:8b:ae:89:15:b0:bb:ca:3e:db:
                    9e:02:f3:1b:d2:40:cb:c6:f5:06:c8:5d:f6:25:32:
                    c4:bf:34:67:2d:72:a5:5c:7a:d7:85:23:62:b7:4a:
                    05:1f:09:0b:7d:c5:85:dc:ef:a2:5a:b7:60:61:00:
                    ef:cd:1f:27:85:99:95:8e:0f:28:1a:74:d5:72:cf:
                    ab:95:88:50:88:c7:84:cf:b2:0b:b9:85:53:ae:66:
                    4f:ba:2a:b1:6d:bd:49:a2:aa:c7:da:c3:75:73:20:
                    c9:84:cf:2a:4e:d7:34:aa:7c:3e:9b:30:21:a8:8f:
                    e9:4e:24:40:e4:9e:12:56:46:5c:41:51:e8:3f:1a:
                    0d:98:60:e1:bb:23:f4:4c:27:59:e0:04:81:03:6f:
                    e4:68:48:ee:12:67:8d:bf:26:37:b3:51:7a:8a:c5:
                    4d:ee:1d:87:13:ed:95:e0:a9:05:ac:00:04:a1:7c:
                    80:4e:db:2c:13:2f:0a:ca:9a:02:f3:8f:85:52:c5:
                    dc:ba:f9:46:fd:44:b6:fc:0c:7b:09:13:3a:14:d4:
                    10:ae:05:b5:01:4e:5c:30:2f:72:e8:57:8c:85:3a:
                    21:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BD:E1:48:FD:6E:E1:B6:99:29:6A:EE:03:D6:0D:DF:EB:C0:3E:6A
            X509v3 Authority Key Identifier:
                keyid:8A:D7:62:9C:11:B6:80:20:D7:3D:9B:65:C5:4E:50:43:C3:41:41:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itdinBG2gCDXPZtlxU5QQ8NBQZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/itdinBG2gCDXPZtlxU5QQ8NBQZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/itdinBG2gCDXPZtlxU5QQ8NBQZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:03:72:38:87:80:b0:cf:70:57:a2:e5:04:1f:13:1c:83:60:
         51:a3:a4:2d:96:2b:3c:91:1c:54:9e:6b:79:1f:26:a0:44:b6:
         42:78:20:5e:62:20:6e:2d:c4:88:9a:1b:3c:85:8a:fa:f4:f6:
         a7:f0:89:a2:cb:df:ab:b8:4c:bf:eb:2f:f7:3f:5b:08:60:08:
         51:9d:07:f2:e3:e9:d2:7d:7d:6f:13:72:f7:a7:48:86:f7:0d:
         4c:34:8a:04:43:35:e5:a4:e1:d5:53:4d:40:81:25:2b:1f:46:
         ff:25:cc:95:26:5b:cc:86:f0:e9:d6:dc:b4:8b:f1:18:ed:6b:
         82:4f:8e:b2:8c:71:ca:b2:0d:d8:06:d6:4c:6c:2f:61:d1:df:
         63:0a:c2:65:cb:2c:7b:32:69:c3:1e:4a:c2:98:75:ca:88:0c:
         3e:04:5d:48:c1:3f:d8:30:7e:30:8b:38:38:ac:15:f8:06:d0:
         ed:84:d1:9a:47:bc:c4:61:b7:c6:9b:33:86:66:57:a3:36:d9:
         dd:b7:0c:0a:20:ce:0d:5b:c6:03:76:fd:23:f5:b1:7f:da:52:
         95:ce:1e:35:f1:10:44:86:26:50:27:d1:b8:2d:07:5f:79:e7:
         76:34:03:58:3f:c5:30:e8:7e:08:ed:9c:00:85:7e:b8:8b:e9:
         8d:bb:64:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:41 2024 by rpki-client on console-fra.rpki-client.org