Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
File:                     8jWG8iDMsNHFLArt9edm7KGhHHQ.mft (raw, json)
Hash identifier:          0tLejwPHbPTD4KnTKnhxCbdsnkezIHMC/HL6tgvQpQA=
Subject key identifier:   C4:22:46:9A:01:E9:A1:4F:75:04:7E:B2:77:DA:C9:5C:D4:1B:35:0F
Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
Certificate issuer:       /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Certificate serial:       0191F9D98A0C6753EDE8F09F08A9591B09E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
Manifest number:          011A
Signing time:             Mon 16 Sep 2024 08:01:09 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:09 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:09 +0000
Files and hashes:         1: 8jWG8iDMsNHFLArt9edm7KGhHHQ.crl (hash: rGFL1P7TGpkYg2huRoBHdSI/50jTL/TOYbHFiIFSPvg=)
                          2: WoVSbZlF9eLtYRVji_zRBQcPw7Y.roa (hash: CjfnuVj/3fVYR33nnzajvIHxcSrDiwh6OzJufPXP+/8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:8a:0c:67:53:ed:e8:f0:9f:08:a9:59:1b:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
        Validity
            Not Before: Sep 16 08:01:09 2024 GMT
            Not After : Sep 17 08:01:09 2024 GMT
        Subject: CN=c422469a01e9a14f75047eb277dac95cd41b350f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:46:bc:ec:3f:af:37:b5:32:4c:21:7e:ff:
                    21:a8:fd:58:5f:56:42:bf:54:05:70:77:ae:8f:f6:
                    e6:40:05:6a:38:05:90:f1:40:bc:ac:5e:71:66:1a:
                    8e:ac:f3:a2:73:6e:8c:79:a1:b5:ef:34:a7:4d:bb:
                    44:47:75:4f:2b:7b:22:3d:41:bd:8e:3a:c5:f5:55:
                    57:ae:44:ba:17:56:c0:9b:a4:2b:dc:df:0b:56:56:
                    8c:5c:94:a5:cb:d5:52:1e:df:28:10:8f:a7:a7:ec:
                    b0:d8:bc:28:b4:23:d2:28:bc:36:62:fe:03:07:4f:
                    88:48:5a:7f:79:10:98:b8:b2:12:33:89:87:c9:79:
                    22:64:57:60:49:32:a6:ae:34:42:94:e6:a5:90:a2:
                    e3:97:5a:5f:0b:7d:74:ea:b8:63:f9:17:ed:25:d6:
                    4c:35:f7:c7:4b:ed:d5:c8:97:02:97:2a:50:e8:15:
                    00:55:e5:ec:87:e9:96:f3:ae:46:ec:c3:19:7f:ab:
                    81:dc:37:8b:44:78:de:4d:07:93:48:59:eb:08:a8:
                    35:2f:e7:4f:32:95:44:e7:93:30:41:71:b9:68:25:
                    52:9d:a2:d8:2b:8c:36:4a:90:22:4f:46:e5:d8:2a:
                    cb:cc:f9:bc:a2:7d:d7:ea:7f:8d:70:39:72:c2:22:
                    e5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:22:46:9A:01:E9:A1:4F:75:04:7E:B2:77:DA:C9:5C:D4:1B:35:0F
            X509v3 Authority Key Identifier:
                keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ef:3f:23:f8:74:b9:27:b8:fb:a0:bf:3f:30:cd:d0:94:b8:
         fd:66:e5:0c:ae:11:8d:53:17:6c:6c:ee:4d:4a:aa:d0:4f:fb:
         97:b1:bc:1a:05:d8:5b:58:7f:f8:9c:9c:ea:b2:8b:03:bd:47:
         66:03:94:2d:2e:be:fd:f4:7c:8b:53:2c:3b:39:c7:3c:fc:6b:
         3d:c1:03:ee:19:b0:06:69:98:f6:eb:2e:d6:00:30:69:3d:aa:
         66:9c:6d:57:c3:f3:c6:8e:a5:1a:cc:e0:d4:0e:f0:17:c2:1c:
         83:0d:60:2d:24:ce:18:18:c8:04:14:df:a1:0d:c8:5a:d8:8b:
         29:dc:b5:e9:9f:cc:fd:0d:2a:f5:2a:a0:87:d1:e9:20:b0:bc:
         29:39:85:d7:f6:a9:5d:69:1b:0a:46:5e:5a:30:6b:6b:a8:e1:
         b7:9e:7b:ec:48:e6:de:17:d1:71:80:1b:f2:80:47:8a:b9:d7:
         ca:c7:49:2b:d8:ba:56:98:8c:ad:29:62:8d:e1:11:8d:9e:2e:
         08:87:a0:c0:39:9e:6f:04:6b:8a:f2:db:39:83:45:4f:38:66:
         83:c3:ee:5a:31:1c:12:5b:ae:87:e1:8c:07:fa:22:4a:56:c4:
         0e:6f:ff:f2:ac:d8:4b:fa:df:a5:87:00:e2:3f:c4:03:c7:20:
         20:60:b1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:21:07 2024 by rpki-client on console-fra.rpki-client.org