Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File:                     8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier:          W01gY4BK3Hr4GDzv7EaGYxd9sBjkFtiXrbr6g7IZmKs=
Subject key identifier:   71:16:55:62:A3:F4:6E:23:E5:93:98:B8:A8:17:95:07:6C:E9:4D:61
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer:       /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial:       018F1FDB881A1CB668724F570FC73D41C893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number:          1142
Signing time:             Sat 27 Apr 2024 14:00:31 +0000
Manifest this update:     Sat 27 Apr 2024 14:00:31 +0000
Manifest next update:     Sun 28 Apr 2024 14:00:31 +0000
Files and hashes:         1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: ssD+v3cjnRgoUF6U/ayMlfSnpKpDcQvWrXZeWmb5CnI=)
                          2: u4d3P2hfpAyfaDp3DuFhbAgxG2Q.roa (hash: kLc5qD9b8U1JMSlgemVLl4bbLPbQ5wolqLko4fBzGb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:db:88:1a:1c:b6:68:72:4f:57:0f:c7:3d:41:c8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
        Validity
            Not Before: Apr 27 14:00:31 2024 GMT
            Not After : Apr 28 14:00:31 2024 GMT
        Subject: CN=71165562a3f46e23e59398b8a81795076ce94d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:eb:62:8f:80:fb:97:51:7f:23:76:0d:ab:
                    0b:e4:1a:06:f4:43:5b:17:05:d5:30:2e:9f:74:53:
                    75:d7:70:53:ed:b0:b0:65:d2:d6:d1:12:e4:74:47:
                    36:06:34:b4:b5:cb:56:9c:63:bf:bd:60:75:03:8d:
                    8a:74:0a:69:7c:f0:92:d4:be:d2:af:2d:62:1e:93:
                    ac:d1:71:af:b3:b4:3a:40:80:f4:67:3f:02:e8:6b:
                    99:05:97:fb:e5:fc:50:3c:20:2d:de:e7:3b:94:6e:
                    55:95:10:2e:45:57:2e:3a:75:aa:79:30:e0:35:23:
                    ac:6a:cc:ff:c8:5a:e9:78:a7:e2:d4:c1:d9:d7:fd:
                    81:34:41:6c:5a:ae:81:37:6b:8c:ed:3e:1b:6e:c6:
                    a1:b2:67:f9:a4:ab:52:c5:5b:a2:92:a2:86:64:96:
                    ed:25:c2:a0:6c:11:41:d3:6f:b2:37:6b:82:52:23:
                    46:57:96:a7:e3:6c:c8:1b:7a:d4:5b:06:32:a6:1e:
                    b4:9d:f6:1f:ad:a7:08:1b:b6:f9:18:c2:09:92:94:
                    66:1a:1e:14:7e:0c:16:9b:7a:1b:59:bd:5a:59:6c:
                    d6:3b:3b:a3:10:73:3e:b8:92:0c:36:02:12:21:40:
                    76:3c:7c:31:c2:13:85:3e:fb:c5:e4:1f:e3:d1:66:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:16:55:62:A3:F4:6E:23:E5:93:98:B8:A8:17:95:07:6C:E9:4D:61
            X509v3 Authority Key Identifier:
                keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:27:8c:a9:a4:b4:ef:e5:c5:14:5b:b0:e8:34:52:64:b6:98:
         a9:dd:a1:04:4e:d5:20:54:36:90:e1:5c:e7:a5:62:3f:df:7a:
         ad:ed:93:51:37:dc:98:99:93:41:26:18:fe:92:42:31:9f:04:
         05:19:f2:80:fb:d4:ec:ee:d0:ee:89:f0:81:01:e0:93:fe:49:
         b4:64:e3:57:73:bc:15:e2:c4:8d:b0:ce:e0:5f:2d:42:f7:a9:
         e9:42:af:c9:bb:52:4c:a7:b5:9d:a2:87:ea:98:00:30:17:c5:
         96:a5:d3:2f:e5:15:82:86:75:89:29:97:eb:70:77:f0:21:36:
         48:cc:80:7e:a6:78:87:bb:cf:75:25:b8:24:a9:fc:7a:6b:ce:
         6a:1c:3a:91:e1:54:bc:c2:c2:98:26:6f:ec:84:c9:d1:cf:57:
         96:82:04:84:19:c9:ec:38:f2:07:ab:d8:79:58:1c:08:43:55:
         b3:74:a8:26:88:41:13:0d:e7:bd:60:9a:59:ab:87:c0:1b:52:
         c0:7d:e6:a7:d7:05:9a:7d:bb:5a:2d:0d:63:fa:ff:f4:cc:8f:
         e5:6a:e4:aa:5f:79:3e:63:89:9b:b1:13:eb:9d:a8:f0:e2:04:
         a5:5b:39:be:f2:14:43:ba:ea:39:d4:9b:93:a9:c0:75:e8:7c:
         93:89:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:28:50 2024 by rpki-client on console-ams.rpki-client.org