Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File:                     Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier:          Lnjpb9w1AKm7lnzNMAJJCRHSXlKpHsj60hzNZ+/NHno=
Subject key identifier:   57:BE:29:0C:0F:B1:77:17:2B:76:80:40:C0:30:E9:EE:0C:AE:E7:C8
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer:       /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial:       018F855AA1258D2FF4203A831F2ED23A47CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number:          0FBF
Signing time:             Fri 17 May 2024 07:01:00 +0000
Manifest this update:     Fri 17 May 2024 07:01:00 +0000
Manifest next update:     Sat 18 May 2024 07:01:00 +0000
Files and hashes:         1: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: lQKTqV+JvkYUYGDt2ctlP4rZxwgxAkivXh1FGk57BDQ=)
                          2: Zol7mJzaqao5kdoBN78XY7mpZaY.roa (hash: leLar2UZYH7kjDgztQTDqDDdDoNObvxLJNtwMUVHM2Y=)
                          3: eTprPEpA4LOl_HnFAoGz9qI-OWs.roa (hash: rj4qDh0PsDQBwOKGDCi0+FtyCBh4Q9K2XL23OFRKfOo=)
                          4: pcg79x3xjTRecqQjm7Mv99kQi7U.roa (hash: 07vQbUGqtSnVaLVwcqb2j8hOwmTq4gMID1FBvloo4oM=)
                          5: rX80ALJDuF9HIDakUgKgTEqLjvw.roa (hash: W2kX/IENhWbo6XGpAutYPuW8Z7nxi5TjH6JYeU0jKjA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5a:a1:25:8d:2f:f4:20:3a:83:1f:2e:d2:3a:47:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
        Validity
            Not Before: May 17 07:01:00 2024 GMT
            Not After : May 18 07:01:00 2024 GMT
        Subject: CN=57be290c0fb177172b768040c030e9ee0caee7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:15:5f:7a:b9:3a:2e:52:eb:fd:91:40:53:
                    79:1a:5d:6d:97:78:6e:e7:a1:27:d4:1d:04:d6:7b:
                    3a:bf:fb:de:25:db:d8:16:3f:e1:7e:8d:b2:eb:58:
                    b2:a8:4a:41:10:de:02:75:bb:63:f0:aa:a1:41:c2:
                    0d:29:5e:50:64:5d:c5:f9:36:a6:ef:66:7b:c7:c0:
                    3d:d5:b8:9f:f0:9e:e7:b1:9b:32:7f:ca:84:f0:7b:
                    c9:d8:23:d2:c8:68:d1:62:71:f1:df:e1:e6:0c:68:
                    bb:25:e6:03:f6:eb:b2:aa:b9:46:04:2a:72:6c:8c:
                    4b:df:dc:93:41:c3:8e:1f:f1:09:82:84:a4:07:75:
                    12:94:3f:4b:ae:23:c6:b5:e6:0b:ca:b8:2b:ad:dd:
                    c4:87:0c:4c:8c:98:75:4d:77:f8:23:8d:29:1e:aa:
                    0b:f7:a2:f7:37:54:48:79:24:78:4d:81:49:ca:36:
                    1c:48:30:ea:0a:04:ec:35:16:25:9e:54:58:71:b3:
                    75:d9:49:b7:5b:4a:20:7a:b0:23:61:0b:1f:ff:47:
                    6c:f2:72:84:93:a7:37:91:b6:d1:f3:e7:e4:e6:4e:
                    d0:17:05:93:a0:ee:53:64:e8:69:ee:01:01:2f:bc:
                    ab:1f:af:6e:10:0e:6f:aa:72:2c:1e:01:0a:5b:b4:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BE:29:0C:0F:B1:77:17:2B:76:80:40:C0:30:E9:EE:0C:AE:E7:C8
            X509v3 Authority Key Identifier:
                keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a2:43:00:68:ae:12:b3:2b:70:e5:63:b4:25:23:a5:1d:29:
         20:8d:01:1a:8c:72:ed:50:58:fa:f7:9d:b9:18:4e:de:f0:af:
         4a:39:09:8c:bb:54:6a:8c:48:7c:fb:5a:ff:c1:cb:7c:8f:27:
         b9:c2:53:1e:ca:56:75:c5:22:e1:5e:38:29:7b:f8:5e:c3:f3:
         ea:72:77:59:46:ce:89:02:1f:ad:6c:5b:55:18:da:6f:73:bd:
         2c:f6:6e:d7:5d:31:ab:17:9a:24:36:07:ea:3d:df:40:3f:ec:
         60:ae:0f:c3:23:3d:8b:8e:e6:c8:ee:da:ae:bd:a6:9e:d2:0a:
         7f:53:e9:d6:88:38:a1:67:f2:f2:c5:9c:6f:e0:6a:0c:d8:89:
         54:24:16:d6:12:42:e9:25:f2:92:6e:45:cc:66:c6:89:04:6a:
         7e:de:92:fe:be:47:d9:10:f7:2d:da:4c:f9:d3:c1:03:d7:26:
         40:e9:42:be:eb:5e:f7:d8:e7:43:70:dc:e7:c1:a2:76:66:24:
         f4:ee:be:c9:b5:97:de:34:3a:5e:f8:b1:5f:12:b2:d8:c4:e0:
         ab:77:34:94:ff:fe:11:ab:6b:77:2b:33:ae:83:6b:1f:3a:37:
         9c:8a:c6:f0:6c:b3:39:df:0c:b1:4d:2a:ba:93:9c:1d:dd:5e:
         ab:aa:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:46:19 2024 by rpki-client on console-fra.rpki-client.org