Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File:                     8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier:          DehyynWGOvNWwm42oOWvpKK5ECZOUijk93nMnpv023Q=
Subject key identifier:   A4:23:AE:D4:F1:8E:BD:1C:58:9F:EA:C6:17:8E:9C:6F:89:38:27:DC
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer:       /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial:       018F5A3A199B98AE0E3D6FE762616065241D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number:          0B98
Signing time:             Wed 08 May 2024 22:01:48 +0000
Manifest this update:     Wed 08 May 2024 22:01:48 +0000
Manifest next update:     Thu 09 May 2024 22:01:48 +0000
Files and hashes:         1: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: 9NHwWjxZ570+dEnR1Dl5igXOGUGkPZBxY+pKNAo0RXk=)
                          2: cPHe-0LzRQMnr5nJC83ZX8GAjJc.roa (hash: loF66niATkFL55qyztVgOspu5xXOH5lmnTmUCqUmirw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5a:3a:19:9b:98:ae:0e:3d:6f:e7:62:61:60:65:24:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
        Validity
            Not Before: May  8 22:01:48 2024 GMT
            Not After : May  9 22:01:48 2024 GMT
        Subject: CN=a423aed4f18ebd1c589feac6178e9c6f893827dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:24:6d:12:6e:6f:db:21:c2:1e:b1:62:11:
                    a4:a9:a9:7c:a2:a2:71:65:a0:df:63:d6:6b:0c:df:
                    4c:02:2e:61:f1:e8:c0:a5:73:be:0d:1f:36:12:ea:
                    ea:65:7f:d4:13:96:35:a6:16:75:13:be:bb:3a:be:
                    47:08:55:49:b2:c2:a9:59:3c:5d:83:d4:2f:ce:39:
                    d8:45:9e:41:36:96:e3:7d:74:d9:21:de:eb:72:d7:
                    17:77:39:9c:f1:4e:12:63:2d:a8:d1:57:c7:cf:b2:
                    27:a9:3e:70:16:80:8c:95:bc:35:cc:6b:8e:87:38:
                    a0:f1:96:2e:ab:24:cc:91:ba:fe:bb:d3:8a:d0:2d:
                    e5:60:b0:07:52:f6:b3:cc:1c:13:99:e1:ba:51:38:
                    23:f6:05:75:d8:31:e9:2f:df:48:82:c2:9f:2e:2d:
                    54:89:54:4d:65:a5:ea:d9:4a:14:1a:96:a0:bf:95:
                    2f:a5:0e:cb:a1:98:4c:d5:1b:68:ed:02:41:e8:75:
                    be:52:c7:90:6c:96:29:39:e6:9d:f1:ce:d8:5e:06:
                    4d:a1:86:17:c2:6f:10:4d:8f:30:14:8e:79:86:b0:
                    80:b8:c5:67:c2:a1:de:fb:74:d8:41:26:80:ff:8b:
                    7e:89:e1:c5:b7:d7:09:ba:a0:67:cf:a1:aa:2e:cc:
                    28:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:23:AE:D4:F1:8E:BD:1C:58:9F:EA:C6:17:8E:9C:6F:89:38:27:DC
            X509v3 Authority Key Identifier:
                keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e1:f4:7b:50:23:1b:9b:ec:8d:0c:9e:2f:63:64:0f:e1:3c:
         11:7b:53:a0:1a:80:30:c4:50:38:aa:25:59:3f:4c:54:57:40:
         25:da:5d:c1:87:eb:65:a0:ea:84:4c:bf:6c:3c:31:70:3b:da:
         b9:00:a7:ee:9c:29:a7:00:79:24:fc:0e:91:d9:13:d1:d6:19:
         ff:f9:bd:76:5c:f5:84:25:7d:ec:3e:de:f5:89:c2:fd:bc:bc:
         98:1f:b4:4d:1a:ff:16:c0:92:b7:ae:a2:da:32:55:73:54:bf:
         37:55:8f:91:51:80:bd:c5:d9:63:2e:d0:b2:dd:1c:76:a7:74:
         80:34:94:e9:e5:aa:8b:05:e2:8d:c0:41:d0:0e:8b:45:23:9e:
         11:a9:3e:28:31:a3:89:d8:88:dc:e4:c7:28:0d:36:e9:17:ea:
         3c:fd:0b:54:00:c9:b3:97:42:c3:cd:33:7d:c5:fd:d7:5d:db:
         33:aa:0a:a8:e1:bf:af:2b:f7:e4:96:e8:a5:65:19:43:5e:78:
         0e:0a:26:f2:d2:78:45:78:5f:c3:c2:ef:cd:48:f7:5b:f3:aa:
         44:d9:4b:7f:dc:49:2a:71:5c:f6:d9:62:1c:2b:f9:10:25:a0:
         ba:d6:22:df:ae:27:1f:5a:85:73:e8:f4:49:44:52:ec:e7:63:
         4c:7f:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 23:55:10 2024 by rpki-client on console-fra.rpki-client.org