Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File:                     0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier:          KLzUviDx7QnGaDRRLHeBmllCIwFU3h0BiqtFKbQbTEI=
Subject key identifier:   AC:CB:FA:D9:02:A1:0B:92:C9:6B:67:34:BE:2E:D0:82:87:C4:66:7F
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer:       /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial:       018F4B6CB703F2350B9EE4FE8D92F0355B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 01:02:46 +0000
Manifest this update:     Mon 06 May 2024 01:02:46 +0000
Manifest next update:     Tue 07 May 2024 01:02:46 +0000
Files and hashes:         1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: 1+07/BXSwM9+d/L9f3h6QPHsOGMWK42Sg9JURhSRL/U=)
                          2: Y0x9WRRm8LGXrDY60YLb7fQKN6o.roa (hash: 7xS+1cffUZDCQlgKN/80wv8EHSC0d4mFOeNdQLpaN1k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:b7:03:f2:35:0b:9e:e4:fe:8d:92:f0:35:5b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
        Validity
            Not Before: May  6 01:02:46 2024 GMT
            Not After : May  7 01:02:46 2024 GMT
        Subject: CN=accbfad902a10b92c96b6734be2ed08287c4667f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:b7:90:7e:7c:3d:7d:d3:de:20:c6:d4:bc:
                    34:bc:5e:dc:dd:54:f3:2f:b8:77:af:d8:2c:a1:f4:
                    70:f8:3a:91:d3:31:f9:82:85:9a:82:c0:c1:b2:64:
                    90:f9:73:1c:ab:d2:6b:15:f9:ad:9e:92:53:d4:51:
                    00:0e:03:23:23:71:45:e2:87:20:3b:22:56:17:f9:
                    52:8e:25:2e:c7:b5:c0:24:88:10:d2:f8:01:61:a6:
                    91:41:41:c4:ac:8d:74:82:78:ad:8f:c8:13:7d:ce:
                    46:89:44:14:e7:a7:76:b1:93:c6:0b:e7:8d:2c:1c:
                    16:86:b5:1d:d0:0e:7c:46:ce:51:42:59:c7:a0:5e:
                    b9:ee:f8:ef:52:a1:0b:0f:da:bf:f4:14:7e:fa:26:
                    5a:ce:13:18:28:93:2a:52:d0:de:e0:37:08:94:ac:
                    81:d3:96:47:94:e6:66:6d:36:ef:b1:da:1c:ee:2f:
                    e0:10:10:b5:48:c5:5c:40:e2:9b:23:d9:dc:a7:82:
                    30:26:27:08:7e:f4:5d:46:85:b2:42:0f:17:d9:41:
                    83:c0:34:c0:3e:77:1a:19:21:55:67:0a:bc:fa:11:
                    68:fd:1e:42:4c:68:3c:38:6f:78:c9:9f:67:8b:9b:
                    99:08:cd:3b:2b:bd:df:b7:9c:b2:44:cb:8d:a6:01:
                    14:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CB:FA:D9:02:A1:0B:92:C9:6B:67:34:BE:2E:D0:82:87:C4:66:7F
            X509v3 Authority Key Identifier:
                keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4a:ee:8b:46:ec:d5:52:62:83:12:d0:f0:9c:ad:be:49:c1:
         5a:37:df:c4:2c:b0:90:92:82:71:c4:35:7f:db:89:58:ea:80:
         45:e1:f7:28:0b:3c:05:ca:ce:24:ab:9b:23:fe:3d:27:48:b6:
         97:ac:c3:bf:e6:53:b7:f2:bb:54:42:b9:3d:fb:01:96:eb:bf:
         1c:e4:f7:86:94:3c:99:31:91:b1:a5:17:ec:df:df:f9:b1:1a:
         56:37:a1:3c:a3:da:b0:a5:a2:97:a5:da:5d:05:9d:41:6a:b3:
         e4:d6:8e:16:5a:49:5d:85:cc:ff:2f:cf:6c:d4:39:d5:a7:4d:
         c6:dd:06:ae:73:61:d0:7a:ca:b8:d1:49:0f:c4:2e:f4:85:05:
         96:77:62:e8:ad:fd:2c:45:4a:ae:c5:12:7d:f6:48:0a:27:4e:
         6d:7d:c2:ce:77:14:64:a4:0d:bf:6e:cb:88:9a:ec:78:45:6b:
         7d:39:d2:0d:0d:1e:85:25:50:44:20:fd:ab:3c:10:f9:8e:f3:
         42:1d:70:86:eb:f0:ce:81:14:06:be:4f:37:f9:d7:5c:bb:bd:
         56:57:83:d7:38:ad:04:b4:d2:6b:e1:16:16:dd:2f:ba:3e:a9:
         f0:38:e3:41:6e:ed:53:b8:d6:82:23:dc:76:fd:31:05:af:e0:
         3d:6c:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:20:44 2024 by rpki-client on console-ams.rpki-client.org