Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File:                     97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier:          uC8wkpAd2vdNp0qAkHNyp9nrEaR4qEge62Hqv8VPZM0=
Subject key identifier:   2B:5E:F0:C0:58:87:35:B1:03:90:38:D9:C7:35:BC:8E:9A:46:E0:6A
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer:       /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial:       018FD67701E8D9D7084F1A7EDD99BE08E71C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number:          0948
Signing time:             Sun 02 Jun 2024 01:01:14 +0000
Manifest this update:     Sun 02 Jun 2024 01:01:14 +0000
Manifest next update:     Mon 03 Jun 2024 01:01:14 +0000
Files and hashes:         1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: FatyjznnajSIAcmxPit4rgT/SIW2d9bw2+IXyxnoteE=)
                          2: NzFev56YTxwe9fEuTmRyohgqfcE.roa (hash: +l4+P+gopSoI0Cqc2CQQKSOgbI+ESIbPLt6r438E6Tw=)
                          3: xZ9rC0_bIwspMNrzzCNkaIN9hks.roa (hash: CQdcVF2J0+OkAXd3Gttfb0KR0SgTiLnUxIYTNL2zUFs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d6:77:01:e8:d9:d7:08:4f:1a:7e:dd:99:be:08:e7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
        Validity
            Not Before: Jun  2 01:01:14 2024 GMT
            Not After : Jun  3 01:01:14 2024 GMT
        Subject: CN=2b5ef0c0588735b1039038d9c735bc8e9a46e06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b5:d9:53:22:29:46:fa:f9:fa:3e:78:97:36:
                    9d:84:3a:e1:16:b4:8b:b7:59:e6:01:74:2b:17:a3:
                    a4:32:46:32:db:95:e6:ea:f3:8d:af:e1:f5:cc:8e:
                    5e:13:ac:5b:83:f8:55:7a:64:a5:0b:0d:90:e3:17:
                    4c:0c:c7:4c:e8:96:60:d1:68:45:da:53:65:f2:4c:
                    0f:7f:5f:5c:12:5b:2e:e1:3a:0c:11:ac:24:b9:e0:
                    c9:6b:43:31:ee:79:6f:ef:6b:62:78:96:79:44:7e:
                    16:f9:7f:5b:25:aa:55:e9:e3:4c:f3:c1:f8:50:a0:
                    44:9b:fe:c0:9d:2e:c0:60:cc:22:72:ea:70:09:8d:
                    b9:40:2c:90:40:bc:94:65:51:c8:2a:75:14:89:83:
                    e6:ef:17:5c:7e:cf:dc:d3:b2:6d:2d:aa:dc:be:8d:
                    fa:47:d4:c8:13:40:57:69:28:d6:93:ef:bc:17:06:
                    5a:3c:b9:bd:d1:25:b3:8b:fb:e5:12:5d:28:dd:0f:
                    1b:21:bc:13:93:d8:a7:c3:29:c8:7f:7b:cd:2e:30:
                    8f:23:fb:24:23:bd:61:b4:b0:68:90:4b:4d:f0:c7:
                    25:7e:b1:72:4d:0c:7e:7d:5c:03:c1:96:a6:bd:f0:
                    4c:cf:b4:f5:49:80:40:97:1b:a4:3d:00:e5:ba:df:
                    b3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5E:F0:C0:58:87:35:B1:03:90:38:D9:C7:35:BC:8E:9A:46:E0:6A
            X509v3 Authority Key Identifier:
                keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bf:97:61:3d:df:8d:ad:e4:9b:ee:84:36:45:4a:d2:c8:ae:
         71:9a:79:3e:fc:98:ca:49:42:b5:b3:04:75:5c:25:fc:2b:b4:
         9a:da:63:ba:c4:d1:9d:d1:70:0d:7f:a3:90:88:52:98:79:f4:
         91:73:a4:04:e4:c3:aa:cf:63:94:4a:43:fc:7d:ee:52:32:ff:
         ff:8a:f2:66:8c:f6:95:9b:cc:c5:e7:88:b5:89:20:9a:21:e7:
         e6:36:ff:61:0b:7e:c4:7c:24:cb:9e:58:41:37:ff:47:80:80:
         5c:33:15:49:dc:f6:23:14:9b:ce:9b:17:b2:96:c2:43:dc:ae:
         13:c8:53:ee:6b:71:7a:5c:a6:a2:8f:d8:b7:23:12:ab:f7:2b:
         62:cc:74:93:a9:ea:da:08:bf:98:bb:ba:d5:e5:ad:52:40:20:
         55:a2:7b:2a:76:c8:a1:88:4f:3e:23:fd:0e:09:51:3c:e7:9a:
         d3:61:f4:59:4a:75:33:cc:38:ec:9b:10:34:b5:7a:45:84:4d:
         c9:a0:08:13:c0:d5:5a:be:ec:72:31:ef:11:56:55:84:e5:ab:
         f2:27:6f:c3:52:9a:aa:64:cb:32:ec:ce:c6:dc:31:54:89:d5:
         4f:fd:dd:7a:dd:3a:ad:e9:0c:b9:e5:f7:cc:d7:70:df:1e:d3:
         11:d9:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 05:33:19 2024 by rpki-client on console-fra.rpki-client.org