Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File:                     CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier:          V5B/gLuTW3rYVfjh/aJJNioRlDrL9IHxYGZ+DUdKgh4=
Subject key identifier:   86:EB:19:93:B0:B3:EF:B1:49:E7:69:1F:30:AD:70:5F:B8:CB:E0:1E
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer:       /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial:       018F381CFE9ABF23DFC0793EBF14DAC9C89F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 07:02:55 +0000
Manifest this update:     Thu 02 May 2024 07:02:55 +0000
Manifest next update:     Fri 03 May 2024 07:02:55 +0000
Files and hashes:         1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: XRfAEU1ThPa/ZfgwXTS6LZ3JnCJqDgKqIF49/UgH0Q4=)
                          2: wT5-L8PE2N5iiFfil_JeYLJHmVo.roa (hash: 1cw3lKa0YHPFWSlXKMIwXpoyrxLqPu6704My0ShnVg4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:fe:9a:bf:23:df:c0:79:3e:bf:14:da:c9:c8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
        Validity
            Not Before: May  2 07:02:55 2024 GMT
            Not After : May  3 07:02:55 2024 GMT
        Subject: CN=86eb1993b0b3efb149e7691f30ad705fb8cbe01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:f6:e0:12:94:8d:45:f0:fe:aa:70:5e:7b:
                    36:2b:3a:40:22:de:8a:0d:1d:6e:a3:9a:73:a3:59:
                    43:a9:3a:e5:44:37:fa:80:d7:3f:80:10:c0:71:0f:
                    94:2c:f1:2b:4a:0f:4d:96:da:42:07:9d:01:d3:97:
                    55:b0:da:3b:32:7f:41:43:9e:28:cf:12:39:a0:5a:
                    fa:da:d9:f3:d3:b7:9a:fc:c7:09:34:c9:30:62:f1:
                    c2:4e:5b:b5:95:db:cb:af:a4:68:b9:88:a9:09:19:
                    d4:fa:2d:cb:f4:85:86:a6:8e:ab:c2:69:b9:3d:91:
                    52:55:c1:bc:39:d5:66:04:91:19:9d:cc:f4:a4:f0:
                    a5:35:0c:3e:bf:bf:64:b0:17:6a:d8:dd:43:14:3e:
                    d6:32:69:b8:02:b0:d3:c5:5b:49:99:57:4e:77:09:
                    73:b9:44:fa:64:6b:0d:f5:b1:75:9a:47:fc:93:08:
                    a6:06:eb:96:48:a1:60:eb:19:e0:b9:35:4a:8e:2a:
                    2a:ef:dd:7f:fd:e4:c3:70:e6:72:6e:11:e0:53:89:
                    ae:33:4a:8b:bc:67:26:d7:e8:a7:27:7e:60:af:5d:
                    4f:90:37:58:e4:7c:6a:ba:b5:5e:bd:03:99:18:70:
                    68:cb:30:0a:30:ea:a1:80:3d:5e:4b:5f:e4:6b:4f:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EB:19:93:B0:B3:EF:B1:49:E7:69:1F:30:AD:70:5F:B8:CB:E0:1E
            X509v3 Authority Key Identifier:
                keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:57:6d:a5:71:8e:09:d7:b4:be:b9:57:0c:60:72:68:76:bf:
         24:f8:2e:70:3e:51:44:ae:a2:a8:32:b6:55:ea:74:80:50:79:
         c1:bf:d7:c6:52:5f:91:4a:60:95:4f:c8:15:69:fd:be:30:bc:
         32:f4:c6:bb:bf:1d:ab:2d:94:09:59:8b:e0:6d:3e:73:ff:73:
         d6:46:3a:95:9c:e5:0b:77:35:21:a5:2f:0c:d5:c8:25:85:30:
         cc:30:58:a8:2b:c1:4a:21:bd:8d:41:fe:78:f8:ca:b6:2e:32:
         fe:55:53:11:4f:39:3f:ae:9a:61:fb:0a:7d:8d:f2:47:39:3b:
         81:bc:69:2b:d9:af:11:28:4b:d5:c6:c1:d6:43:5b:03:d2:f3:
         e2:75:3a:58:75:3b:c6:c0:00:c5:ce:1e:9d:0d:1a:03:9f:41:
         6e:c1:e9:99:42:48:75:2d:93:b8:ca:52:0a:9d:f6:46:b1:e5:
         e6:23:bd:8c:0f:23:96:90:2c:26:32:29:f8:67:6e:5b:e8:72:
         89:dc:b4:a5:04:86:bf:22:ff:d5:9c:73:f6:2f:80:3f:02:39:
         1f:d4:b8:38:55:44:3c:b5:86:f4:98:a0:d5:04:ea:26:70:2f:
         60:6a:7f:ac:4e:86:7b:83:1f:27:34:39:5e:bb:70:3e:0a:16:
         f9:ce:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:11:54 2024 by rpki-client on console-fra.rpki-client.org