Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
File:                     IQm0ddOrXNHMHElnHnf_nbXOGfE.mft (raw, json)
Hash identifier:          8mzAHThOYymZd3CQrh+VTkS+0Q/9HXerZUxO1Yqz1JM=
Subject key identifier:   93:77:41:CD:62:7C:CC:C9:22:98:2E:41:6B:C8:53:BC:E8:92:0A:A3
Authority key identifier: 21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
Certificate issuer:       /CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Certificate serial:       018F369B2B0E691B0C9E3E6ECA9F8801E85E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
Manifest number:          0B48
Signing time:             Thu 02 May 2024 00:01:29 +0000
Manifest this update:     Thu 02 May 2024 00:01:29 +0000
Manifest next update:     Fri 03 May 2024 00:01:29 +0000
Files and hashes:         1: IQm0ddOrXNHMHElnHnf_nbXOGfE.crl (hash: RWvpIuhM+mpq4kPJWTPyfx6zu+crBdAxXcu3mZZyv6c=)
                          2: jovhATU82sve6VyWcGV94Q1WfWw.roa (hash: lWimsV0zhAjgmEPGe1sMci4Ew+Syn3Xx7l44GxiUE5A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:9b:2b:0e:69:1b:0c:9e:3e:6e:ca:9f:88:01:e8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
        Validity
            Not Before: May  2 00:01:29 2024 GMT
            Not After : May  3 00:01:29 2024 GMT
        Subject: CN=937741cd627cccc922982e416bc853bce8920aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:dd:b7:33:9a:31:97:1f:44:20:5f:03:e5:
                    65:8c:0b:0c:e5:56:b1:b2:d0:dd:42:6c:e7:55:c8:
                    73:e5:72:b4:1f:50:a7:d9:d1:be:46:c6:3a:78:18:
                    60:c4:59:03:4d:08:77:7f:c4:52:99:bd:3e:1f:f2:
                    8d:0d:4d:b3:12:e2:3e:37:3b:e7:b8:7b:50:0c:04:
                    28:ef:5d:80:9c:a6:82:1c:d2:b9:53:bf:43:9a:6f:
                    85:d4:8a:83:d0:89:1b:fe:1e:8b:94:9a:ab:1c:0e:
                    b9:ae:a4:93:44:a9:56:a3:7d:fe:7f:4c:fc:fc:db:
                    2c:d0:0e:c0:2a:57:c6:fa:de:fd:09:dc:f1:5f:12:
                    3c:28:54:60:0a:d0:d9:90:c2:72:58:56:01:37:d1:
                    c9:c2:57:94:44:21:7e:df:90:38:4b:cd:9a:18:48:
                    79:c4:14:a2:61:d2:14:9d:51:c0:42:26:7a:c4:35:
                    e2:2f:34:0e:3e:34:9e:9a:76:47:78:af:ec:72:79:
                    f6:1c:5f:29:37:78:71:43:2d:c5:de:ba:54:ab:a9:
                    0a:75:6a:b4:4e:37:15:7a:a2:98:23:8f:26:d2:cf:
                    c0:ef:84:5a:a0:d8:40:59:c6:87:9c:45:43:35:2b:
                    63:4b:aa:f9:c2:6b:ac:87:46:c6:63:b1:e6:a7:a3:
                    66:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:77:41:CD:62:7C:CC:C9:22:98:2E:41:6B:C8:53:BC:E8:92:0A:A3
            X509v3 Authority Key Identifier:
                keyid:21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:94:98:f2:1b:e9:4c:90:56:36:b5:12:1e:cb:ca:dd:b5:02:
         93:16:77:d6:da:8b:d0:c0:bc:d4:ed:dc:ea:40:97:25:ab:d6:
         83:53:40:e9:66:2e:58:6f:08:9b:4f:c7:c4:d8:5b:98:cc:40:
         c0:97:bf:22:0f:7d:5b:7f:c1:ac:a3:e8:6d:7b:ac:28:2c:0b:
         e5:40:0c:ce:8e:07:25:82:4f:45:23:f0:41:1e:62:a6:3c:0d:
         6b:76:31:73:7b:39:fe:38:de:0d:be:2f:69:a6:a1:a3:aa:24:
         96:2e:ee:0e:f8:d0:06:c2:f8:9d:1d:0a:7f:52:33:19:a0:bb:
         0c:3a:9c:29:a9:10:cb:b5:86:25:77:f7:10:2d:80:af:ee:14:
         6e:7b:fd:e3:e0:cf:97:62:7d:2f:0d:32:9b:eb:b9:b2:d8:b4:
         24:3a:b5:05:52:8a:7d:20:3b:fd:72:85:6f:0e:23:fe:d5:ea:
         a1:f0:3a:5b:07:5e:cf:4b:ff:76:e7:fa:f3:68:99:a2:3a:a4:
         51:88:52:e6:70:5d:1a:e9:87:8c:24:d7:2d:ed:85:93:ac:33:
         41:b8:4d:8e:1f:17:71:c6:cc:1a:cc:1d:eb:33:d9:eb:31:cc:
         0f:ca:6c:95:ae:88:c4:1b:b6:f8:e2:9f:6e:78:7e:3e:21:31:
         b7:a2:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:29 2024 by rpki-client on console-ams.rpki-client.org