Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File:                     C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier:          xNOI60mhbR6Roszkw9tft2FXG/X1L1fqSoHfVWVCVGU=
Subject key identifier:   04:5A:41:5D:DA:23:DA:04:3D:D6:38:A9:18:20:79:E8:8F:CC:22:4F
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer:       /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial:       018F411F0776B792538E7109035BBE38B8EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number:          040C
Signing time:             Sat 04 May 2024 01:01:43 +0000
Manifest this update:     Sat 04 May 2024 01:01:43 +0000
Manifest next update:     Sun 05 May 2024 01:01:43 +0000
Files and hashes:         1: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: nXqCOgNXsmSeGad2k+Nbtdad+Mzr7jpjoMXqlT7t174=)
                          2: PT6cZmyPgyBn_zZYfCXPUkfKKwo.roa (hash: GzmIhKjTlo8Q2kD0JSSM96+SgoARj2583ZFf0rwpWD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 01:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:1f:07:76:b7:92:53:8e:71:09:03:5b:be:38:b8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
        Validity
            Not Before: May  4 01:01:43 2024 GMT
            Not After : May  5 01:01:43 2024 GMT
        Subject: CN=045a415dda23da043dd638a9182079e88fcc224f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:21:4c:e8:76:a5:ab:de:6e:b4:42:de:7b:
                    52:63:33:5a:af:c3:81:21:aa:83:9c:32:b1:12:84:
                    67:4d:47:2e:41:f5:f2:33:7f:59:1b:5d:81:d0:fd:
                    b4:6e:9f:d7:ff:6b:da:8e:50:ba:ec:d0:d8:ab:58:
                    96:dd:a4:f7:8e:b0:d0:1e:b4:7c:34:50:da:88:c8:
                    f8:34:23:bc:0d:f6:50:48:9a:a5:61:00:c7:fd:a4:
                    b4:02:63:8e:9f:3f:04:44:90:f7:aa:f8:53:ea:f4:
                    89:47:d4:2b:36:46:c9:1b:d6:a1:02:f2:23:24:a1:
                    18:90:f6:a3:65:0e:e5:a4:6e:a1:5f:ce:8c:70:bd:
                    fa:4a:a9:f7:cc:6b:13:0f:71:e0:62:53:8c:78:2a:
                    09:22:cc:a1:6b:64:20:89:64:13:5d:b6:15:1e:8f:
                    1f:42:3e:ba:7d:4b:8d:84:69:b6:b4:0d:70:36:28:
                    f9:69:64:86:b6:18:fe:1c:fc:f8:6d:03:8b:db:4c:
                    8e:95:2b:0c:86:d7:e5:62:78:47:36:75:f5:aa:dc:
                    2e:1f:02:7d:b3:89:16:76:bf:61:74:1a:09:c9:05:
                    89:85:3f:a5:ef:66:69:87:75:d8:ac:d1:dc:0c:d1:
                    bf:67:ad:4f:15:e6:5c:10:f7:6e:0a:45:f3:5d:a2:
                    53:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5A:41:5D:DA:23:DA:04:3D:D6:38:A9:18:20:79:E8:8F:CC:22:4F
            X509v3 Authority Key Identifier:
                keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1f:5a:42:01:b2:53:c1:e1:3f:73:70:b3:a1:9d:16:b0:0f:
         8f:d8:72:51:ec:70:91:8c:57:f0:1e:7c:d2:99:c3:f4:57:1d:
         c8:25:19:f9:b5:fd:87:3b:94:5a:48:78:bf:8a:36:55:0c:cc:
         8f:76:09:1c:68:6c:6a:c2:e0:d3:bb:c6:64:be:03:8c:9b:15:
         0b:1d:b0:00:c9:04:05:4e:33:7a:fb:8a:f9:93:0b:8e:b6:df:
         97:1a:83:45:ca:b6:53:9d:bb:25:26:92:04:39:f7:d9:9a:84:
         42:61:10:a9:23:d9:bc:8c:b5:15:20:26:70:b7:02:a9:14:e9:
         da:4a:ff:5b:9c:49:ea:9c:44:29:1f:a1:6a:f5:66:e5:76:74:
         9e:47:c5:06:6a:ee:ea:9d:36:8f:32:0c:7d:8b:fa:20:3c:2b:
         f2:fc:82:2b:f6:f1:b9:3d:9d:3b:47:50:22:34:05:66:c2:1b:
         09:9b:db:36:f2:0e:0f:ff:01:75:58:40:10:25:c0:6a:c1:9f:
         06:83:32:ea:cb:a6:1a:5d:50:ae:59:d0:fc:7e:7c:07:a1:09:
         2f:07:62:a9:e3:68:52:ac:0c:46:5b:6e:fd:a6:dd:e6:9d:9c:
         ed:fa:a6:d8:d5:5f:08:d2:a1:c8:1d:ed:01:e4:7f:37:c5:a4:
         85:00:31:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:45:37 2024 by rpki-client on console-fra.rpki-client.org