Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
File:                     2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft (raw, json)
Hash identifier:          yrBPSJjsQjbZYBov5siSn92+FP7v8E/6P/6/QC0n0FQ=
Subject key identifier:   40:4C:AE:0B:43:6C:12:DE:3E:CC:AE:96:71:65:E1:83:99:4F:3F:4B
Authority key identifier: D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
Certificate issuer:       /CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Certificate serial:       018F3B539AB93C94176AB589E292B60E59EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
Manifest number:          0843
Signing time:             Thu 02 May 2024 22:01:25 +0000
Manifest this update:     Thu 02 May 2024 22:01:25 +0000
Manifest next update:     Fri 03 May 2024 22:01:25 +0000
Files and hashes:         1: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl (hash: gGwAj8ZsJ8ro0v+UbPB5j+6aiKsar6UlVhggmMIc1ug=)
                          2: LU5TwDY-KxfbSDE1348CxGL2se0.roa (hash: mPhBdYAfFbtBD1vrPou7SXyt5ZQ0opQ/j/CdEJTxGLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:53:9a:b9:3c:94:17:6a:b5:89:e2:92:b6:0e:59:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
        Validity
            Not Before: May  2 22:01:25 2024 GMT
            Not After : May  3 22:01:25 2024 GMT
        Subject: CN=404cae0b436c12de3eccae967165e183994f3f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:95:9f:04:d5:bc:a7:eb:32:17:ef:55:e0:
                    d7:83:51:77:36:62:e7:4d:2f:46:04:dc:b1:26:17:
                    4e:0b:85:43:c4:59:dd:fd:8f:16:f6:ba:a4:51:4a:
                    36:ef:65:e2:bc:e0:c2:49:39:c8:58:28:fe:6a:6b:
                    e0:1a:a1:35:cc:38:8d:ff:38:d3:61:0f:2e:65:7e:
                    60:3b:d0:dc:d3:ec:82:f8:ab:01:20:69:15:61:5c:
                    7a:52:5c:c7:d1:d8:a7:86:19:bf:ff:73:23:9d:0a:
                    84:34:06:24:ec:22:95:9e:68:a6:07:c4:32:e6:58:
                    19:c9:4e:9b:15:72:63:cf:8f:1b:2c:c8:64:b4:8e:
                    72:9e:3a:92:22:9f:5d:63:57:87:6a:d3:ab:04:9e:
                    3d:86:df:67:41:51:e7:b1:63:bf:33:46:aa:aa:91:
                    49:98:0d:b3:89:b8:01:be:4c:65:60:9d:b0:cb:68:
                    a6:54:bc:ea:58:23:8b:54:8f:97:f9:cf:b3:75:e0:
                    83:67:f2:6c:9e:85:14:58:92:c0:8b:a3:60:09:90:
                    2f:bb:6b:b3:a7:89:9f:1f:48:61:76:27:c7:c6:0d:
                    09:b0:14:23:ad:2c:70:53:65:c4:30:87:85:be:58:
                    3d:30:a3:a9:17:2d:4c:e8:2c:fa:a0:e7:68:4d:d3:
                    da:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4C:AE:0B:43:6C:12:DE:3E:CC:AE:96:71:65:E1:83:99:4F:3F:4B
            X509v3 Authority Key Identifier:
                keyid:D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d6:02:dd:2e:c5:29:d3:4c:59:f9:4b:3b:bd:7a:9f:4e:50:
         eb:60:0c:8e:d0:23:19:8f:3a:b3:44:b6:e5:df:77:3f:02:d1:
         4c:47:e2:76:6e:89:6e:11:b5:fe:ab:56:44:f9:da:53:41:16:
         7c:e6:7f:79:a6:d6:68:1f:24:42:a8:5d:2c:db:56:f8:e4:57:
         4a:7d:c5:71:64:4c:e3:d1:ad:5c:ea:21:ff:26:12:95:7d:1f:
         57:0b:b7:e6:9f:ba:f1:b1:da:36:9b:bc:de:45:da:85:94:6a:
         05:fe:7d:35:a4:c6:f9:23:04:95:d0:b1:88:7d:2f:19:20:46:
         cd:9c:ea:c6:2e:56:c9:da:c8:2d:5a:27:d0:01:74:47:1b:09:
         c8:f6:58:55:b6:d4:fd:40:d7:5b:e8:ac:e9:1e:0b:b8:b5:f5:
         dc:75:df:24:2a:4a:55:12:ad:a0:4d:16:7a:10:e8:01:fd:a7:
         68:f4:df:9e:57:c4:9a:42:73:e9:f9:5b:be:93:ea:72:64:14:
         5e:32:18:96:28:db:c2:8e:9e:ef:96:97:1f:f4:69:6d:b7:b7:
         2b:86:c5:da:95:1e:b4:b6:cb:82:b2:10:94:84:26:d3:73:73:
         5a:de:71:3b:f0:00:6b:72:40:89:16:93:9a:fc:ec:d6:89:8d:
         82:b3:ab:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:22:41 2024 by rpki-client on console-ams.rpki-client.org