Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
File:                     C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft (raw, json)
Hash identifier:          2M0QsoewfGfGTDeV2OB00MN4VeWNLDnjSpvXfEnfZhQ=
Subject key identifier:   51:12:33:34:72:17:D6:A0:EE:51:C5:85:13:19:F0:45:D2:FA:7A:37
Authority key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
Certificate issuer:       /CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Certificate serial:       018F381C00707DBFB0DF081403BC6F0701D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
Manifest number:          0E2B
Signing time:             Thu 02 May 2024 07:01:50 +0000
Manifest this update:     Thu 02 May 2024 07:01:50 +0000
Manifest next update:     Fri 03 May 2024 07:01:50 +0000
Files and hashes:         1: C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl (hash: wb7jWJH/bXde6tigA29DTYE95QMk6OnpERA4ASQRvxQ=)
                          2: yH9vyg4xtGqTxp9p-vGiYSiSBEY.roa (hash: /ckunZohpD2LwFf44t8473mmV9TLI/iiOdzuYcE3gY4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:00:70:7d:bf:b0:df:08:14:03:bc:6f:07:01:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
        Validity
            Not Before: May  2 07:01:50 2024 GMT
            Not After : May  3 07:01:50 2024 GMT
        Subject: CN=511233347217d6a0ee51c5851319f045d2fa7a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:2f:1e:f0:67:46:23:6b:d2:04:2a:b4:1d:
                    8d:1f:6e:6d:f8:9b:12:3f:7e:0c:81:e6:a7:a7:b0:
                    b5:2d:c2:aa:87:b0:24:91:41:f0:e1:a9:ca:e0:23:
                    7d:43:67:cf:f9:7a:fa:fe:f9:0c:fe:d2:f6:de:50:
                    92:90:96:52:7e:ad:97:9d:75:99:1c:d1:74:8b:e0:
                    35:3a:fd:1b:54:c2:63:c3:62:32:9f:9e:5f:f9:ba:
                    bb:4d:14:e2:69:0d:56:8f:64:3a:ac:c5:3a:d4:8c:
                    61:c1:75:b7:2c:36:a5:fe:a6:56:57:d3:72:74:54:
                    5a:97:0b:4b:16:04:88:00:7e:a0:7d:eb:05:2f:60:
                    2b:75:58:08:45:3f:73:d7:70:19:1b:03:fc:5b:a6:
                    3f:76:a5:a6:b8:bb:b2:db:e0:c1:e9:fe:23:7d:5c:
                    6a:82:68:7a:69:b3:d0:f1:cf:84:27:b7:e1:8e:c9:
                    f6:5c:09:e3:38:5a:8a:97:e3:68:19:40:28:1c:e9:
                    72:35:2d:30:94:a2:5d:97:2b:83:49:86:98:7d:d4:
                    0a:0e:b5:d0:82:16:e1:f9:52:f2:97:3b:f8:64:c7:
                    bc:64:d5:1a:3a:5d:a6:8b:76:65:e6:8c:fc:8c:42:
                    4b:b9:df:69:03:cb:27:18:74:e6:ab:61:12:f5:23:
                    e1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:12:33:34:72:17:D6:A0:EE:51:C5:85:13:19:F0:45:D2:FA:7A:37
            X509v3 Authority Key Identifier:
                keyid:0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9e:12:a3:0f:52:43:e4:ce:c8:2d:c2:2d:fe:55:22:38:38:
         48:d4:c8:41:6e:69:22:52:ac:49:dd:9b:8b:f2:2b:44:c4:51:
         0e:d1:7f:0b:57:56:5d:c0:11:75:87:b0:c3:36:d9:68:7d:91:
         bb:a2:82:5a:6a:71:98:3a:02:4e:eb:d4:0d:63:6a:9e:8c:cd:
         7b:34:70:b7:d7:5f:3b:5f:9d:a6:d7:5a:ec:88:aa:d0:3a:4d:
         27:4c:e3:50:04:b1:8d:39:0d:4e:f1:cb:62:7f:c2:35:ee:de:
         46:cb:8a:2d:fc:d4:1a:0d:3e:bd:8a:e8:ad:c8:f0:a9:07:74:
         23:a6:0c:59:80:25:75:9b:59:1b:2f:24:43:d2:59:0c:5b:0c:
         ba:bc:b4:0b:e7:50:7e:0f:ca:d4:d3:c2:68:e5:4a:8a:b9:10:
         3f:e2:97:9b:c5:34:f2:91:3c:e4:c1:94:e5:20:19:f6:a9:a3:
         b2:20:a7:0c:37:c0:90:f9:1d:62:46:02:05:f2:92:e3:48:85:
         3e:b3:c8:72:f9:1f:b3:0e:04:69:a4:23:e9:8f:87:21:37:fc:
         be:43:8f:c7:e0:6c:32:41:c4:bb:9b:0b:fd:86:ac:20:3a:36:
         a0:63:b5:f8:5d:af:25:ee:55:98:b9:65:17:e8:4f:ff:b7:6e:
         77:4c:c1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:52:07 2024 by rpki-client on console-ams.rpki-client.org