Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File:                     c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier:          xteUqpLCtLK8ezK3Y/lPQYobhqHrY2P/GXzJgz757EU=
Subject key identifier:   CE:AB:AE:EA:3F:AC:56:15:4C:EA:16:AB:F0:4C:E5:1B:A7:BF:42:8A
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer:       /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial:       018F874A98EAEE25D5C24DC11E9677BB81E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number:          0ADD
Signing time:             Fri 17 May 2024 16:02:43 +0000
Manifest this update:     Fri 17 May 2024 16:02:43 +0000
Manifest next update:     Sat 18 May 2024 16:02:43 +0000
Files and hashes:         1: YNhAjPv_MdAuuPqHnm7y290GX8U.roa (hash: RDUzcoBXQC6ymboFjCcAST2IbBCynepiIOArHYwunvA=)
                          2: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: Iyd3492X2Nza83SaIh0t1KXQSZtTG/J8BfjIs2FoGEk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:98:ea:ee:25:d5:c2:4d:c1:1e:96:77:bb:81:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
        Validity
            Not Before: May 17 16:02:43 2024 GMT
            Not After : May 18 16:02:43 2024 GMT
        Subject: CN=ceabaeea3fac56154cea16abf04ce51ba7bf428a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:40:89:54:ea:12:80:7f:95:d6:aa:fa:ff:
                    33:7c:e0:70:d4:18:c1:ba:2e:23:aa:d3:67:c6:d8:
                    e1:af:ac:88:1e:35:c1:09:fa:2b:cd:09:ac:ab:a3:
                    5a:73:61:cf:fe:1b:d1:4a:ac:5c:b2:94:3f:3a:bf:
                    f4:d9:e5:0a:ec:26:8f:a0:d4:79:43:3a:3f:20:71:
                    c5:41:35:78:5e:b6:1f:80:ec:ba:38:53:0e:88:1a:
                    5d:88:ee:19:68:41:96:b5:42:23:b8:b9:05:09:33:
                    89:0a:65:e3:e2:1e:a4:db:c5:5c:e4:9c:07:a1:24:
                    0b:be:84:25:89:a6:9e:a4:df:c2:a5:ec:4e:f1:35:
                    ed:ce:cc:5b:53:bd:0a:c2:4f:b7:ee:62:0e:17:7f:
                    ca:c9:89:ef:aa:e9:a3:35:59:7b:5f:d4:85:7c:d5:
                    c1:06:4a:05:22:e4:bd:4a:83:30:65:a7:a7:26:5b:
                    c2:cb:24:83:4a:af:49:84:c0:89:54:27:82:5f:ec:
                    88:a1:a0:81:ba:74:ca:5a:07:95:64:c7:0a:97:1c:
                    8a:75:24:04:d3:e6:3c:4c:db:9d:c8:59:6b:54:19:
                    47:1e:f1:95:49:44:20:df:c5:30:ad:24:5e:86:8e:
                    f8:2b:cf:b5:d7:ea:cc:db:21:63:86:e8:ab:bf:4c:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AB:AE:EA:3F:AC:56:15:4C:EA:16:AB:F0:4C:E5:1B:A7:BF:42:8A
            X509v3 Authority Key Identifier:
                keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:d2:71:e6:18:00:6b:a8:7f:42:dd:d0:15:b1:df:d3:70:ab:
         f2:83:d0:ee:80:93:3f:91:2c:8c:57:5e:31:ec:4e:f0:6f:33:
         39:d3:f8:d2:bd:2b:27:96:ad:fc:be:80:83:e1:aa:18:93:6d:
         6b:82:2e:6c:49:64:19:44:a5:c3:12:64:c7:0b:24:b5:ce:39:
         f2:97:d6:8c:1c:1c:38:49:ae:fb:a6:76:fe:ca:fa:a3:a8:c3:
         b1:c1:82:a7:f1:f6:0e:fb:5c:82:f7:95:22:0e:e8:5c:1c:aa:
         ec:16:ea:98:38:8e:56:aa:6e:0a:24:c2:6d:2f:08:9c:e8:a2:
         fc:57:be:0a:70:1d:87:66:6e:b9:67:aa:7e:0d:eb:2d:59:84:
         dd:6e:4e:40:0d:f7:70:b8:d5:f2:28:f8:f8:ee:0a:45:a2:cc:
         c9:d6:73:bc:6e:24:be:91:4e:c7:61:d8:c8:77:a2:fa:4e:6f:
         0a:5b:28:d6:e4:0b:ae:bf:21:56:1c:15:67:dc:c6:e4:8e:cd:
         aa:75:a3:8b:d8:42:bf:5d:a7:f5:9e:58:79:d3:0a:6b:6f:fa:
         7b:bd:e3:47:f5:1f:a7:0c:d7:3e:fe:03:4a:ee:53:6b:5d:1b:
         67:00:97:af:11:cc:5c:3c:15:65:e1:ae:0f:be:5c:8b:57:f1:
         2e:4b:95:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:11 2024 by rpki-client on console-fra.rpki-client.org