Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File:                     1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier:          kOTX9S9pBIJzZkJUc9Sge4ia5C95B8IoJKBP34ZKvdA=
Subject key identifier:   A8:69:B8:42:FE:E6:4E:6C:14:99:63:13:E7:9C:0B:AB:48:AA:89:DB
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer:       /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial:       018F47900CF4E2B1AC02AF013DF3C788209D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number:          08DF
Signing time:             Sun 05 May 2024 07:02:53 +0000
Manifest this update:     Sun 05 May 2024 07:02:53 +0000
Manifest next update:     Mon 06 May 2024 07:02:53 +0000
Files and hashes:         1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: ghgv6msvBCbbpniYZ6U/TmuHdE2UYaayRgmShuBto7o=)
                          2: ZC13JPNHPLKrT4efyM6vFdErDbs.roa (hash: qh0NtMo4ln9FQ2Ghx0EvBigIYwQmlhj0C/zHN0HMrI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:90:0c:f4:e2:b1:ac:02:af:01:3d:f3:c7:88:20:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
        Validity
            Not Before: May  5 07:02:53 2024 GMT
            Not After : May  6 07:02:53 2024 GMT
        Subject: CN=a869b842fee64e6c14996313e79c0bab48aa89db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:11:b8:e1:d4:7c:34:e6:61:3b:ba:b7:3a:
                    57:f4:21:0d:94:28:c6:70:25:c3:28:c0:51:24:25:
                    a1:51:38:51:46:81:78:d0:75:49:e0:4e:83:b8:7e:
                    b4:98:53:b0:a8:8a:05:64:f6:58:52:83:97:28:1f:
                    55:27:75:ce:a0:6b:a6:d1:e9:a6:cd:d6:57:67:ca:
                    87:b3:78:ac:25:d8:69:ae:fb:7c:bf:d4:73:ee:6b:
                    50:0f:68:a6:20:e9:74:31:87:65:86:99:5b:5d:09:
                    d9:f8:4f:6d:99:4e:9e:65:1d:68:30:9f:dd:35:64:
                    bd:78:9f:5c:75:11:84:c5:3c:92:20:27:b4:88:7f:
                    c0:f6:00:80:d6:c7:36:17:09:42:33:bf:f5:b3:43:
                    54:9d:b3:15:50:60:7d:b3:f2:0d:a7:31:42:a8:ed:
                    21:0f:92:f0:99:97:50:cd:f9:7d:7b:ff:58:61:3d:
                    cf:10:94:56:22:f9:fe:a4:ac:a4:36:eb:22:ef:fd:
                    38:dd:e6:3c:fd:54:93:b9:cf:43:69:20:27:4e:83:
                    92:b1:35:a9:cf:7f:45:f1:6c:c8:3c:b6:42:98:11:
                    84:55:b8:30:a8:5a:dc:06:a0:2f:a9:5a:30:9e:0b:
                    15:f8:2b:a3:6a:4c:d5:00:36:30:d6:33:e9:ac:f2:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:69:B8:42:FE:E6:4E:6C:14:99:63:13:E7:9C:0B:AB:48:AA:89:DB
            X509v3 Authority Key Identifier:
                keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:36:ce:b9:3a:8f:73:cb:5a:b6:50:65:fa:bc:41:d1:1e:3d:
         29:72:ad:04:07:61:bd:98:e8:60:5d:20:18:f6:17:97:51:a1:
         ce:e9:28:20:d0:b2:29:f3:30:f2:52:f4:52:b5:fd:14:fc:78:
         41:1f:61:fd:6c:37:7e:45:71:97:fb:a5:c8:ca:58:b6:a0:5b:
         a8:e7:75:e7:8b:41:d2:df:8b:ae:ab:cd:c1:ab:6c:e1:1a:7b:
         5b:7e:19:f9:41:1e:43:b0:44:b1:1f:9c:2f:04:85:e5:db:9c:
         05:de:06:c2:65:da:e4:b7:22:bd:58:b0:71:1a:6b:6f:6b:9b:
         92:b2:c2:fb:58:2d:0d:38:ae:89:69:48:bc:8e:32:1f:34:4b:
         1c:6d:0a:e9:26:9a:64:b6:b4:cc:3e:77:c3:39:21:58:9c:2c:
         13:9e:e3:b0:a6:d3:3f:d3:a6:62:41:8c:d2:ad:3d:e3:2c:c5:
         4d:81:71:47:83:7e:99:59:78:73:74:ef:7d:b5:21:d1:bb:75:
         01:f0:5b:d8:89:69:fc:fb:39:e7:7d:c0:0f:7f:32:a4:26:76:
         53:75:d8:2b:99:5e:c4:28:12:e8:e2:ac:ec:8a:fc:ef:c6:d1:
         fd:18:73:91:fc:47:20:33:19:88:ee:02:66:56:ed:2e:0c:6e:
         98:b3:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 13:58:56 2024 by rpki-client on console-fra.rpki-client.org