Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
File:                     8SRlvSRvIjEc6bBe60n3t5FLKgo.mft (raw, json)
Hash identifier:          ao+C+Oe2IVTBTLlKiRCx+y3czQTbsmFtJTLh4utAkV0=
Subject key identifier:   6F:DA:BC:F3:F7:B8:B4:9A:BC:D5:06:14:19:4F:01:F2:50:61:F5:1E
Authority key identifier: F1:24:65:BD:24:6F:22:31:1C:E9:B0:5E:EB:49:F7:B7:91:4B:2A:0A
Certificate issuer:       /CN=f12465bd246f22311ce9b05eeb49f7b7914b2a0a
Certificate serial:       018F5091C9FF27AE1393B81F9ACE86F3897B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 01:01:22 +0000
Manifest this update:     Tue 07 May 2024 01:01:22 +0000
Manifest next update:     Wed 08 May 2024 01:01:22 +0000
Files and hashes:         1: 8SRlvSRvIjEc6bBe60n3t5FLKgo.crl (hash: yaYiEpLKPvmUSsd6YB0+YLXElR2SKG2I7hIXXALMG+g=)
                          2: QwRU46HMW0vLR3yrtaYLE92DqmM.roa (hash: K6tdeV2hAV3Yyk7OlJpTYqm4pPa3A48nKitW0wFPL/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 01:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:91:c9:ff:27:ae:13:93:b8:1f:9a:ce:86:f3:89:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12465bd246f22311ce9b05eeb49f7b7914b2a0a
        Validity
            Not Before: May  7 01:01:22 2024 GMT
            Not After : May  8 01:01:22 2024 GMT
        Subject: CN=6fdabcf3f7b8b49abcd50614194f01f25061f51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0f:e3:3c:ab:92:76:2c:3a:29:17:e2:d3:87:
                    f1:b3:85:ea:62:1f:56:66:9f:c1:24:04:83:f0:90:
                    3b:b8:a6:57:69:b8:50:cb:79:d2:e2:71:a8:b2:51:
                    00:d5:74:bd:bb:94:cf:d9:81:65:65:a6:5d:83:85:
                    11:71:f2:e8:ed:fa:fd:40:6a:4c:df:b4:64:7f:b2:
                    9a:b3:4f:c6:bf:df:70:5d:9a:4a:f8:66:b8:27:dd:
                    91:48:4f:c5:1f:0c:b6:89:99:2f:7f:39:1d:67:65:
                    17:f1:db:f8:1b:71:8e:cd:6f:78:f2:01:60:77:c5:
                    60:19:bc:18:74:7b:69:23:2a:7f:b9:83:b7:b9:61:
                    76:28:f2:f0:11:0f:bb:d9:7a:81:bb:7c:0c:13:ba:
                    02:61:eb:b4:57:af:02:6b:27:08:37:7f:19:e0:ae:
                    45:4d:99:a8:1c:dc:9d:8a:b4:f4:67:1e:4d:5d:c6:
                    2a:09:d0:f5:c9:41:75:34:90:8b:6f:21:79:6a:00:
                    cb:1a:9a:46:fc:02:60:d0:85:60:db:ab:d3:63:9c:
                    5e:2e:4f:4d:1d:7e:62:1f:18:e5:70:de:04:00:99:
                    50:41:56:57:32:4b:fc:03:f7:3a:38:3e:2c:af:c1:
                    d5:15:66:6b:1a:64:5f:f2:bc:43:07:d2:ec:42:71:
                    a5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DA:BC:F3:F7:B8:B4:9A:BC:D5:06:14:19:4F:01:F2:50:61:F5:1E
            X509v3 Authority Key Identifier:
                keyid:F1:24:65:BD:24:6F:22:31:1C:E9:B0:5E:EB:49:F7:B7:91:4B:2A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:93:40:e0:e2:b8:50:93:6f:48:d9:b0:c8:3a:40:f8:49:39:
         e9:3e:6f:7c:36:43:b4:ec:5a:41:d2:a0:0a:7a:a6:5a:fa:f4:
         8f:33:21:14:c3:af:a1:61:da:df:0d:3b:b1:7f:64:a0:27:d1:
         eb:9d:68:c0:cf:6e:bc:7f:e1:9e:ae:92:8f:df:da:a3:eb:47:
         0f:6f:4d:8b:9c:7c:12:4f:ef:05:98:e7:75:58:4e:0a:47:fc:
         c7:2d:cf:76:92:56:4c:b9:9f:ff:32:74:51:d4:34:8e:82:77:
         19:e6:93:d5:52:8f:1f:e4:47:82:ed:15:77:19:9b:c4:8f:b0:
         21:6f:74:7e:25:ca:f5:72:ac:76:dc:f9:f3:9b:38:48:b6:cc:
         f3:6f:7b:77:09:59:61:4f:99:07:e4:59:2c:d3:2c:ef:aa:d5:
         e6:22:73:b9:84:52:99:6e:f0:23:be:ae:c9:60:6e:13:36:cf:
         92:fa:a1:70:59:a1:f5:e2:9f:f0:1a:13:81:ad:18:7f:0c:fa:
         bc:c9:44:1d:0a:d5:3e:0a:57:a4:f5:3c:5c:ef:54:84:dc:f3:
         c0:a6:02:4a:15:cf:d9:1a:1f:8a:2d:5c:b0:61:08:de:43:5f:
         2f:7c:5d:33:16:78:4b:ee:8b:78:41:0a:58:cc:40:cb:64:8b:
         1f:39:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:05:50 2024 by rpki-client on console-fra.rpki-client.org