Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File:                     8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier:          x07w2N4kPdrtraVwO4gLZONbkVOAMwwWK9IjHSZJ7rI=
Subject key identifier:   CD:0A:73:CF:EE:64:39:72:78:E5:15:8D:39:8F:96:21:3C:EE:02:5C
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer:       /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial:       0194064797F29CA369668D6110E6E428E710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number:          13CA
Signing time:             Fri 27 Dec 2024 04:02:22 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:22 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:22 +0000
Files and hashes:         1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: j1tc2nerlwuwG3x1yRz7wNtF/IRG5DnGWrYbuZXCnkg=)
                          2: UL8laOBuUZdNr4QHNcHDx5EZOfk.roa (hash: 40qlmVr1stvl+iXDtaYddbFFFKge5amfic53MfWh94I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:97:f2:9c:a3:69:66:8d:61:10:e6:e4:28:e7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
        Validity
            Not Before: Dec 27 04:02:22 2024 GMT
            Not After : Dec 28 04:02:22 2024 GMT
        Subject: CN=cd0a73cfee64397278e5158d398f96213cee025c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:c9:67:b7:82:67:31:87:dd:cf:04:ed:05:
                    97:01:1d:62:1a:b5:28:d2:ed:ed:4b:82:61:b4:27:
                    c5:7f:94:0d:40:4e:ec:4a:f0:8d:40:71:22:f9:ad:
                    24:53:ff:e2:de:82:55:ea:65:e4:e9:1a:bc:8c:2c:
                    77:ea:e0:c1:8c:f0:e8:96:47:95:b4:83:f7:f8:50:
                    9e:7d:5a:e0:ab:f4:a0:28:0d:68:5f:b6:91:a0:df:
                    86:19:9c:2a:52:52:f5:af:b7:99:7c:5c:bf:ba:3a:
                    18:7e:e5:ba:08:c6:bc:ce:dc:f8:9b:e1:3f:84:1a:
                    ae:7d:69:f9:13:fd:be:fe:7e:32:f8:7e:16:88:a7:
                    c2:54:f1:fe:cf:b1:ce:de:20:7c:d1:6e:94:57:39:
                    f8:d2:4f:65:e8:01:1c:47:ad:2c:84:db:d7:0e:da:
                    76:67:e2:e0:a7:85:87:49:e4:62:37:9e:75:ac:6c:
                    cd:b0:98:6a:ad:ed:2e:b8:d4:ce:e1:14:ce:58:21:
                    28:c9:9b:88:f9:af:95:ca:41:c0:e9:79:60:3b:31:
                    64:a5:c8:fc:38:0c:da:6a:1e:10:9d:05:88:fe:76:
                    d3:cd:cc:35:dc:e2:55:b1:fb:be:ed:14:37:95:3a:
                    7e:91:76:b3:d7:8e:d9:f8:c6:ea:96:b6:9d:ed:91:
                    fe:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0A:73:CF:EE:64:39:72:78:E5:15:8D:39:8F:96:21:3C:EE:02:5C
            X509v3 Authority Key Identifier:
                keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f8:99:e7:8f:71:6a:0e:62:f5:b4:3c:81:48:e2:af:18:3e:
         87:5a:d6:eb:0b:54:4b:90:5b:aa:cd:73:8d:7d:de:79:86:13:
         05:f8:39:7e:a2:80:a3:f9:3e:e6:f8:32:54:ee:81:dd:0d:1c:
         29:9e:63:07:c7:4f:02:13:70:03:4f:90:55:7a:d7:74:be:49:
         4d:65:56:35:49:a5:5b:27:62:39:ae:1c:11:aa:06:28:06:b0:
         41:dd:45:47:fe:cf:61:25:90:bb:14:05:d3:ab:5e:bb:bd:03:
         a5:a7:5d:cf:08:8c:d2:e2:12:b5:36:0a:5f:81:eb:a7:9d:6a:
         2e:0f:9f:d1:8f:e1:4f:af:41:97:e0:4a:93:94:02:7d:77:9c:
         0e:3a:45:97:72:3b:d3:fb:25:a2:f5:29:96:49:a9:da:6f:f1:
         54:d3:5f:4f:59:8b:66:be:4a:6e:85:98:a5:52:5a:4a:c2:0a:
         b6:f7:7b:8c:e4:4b:ca:83:7e:c6:b4:f0:65:58:01:14:74:7a:
         8f:86:c9:8e:df:55:a8:6f:7e:d1:19:78:31:13:50:25:d5:32:
         6f:f6:3f:3a:32:3a:b8:11:07:42:4f:ce:e3:fd:a4:b9:78:46:
         51:d5:25:66:41:ef:74:bf:0b:41:fe:3e:10:5b:6b:08:32:cb:
         b2:37:ea:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:01:44 2024 by rpki-client on console-ams.rpki-client.org