Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File:                     40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier:          qpJBaOvhyEejGNXSDJl/aB2kKjQgs+ONfR1l3vd5kEs=
Subject key identifier:   60:0D:18:CE:EF:B2:F1:C4:55:88:6D:05:0B:FA:5E:5F:AB:D9:60:81
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer:       /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial:       018F36D1B9A873DB034288D5F32E2A3988B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number:          114D
Signing time:             Thu 02 May 2024 01:01:05 +0000
Manifest this update:     Thu 02 May 2024 01:01:05 +0000
Manifest next update:     Fri 03 May 2024 01:01:05 +0000
Files and hashes:         1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: Lc1qfjlm8snaq5cDUwJ8Hr6oIenDlsrHlYEyZugjqRo=)
                          2: R8vKsRMyAogsBClbjlZrRRe6Dh4.roa (hash: 9TNHRcmZ6YzBREhHk1u2R/CfgrYtDtnmvEKhpfPZ68I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 01:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:d1:b9:a8:73:db:03:42:88:d5:f3:2e:2a:39:88:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
        Validity
            Not Before: May  2 01:01:05 2024 GMT
            Not After : May  3 01:01:05 2024 GMT
        Subject: CN=600d18ceefb2f1c455886d050bfa5e5fabd96081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:ef:1c:ea:0c:38:df:36:2b:75:f2:51:29:
                    1e:7f:bf:d8:11:16:16:cf:c8:a8:14:af:ab:71:51:
                    96:b1:a5:41:c8:7d:eb:66:37:1f:ae:b6:a5:4e:cc:
                    fb:b3:e0:8c:e3:d4:4f:27:42:76:b2:c9:17:e3:a7:
                    12:67:c0:a9:f1:db:a2:b4:09:e5:72:11:d4:46:a5:
                    55:f0:3a:cd:49:87:6d:b7:29:ee:dc:c9:97:2e:bd:
                    14:ed:2d:56:d2:93:7a:a2:61:fd:d6:6c:2c:8c:a2:
                    6c:68:bb:9a:dd:47:48:02:87:ac:5f:89:7a:18:30:
                    f2:04:57:a8:1c:ce:49:64:38:e5:a5:5b:7a:d8:0f:
                    a3:41:76:93:e5:6c:36:d1:e7:13:4d:34:4c:6f:ce:
                    51:54:79:50:c7:73:db:df:c6:6b:bf:9d:c9:d3:c6:
                    f4:54:29:56:75:44:8a:42:22:8e:cf:f1:93:bf:6e:
                    7b:0b:d7:4e:cb:95:c7:23:24:ea:6d:dd:df:3e:88:
                    5f:86:ff:54:e3:fc:68:e9:24:67:bb:8d:f2:f9:13:
                    e1:5b:44:73:f7:e0:89:0d:ed:83:5c:dd:3a:0d:1d:
                    2a:4a:32:00:2b:22:8a:f0:f3:72:89:65:4d:fe:aa:
                    57:15:b0:5c:bb:ff:4e:d8:e0:72:f1:ea:2e:ed:3a:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0D:18:CE:EF:B2:F1:C4:55:88:6D:05:0B:FA:5E:5F:AB:D9:60:81
            X509v3 Authority Key Identifier:
                keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6f:fd:b2:3d:1d:29:62:ec:d1:21:61:ea:eb:3a:2f:85:b0:
         49:51:f0:23:b7:d5:12:88:89:50:32:06:c4:13:fe:ea:19:c6:
         1e:4d:b8:f1:c0:ae:ff:9a:01:48:ca:13:05:2a:bc:6b:4b:f8:
         2b:56:a9:bd:f4:74:e4:b3:7d:a1:70:b0:cf:c0:8a:99:2c:49:
         51:74:b0:84:c2:b1:f6:c9:75:83:da:c5:59:0a:7a:3e:4e:3f:
         a1:06:af:cd:01:2d:8d:3c:9e:34:d7:4d:bc:a4:78:4b:0c:b2:
         ef:2e:bc:19:6e:dd:9a:46:ad:be:eb:4d:e5:e6:4a:6f:8e:a3:
         38:fd:c7:7b:68:e3:75:db:e4:81:3d:ce:74:49:b1:95:66:f2:
         a5:13:44:e7:be:e9:42:f5:0e:b9:2d:96:79:1c:7b:e3:22:61:
         60:f1:10:15:c9:bc:51:ce:a5:79:f0:2b:cd:bc:41:0a:ab:a2:
         21:f2:66:ba:e5:f4:0c:41:8d:6a:15:c1:d9:3c:d4:b3:96:a2:
         78:42:f1:74:ef:c7:53:cc:60:5e:0a:86:ed:2c:3b:52:53:22:
         ed:e6:46:1b:37:84:1a:88:05:60:e0:42:2a:b2:63:67:16:b6:
         b5:1e:77:bb:b9:51:9c:a7:b7:a8:cd:c2:48:fb:09:f5:3c:9a:
         1d:87:42:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:18:49 2024 by rpki-client on console-fra.rpki-client.org