Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File:                     CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier:          9Azc9bLBGl23RFGcWSrSGpIQQu/PMWLJllkcZYHUPZY=
Subject key identifier:   05:BC:81:FE:BA:D6:AD:25:E4:C2:9D:C3:B0:F1:3B:5C:5B:C8:5C:BB
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer:       /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial:       018F40E7E7587AEA8104C77D04263B929E49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number:          10F0
Signing time:             Sat 04 May 2024 00:01:30 +0000
Manifest this update:     Sat 04 May 2024 00:01:30 +0000
Manifest next update:     Sun 05 May 2024 00:01:30 +0000
Files and hashes:         1: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: zkumFGzYVhZ2kKJeviaj161Vsi5SXUeBzh5jWtUAH0E=)
                          2: XRFRRMIxfFjuAOecKNBz2oM9VXU.roa (hash: eus2a+CT8YLfv8XnrQc4TSuPFEZKnw7hFPbZRS3Uo50=)
                          3: j5GJf9wsimGdRDzouABFWCUnBbQ.roa (hash: 9Mcmc8zTJnDH/eg2OzUAWBjtmVkpDML1gGzQcqfxTJo=)
                          4: jroNHvHGwQBlaUboAkTg4lpzHu4.roa (hash: lRF6gKcFPOEEvAAAKvEqEkFUFX8mv2G4gjtbmZ5KgGY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:e7:e7:58:7a:ea:81:04:c7:7d:04:26:3b:92:9e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
        Validity
            Not Before: May  4 00:01:30 2024 GMT
            Not After : May  5 00:01:30 2024 GMT
        Subject: CN=05bc81febad6ad25e4c29dc3b0f13b5c5bc85cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:4d:fb:8d:c3:5d:fe:c0:e2:26:c3:a2:35:
                    b9:49:b2:94:b7:70:3a:20:55:c6:f2:c4:90:c9:48:
                    b7:3a:4b:1e:75:14:3d:4d:c9:cd:96:dd:89:1f:cb:
                    d6:6b:d5:29:92:83:0a:7c:dd:b9:41:59:4f:eb:ac:
                    c5:c0:97:55:56:d1:f7:42:98:79:eb:54:a4:10:5c:
                    2c:21:32:f5:27:e7:93:ac:17:4f:c2:b1:1c:88:cf:
                    3e:5e:a2:22:29:fb:56:a1:fe:2b:4b:a6:51:b3:86:
                    75:42:a0:00:ea:b3:01:8d:d2:a7:5d:d2:4c:f1:2c:
                    1c:1e:8c:21:88:e8:ab:d9:36:2a:d8:16:74:70:6e:
                    0b:01:21:79:d0:5f:7a:22:d9:8d:73:19:12:1a:a6:
                    8b:06:6b:e3:c8:9f:89:20:55:de:91:fe:5d:e9:8b:
                    82:bf:69:80:21:3c:0e:0d:76:3d:53:4c:21:75:c5:
                    a3:32:a7:c6:64:25:ce:66:d1:a5:29:bc:7e:ba:a7:
                    2d:bf:6c:22:e6:a5:9d:3e:8f:2a:57:8e:08:7c:a2:
                    ee:04:e0:33:37:05:d8:ae:b5:f9:df:ec:35:2e:b8:
                    a1:92:55:2c:0f:2f:5b:3e:15:57:96:6f:6a:53:c8:
                    4f:db:40:5c:35:4c:f0:f1:f5:95:cf:14:4d:45:79:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BC:81:FE:BA:D6:AD:25:E4:C2:9D:C3:B0:F1:3B:5C:5B:C8:5C:BB
            X509v3 Authority Key Identifier:
                keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8a:bb:f8:7e:e7:c3:9b:5f:93:c1:72:2d:c1:ed:3c:80:e0:
         6a:d5:af:a1:0f:a7:bd:35:8e:72:51:c5:2c:09:19:51:ae:3d:
         c4:59:ed:25:94:42:4b:fe:97:39:c3:73:d6:fc:65:8c:21:21:
         9a:1a:11:b4:50:29:ef:98:71:ef:87:9e:e7:a5:f4:61:8c:ef:
         fe:cd:78:f7:17:ee:33:cc:85:33:68:ec:0f:d9:5e:71:17:0b:
         82:44:fa:9d:25:13:a2:f1:cd:17:6a:c0:e3:38:cc:0b:6f:00:
         79:1f:da:6f:c7:fe:47:13:46:ca:5c:c5:c5:fa:4c:9f:12:bd:
         86:39:7e:69:b9:28:8d:8d:61:1e:43:a2:ce:06:8e:d4:3c:96:
         bb:f1:47:47:01:e0:70:97:19:06:c7:2a:b6:65:b3:1d:e4:c4:
         b6:05:1c:d0:3f:2c:a6:7c:b3:9f:a1:e7:92:4a:a3:0e:d2:1f:
         14:00:22:b2:ba:3b:f9:df:4f:57:9c:02:18:31:28:75:9e:23:
         9c:67:6e:a0:1f:df:65:b5:60:3e:2c:cc:7e:77:5c:6d:4d:f8:
         b0:34:05:f0:8a:41:87:c1:b4:d8:54:9d:e7:46:5d:32:34:8c:
         d9:d9:e6:e1:f9:19:d7:cc:32:49:4b:93:04:33:de:c9:73:ad:
         26:da:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:17:31 2024 by rpki-client on console-ams.rpki-client.org