Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File:                     8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier:          GjT2DYjaPBLwZEbjS/nuuARWHmBwNwwR8LhmiG2P2kA=
Subject key identifier:   C2:DB:56:45:50:23:91:6D:7F:FC:F7:B7:10:EA:4A:48:83:0A:F4:28
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer:       /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial:       018F45A304DF3DA24FD5274F472194833344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number:          0590
Signing time:             Sat 04 May 2024 22:04:22 +0000
Manifest this update:     Sat 04 May 2024 22:04:22 +0000
Manifest next update:     Sun 05 May 2024 22:04:22 +0000
Files and hashes:         1: 2jU5tX0MmGcLaNRntJSk1GN-kY4.roa (hash: ysMRy3ouJMBOpE6F97eM8L+K2Os/Xz+PA4dXklGkvQA=)
                          2: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: xPiIFArOA714zIjy7CvGbQFxSByRGvJF8tjAcJBSj+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a3:04:df:3d:a2:4f:d5:27:4f:47:21:94:83:33:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
        Validity
            Not Before: May  4 22:04:22 2024 GMT
            Not After : May  5 22:04:22 2024 GMT
        Subject: CN=c2db56455023916d7ffcf7b710ea4a48830af428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:20:d2:2b:d9:49:35:a7:34:73:21:50:39:e0:
                    99:cc:63:b1:29:10:c2:41:4b:c7:cf:4c:8d:0d:eb:
                    ac:b8:8b:78:60:d7:34:e5:50:38:e3:81:ec:89:c9:
                    85:82:f4:c5:1d:0f:98:3d:f5:62:f0:55:45:bc:e7:
                    37:c4:7e:26:83:46:b6:0f:0d:4c:15:02:31:c7:cf:
                    09:57:44:27:f9:35:eb:d7:94:05:54:35:2d:07:dc:
                    4c:fc:06:ae:ef:03:e5:7a:0b:28:6e:fa:e8:91:ca:
                    c8:aa:b4:0a:24:86:1b:73:f5:28:e2:43:70:46:70:
                    a3:93:26:c3:9a:c1:30:6f:d4:51:d5:36:a3:39:c1:
                    53:33:bd:38:98:81:e1:e0:29:6d:9e:91:5d:47:3f:
                    59:23:ee:e3:96:f2:23:c3:2b:d3:be:8d:12:14:99:
                    6f:8a:94:95:a9:92:c9:60:86:5e:68:42:3c:47:27:
                    83:3a:d6:38:e4:3b:a8:ce:12:ca:38:c8:d9:91:13:
                    4c:bf:50:22:bb:f4:63:fd:c1:1a:98:66:44:05:eb:
                    6e:41:89:fa:f4:40:91:c9:94:d5:9d:b6:7c:8b:9a:
                    6f:ca:3f:19:f4:5b:cd:86:ee:8e:83:7d:cb:a6:46:
                    ad:06:00:56:fa:d6:75:7b:59:0a:21:c8:2e:f0:c8:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DB:56:45:50:23:91:6D:7F:FC:F7:B7:10:EA:4A:48:83:0A:F4:28
            X509v3 Authority Key Identifier:
                keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:40:52:c7:4f:ee:10:c0:64:1d:2c:a4:c1:cb:ac:c4:f2:62:
         19:a4:f9:29:a6:b7:2e:0a:8e:f3:93:b2:e9:ec:fd:7c:f0:63:
         da:d9:37:14:7c:a4:78:87:48:3d:2a:41:a2:9d:2a:c3:06:14:
         c1:60:cb:64:92:6b:60:fb:eb:8e:c8:f9:91:fd:31:17:c0:87:
         d4:db:db:a4:d1:7b:90:1e:4c:e3:10:77:d4:ed:1f:80:c2:a8:
         84:3f:3e:c3:7a:47:d8:c9:59:f4:22:3a:d9:68:c1:40:74:9e:
         fc:2d:aa:38:b8:40:cb:d6:fd:0c:e2:01:ae:1e:be:46:02:e0:
         e2:81:e3:9c:95:ab:6d:3d:12:62:fa:f6:01:c0:6c:c7:f0:fb:
         0d:da:52:5e:63:0c:4b:04:e8:d3:6f:22:a8:bb:e0:37:58:72:
         e7:32:c1:d2:2c:59:1a:d6:66:b0:14:41:c3:61:f7:d8:e2:18:
         51:bc:6d:14:2a:18:5f:df:b8:35:fc:20:f4:fe:16:9d:02:83:
         8c:58:eb:1c:c1:61:ee:66:c2:ec:14:c8:7c:41:24:01:ad:6f:
         82:fa:49:78:c7:a2:1f:c0:62:b5:e5:87:fb:17:3f:5b:89:69:
         06:3f:a3:d1:3d:c2:bd:74:87:91:67:14:94:dc:65:06:0f:5e:
         85:fc:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:29:11 2024 by rpki-client on console-ams.rpki-client.org