Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File:                     8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier:          VjsS4RFnmSMj7eaqepngzDbc4GcAbJFu2iWJ3eF+MlQ=
Subject key identifier:   F5:37:11:F9:60:EE:7B:FB:9E:72:09:C7:8A:D6:9B:CA:86:8F:54:8D
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer:       /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial:       01940647376DE6F9B43A9BBBA9D42B148E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number:          0806
Signing time:             Fri 27 Dec 2024 04:01:57 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:57 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:57 +0000
Files and hashes:         1: 2jU5tX0MmGcLaNRntJSk1GN-kY4.roa (hash: ysMRy3ouJMBOpE6F97eM8L+K2Os/Xz+PA4dXklGkvQA=)
                          2: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: kI48hXH0MTtP8GqgbtaB+95oMLhd0kfqDNOHosl+tpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:37:6d:e6:f9:b4:3a:9b:bb:a9:d4:2b:14:8e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
        Validity
            Not Before: Dec 27 04:01:57 2024 GMT
            Not After : Dec 28 04:01:57 2024 GMT
        Subject: CN=f53711f960ee7bfb9e7209c78ad69bca868f548d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:a2:35:30:42:42:ca:f9:0e:e6:36:21:98:
                    47:1b:2b:d5:17:c0:a0:dc:ad:4b:ac:02:8f:bd:4b:
                    84:db:c4:15:89:5e:ab:ff:dc:24:14:36:54:75:2b:
                    2d:bf:96:16:6a:94:1f:9d:f7:1c:e6:23:2e:21:63:
                    90:ab:90:50:d7:c3:ee:ae:59:35:86:80:84:c5:d2:
                    24:e7:72:20:c5:21:98:5a:64:2e:7e:91:ad:2a:75:
                    57:13:45:16:f5:93:8d:20:40:69:ad:8f:99:a4:28:
                    e5:21:e7:11:0b:95:7a:08:e0:db:1e:3f:3d:a6:70:
                    53:b9:ec:11:c5:dd:f1:d4:0f:4b:15:7e:73:a8:b8:
                    d9:40:73:fb:77:31:8e:9c:d7:52:b9:af:47:97:a5:
                    7a:16:6a:b7:28:ce:9e:de:2b:bc:1b:b1:b3:64:9e:
                    49:34:03:5e:2a:cb:53:3d:98:71:0a:18:ff:1a:6f:
                    4e:7a:73:8d:73:82:04:4c:4e:8e:98:03:c4:a6:06:
                    fe:9e:7b:9d:0e:cf:66:24:01:66:38:84:06:e7:32:
                    8a:41:36:46:95:12:90:5e:7f:36:2e:f4:1b:8d:17:
                    5a:43:7c:5d:97:96:a3:f6:5d:df:ac:28:2b:bd:41:
                    33:ec:ce:19:36:36:de:bf:f4:89:de:01:9b:48:38:
                    ee:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:37:11:F9:60:EE:7B:FB:9E:72:09:C7:8A:D6:9B:CA:86:8F:54:8D
            X509v3 Authority Key Identifier:
                keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b1:b4:8f:90:84:89:da:78:f1:a8:03:e8:b7:89:7c:0d:92:
         c3:f9:14:e4:8a:6f:a9:93:ff:f3:0b:ed:02:7b:46:38:09:51:
         69:e8:64:3a:ce:70:ae:f7:04:91:81:18:9b:be:0a:c9:e2:2b:
         79:85:cf:42:a0:6b:42:d1:32:ca:85:76:5f:a7:66:01:b8:1c:
         4a:92:10:e3:0d:51:ac:3d:4b:77:e5:1d:6a:3b:72:90:9e:26:
         01:4b:c8:14:0b:c2:7b:a8:d0:c3:c6:75:b5:33:2f:60:6c:98:
         14:96:ee:a9:6b:6d:59:c9:e3:89:41:36:79:a3:40:89:46:cd:
         bd:21:0d:25:ac:c1:35:28:4c:08:97:57:b6:99:05:ac:bd:c6:
         43:a4:ac:54:84:28:da:48:bd:96:09:93:2a:c3:98:a4:69:71:
         a8:6d:4c:8a:80:eb:95:92:6c:fd:01:77:5c:c9:8d:30:09:7c:
         e2:2e:f9:2f:92:72:8f:2c:39:4c:4e:a6:78:4f:8d:54:52:6f:
         3d:09:8c:a0:cc:c4:b6:40:8a:18:a3:5c:52:d7:4a:9c:f3:df:
         0d:73:f8:e4:f7:2c:fe:83:4a:86:a3:a6:59:0d:58:37:98:50:
         bf:6d:46:62:66:45:e2:05:d4:94:43:d1:84:11:b3:90:56:4a:
         06:2d:80:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 13:45:28 2024 by rpki-client on console-ams.rpki-client.org