Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File:                     0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier:          vcKhaB2M8YjeARWTRAW0KnM7/MhMh7qTlx3z/le6Xb8=
Subject key identifier:   CA:F4:08:A7:8E:54:8D:24:2E:83:AD:FE:A8:D0:59:7B:39:61:63:77
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer:       /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial:       018F51A48B449D8369BC22927B14184E15AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number:          08D7
Signing time:             Tue 07 May 2024 06:01:28 +0000
Manifest this update:     Tue 07 May 2024 06:01:28 +0000
Manifest next update:     Wed 08 May 2024 06:01:28 +0000
Files and hashes:         1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: oKoxc8vjnHQl3nelXs7ntphh2DJh1bz32b5bHBx6kxI=)
                          2: i3oQKzukNLg6jSitsEuB-kXQErY.roa (hash: fNME+ktNDegyMwCN9dpi3uDKhBMY25hIpAMficqmzFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:a4:8b:44:9d:83:69:bc:22:92:7b:14:18:4e:15:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
        Validity
            Not Before: May  7 06:01:28 2024 GMT
            Not After : May  8 06:01:28 2024 GMT
        Subject: CN=caf408a78e548d242e83adfea8d0597b39616377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:0d:04:88:2c:b8:f1:70:19:ea:3a:c9:27:
                    9a:33:6a:be:27:5f:59:df:e3:bb:36:a8:1a:2d:db:
                    e6:22:bb:eb:c5:30:40:e9:80:f8:3a:4a:d1:20:c8:
                    3c:d1:37:dd:e1:6b:79:ec:7e:b7:ab:60:e7:ed:2c:
                    32:42:a2:fd:13:e5:27:b6:f7:e5:5a:b9:71:24:24:
                    82:de:97:14:ec:e4:0d:75:28:e1:63:37:09:c4:4c:
                    5f:46:fc:bc:0e:d5:75:50:b7:de:dd:47:1c:06:a0:
                    fa:35:51:19:72:a2:b4:dd:3e:8d:9b:cf:c9:85:50:
                    7c:35:7e:aa:94:ed:fe:96:af:79:11:3a:58:92:67:
                    f5:7d:09:4c:a9:15:4b:8f:d4:3a:c3:f9:9d:05:97:
                    13:09:cd:42:28:e0:c7:20:c3:64:21:49:31:27:09:
                    dc:11:e8:32:6f:5a:eb:d1:63:3e:52:a9:88:07:19:
                    1a:50:59:cc:4d:f7:62:3f:6e:42:6e:28:c1:fe:07:
                    d0:13:51:53:69:7a:7b:de:c7:cd:4f:31:94:e5:48:
                    f3:fc:48:ea:37:d1:02:ba:65:1a:59:7c:d4:1e:52:
                    8c:8b:57:7d:da:92:10:7b:57:16:06:50:71:d8:48:
                    44:ed:ed:de:66:07:86:34:1a:60:f7:6d:9d:00:9a:
                    a4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F4:08:A7:8E:54:8D:24:2E:83:AD:FE:A8:D0:59:7B:39:61:63:77
            X509v3 Authority Key Identifier:
                keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ce:3f:9b:61:c4:80:70:81:43:70:f2:82:70:46:6f:a6:66:
         b2:84:cd:68:fb:ac:65:0d:64:c8:2e:bb:95:e2:a9:41:4e:e5:
         c7:c7:3c:d5:62:c5:e0:da:d7:04:85:a5:0f:72:de:9d:5c:b3:
         d1:0e:79:47:18:e2:35:91:d5:5a:68:1f:fa:00:a9:13:be:a5:
         cd:1f:88:d3:37:20:c4:27:95:01:d7:e9:33:63:57:99:dd:ee:
         3f:6d:12:ca:55:ea:d6:17:db:45:f6:d3:0e:2c:1e:29:67:c4:
         cf:82:e6:88:4e:60:cc:66:68:af:97:b4:6c:81:b3:ca:76:c0:
         69:fc:b1:1b:e7:f1:ad:a6:40:39:76:97:78:64:a0:c2:d1:d1:
         76:5e:58:d1:be:d3:77:77:38:61:6a:27:17:8b:64:7d:9e:2c:
         53:6f:b5:4b:24:03:aa:66:03:9e:e9:11:c0:45:7f:f4:5b:40:
         db:d5:48:22:e6:32:db:80:eb:83:26:a4:24:0f:ba:be:78:b4:
         66:cc:64:1e:3b:62:58:2d:5a:9b:29:2e:8c:bc:b6:2a:81:52:
         20:09:f3:eb:69:c8:7b:92:b1:ea:42:a4:20:7f:cc:eb:3d:96:
         f4:e3:16:38:80:4f:9b:88:6d:9c:12:99:ee:86:ca:19:18:ed:
         90:3d:42:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:11:49 2024 by rpki-client on console-fra.rpki-client.org