Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File:                     0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier:          au2ibU12RYJ7UgnT9ppM20jk698ps4sA760puSbCE8E=
Subject key identifier:   0E:4C:07:28:07:E3:D7:8B:3E:AA:C8:77:FF:30:2C:F9:D2:99:02:DA
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer:       /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial:       018F4C46D8D406A6E44250EC8D88EF3EAE01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number:          06D9
Signing time:             Mon 06 May 2024 05:01:02 +0000
Manifest this update:     Mon 06 May 2024 05:01:02 +0000
Manifest next update:     Tue 07 May 2024 05:01:02 +0000
Files and hashes:         1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: qq78ivyb5Dt5BpkzzvsHxgy9A2eQ6hqTwVpWI5VrMFw=)
                          2: O3zu0p6LLGUnuryVZ1ubMaRgCCM.roa (hash: 8/cutdm8wwvT8dFWyASNttICLfGgnAzVSDiuy9VGOpI=)
                          3: ZihuU3yA2pGn3aVCEhC00_TtWkA.roa (hash: 5421cmoCkOmYZj5qaY4QXemVNoVODdoa4BsQ0VCScKU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:46:d8:d4:06:a6:e4:42:50:ec:8d:88:ef:3e:ae:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
        Validity
            Not Before: May  6 05:01:02 2024 GMT
            Not After : May  7 05:01:02 2024 GMT
        Subject: CN=0e4c072807e3d78b3eaac877ff302cf9d29902da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:be:9d:d2:02:21:4d:2f:30:56:53:2f:df:
                    43:17:1a:a2:40:6e:80:11:eb:af:26:8a:ff:79:80:
                    3d:db:8e:fe:73:95:e3:2d:b3:f9:2e:88:59:15:69:
                    0a:d9:1c:51:11:d0:6d:89:1f:62:8c:86:ff:d9:d2:
                    46:13:be:fc:17:f8:43:5d:7b:02:64:d4:7c:07:5c:
                    69:cb:80:ed:60:c1:da:8d:fc:5b:81:fc:2c:55:11:
                    ca:f7:8e:fd:57:5a:76:4d:19:49:23:d4:11:a4:82:
                    a5:80:45:20:99:1e:34:ad:63:08:3c:90:12:c6:ec:
                    60:6a:35:2f:db:de:b4:25:3a:a0:0e:c4:24:89:96:
                    d8:84:fa:59:ee:1f:53:4e:6b:df:79:ef:9a:d7:d2:
                    c4:95:4a:c3:38:c5:d6:b2:b9:bb:a8:59:4d:04:7e:
                    e2:61:c8:1b:c5:80:57:b7:de:9c:c9:0c:fe:37:4c:
                    6c:96:97:88:22:45:c6:e3:db:ce:b5:19:1c:5f:eb:
                    18:4a:0d:19:e6:4a:f8:ac:78:55:df:b0:02:3d:45:
                    c2:c9:60:39:bf:51:d9:3c:47:cb:b6:2b:6a:bd:2d:
                    ff:5a:11:b2:26:b9:b1:c6:63:a6:0a:16:20:52:c1:
                    b1:78:84:75:e9:c9:12:1b:69:af:e2:9c:88:38:65:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4C:07:28:07:E3:D7:8B:3E:AA:C8:77:FF:30:2C:F9:D2:99:02:DA
            X509v3 Authority Key Identifier:
                keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:e9:61:57:5b:ed:af:ac:69:3f:18:fd:3c:93:0a:d1:03:
         86:23:08:b5:5b:c6:4e:d9:d1:f7:af:d7:96:7c:26:99:28:eb:
         65:68:12:37:28:d2:f7:aa:bc:98:f4:f8:32:c9:05:f1:d5:df:
         02:13:7e:d2:eb:c5:ec:ae:0d:f0:74:69:a9:1c:3c:6c:80:a9:
         55:2f:80:bd:45:38:cb:61:da:a5:f1:da:e8:ce:4c:6a:cf:0b:
         4d:f2:ce:df:64:ca:21:ad:67:66:82:03:8a:0e:73:a2:4f:26:
         85:aa:28:dc:80:cd:32:e5:1b:ab:b8:80:0c:72:ae:8b:61:a1:
         ed:6f:5f:ca:5b:10:4a:d9:6d:3f:e3:68:11:87:37:ac:8f:f3:
         71:0c:51:2f:02:20:94:4b:55:56:17:6c:9e:ea:9b:9e:93:d3:
         d4:f9:b9:da:92:35:fc:18:03:03:b0:33:44:fd:b6:b5:71:1c:
         4c:97:5c:8e:82:f0:24:ce:82:fe:5e:c6:09:25:2e:d8:36:cc:
         04:4c:66:7d:06:69:a1:0d:57:de:8f:e2:38:af:04:bf:49:39:
         e9:7f:3e:8d:bd:d4:29:8e:2e:b0:3c:89:f8:f3:ac:ee:2b:83:
         6d:0f:51:2c:b7:bb:b5:01:b6:f9:a9:12:c5:35:17:be:fb:12:
         8a:82:50:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:56:35 2024 by rpki-client on console-ams.rpki-client.org