Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File:                     D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier:          0AfgDCs3ijr5mRZnGmSnJNi9yhVOWL9V8EPGP+mvbZs=
Subject key identifier:   AC:89:94:7D:55:58:3F:E1:22:C4:38:15:8E:08:81:30:7D:AC:F1:CF
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer:       /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial:       018F1F01B5830CAD296859E6977465D1FF90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number:          1041
Signing time:             Sat 27 Apr 2024 10:02:36 +0000
Manifest this update:     Sat 27 Apr 2024 10:02:36 +0000
Manifest next update:     Sun 28 Apr 2024 10:02:36 +0000
Files and hashes:         1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: VMhAh/1L+8Gc0ItORqRjs7tz0//5XpPxBwdc6kzIXmA=)
                          2: h6J8ZXoXYjQl0XoQYqMN0cjLBrY.roa (hash: h8LWGKh1ey5cIzDj/TpEnAb+V9d1lVnKz5Y0o9bQaGw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 10:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:01:b5:83:0c:ad:29:68:59:e6:97:74:65:d1:ff:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
        Validity
            Not Before: Apr 27 10:02:36 2024 GMT
            Not After : Apr 28 10:02:36 2024 GMT
        Subject: CN=ac89947d55583fe122c438158e0881307dacf1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:61:a6:33:4a:f0:1e:9b:50:5b:07:93:4d:
                    34:aa:ba:71:7c:6f:a2:46:2e:38:cb:25:52:57:26:
                    e9:f8:51:44:b7:62:78:d1:5d:76:b2:82:d2:25:e2:
                    46:6a:53:25:3b:99:0a:25:be:a0:af:55:b7:08:d0:
                    62:b2:9c:9f:ff:4e:05:36:ed:11:6e:14:d7:ec:76:
                    e3:5a:3e:ad:e6:3d:4f:7a:61:1e:79:cf:c0:6c:1c:
                    67:62:04:e2:0e:15:f3:bd:25:0e:ac:28:d8:f6:56:
                    b3:f0:7c:4d:2b:92:17:dd:3a:74:d7:f1:b1:8e:7a:
                    19:f0:1c:11:75:1f:43:84:6d:b8:4d:58:f9:9c:85:
                    c2:bb:01:50:f4:b8:fd:1f:4d:26:7b:25:70:46:51:
                    00:f5:17:34:0d:34:eb:62:75:af:95:19:f7:63:b0:
                    08:a3:60:9b:c0:1f:56:5e:e4:b2:a0:c1:ab:11:f0:
                    b1:42:ba:ea:ba:3b:33:21:c4:09:89:51:ee:d3:63:
                    42:b9:3f:9c:61:95:21:a5:da:98:26:3f:2f:5b:33:
                    fc:ea:6d:f3:4d:68:26:e9:31:31:e4:48:90:36:98:
                    0c:25:77:79:d0:22:86:26:f6:49:b5:73:5c:c2:b3:
                    2a:a5:4f:8a:8a:f9:cd:23:43:c2:0b:01:e3:70:ac:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:89:94:7D:55:58:3F:E1:22:C4:38:15:8E:08:81:30:7D:AC:F1:CF
            X509v3 Authority Key Identifier:
                keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:21:ed:79:30:41:e1:80:56:33:28:7c:7b:a6:48:a1:af:b5:
         9d:d5:c4:8c:7a:5e:b4:83:ae:6d:e8:9f:0a:1e:b9:f2:35:12:
         29:0a:3a:54:ce:a9:06:c0:42:cb:d9:71:a2:4e:69:4d:18:7e:
         f6:5a:ba:72:52:1c:6e:64:1b:b1:7b:69:44:41:8c:a0:9f:76:
         2a:99:a0:4f:af:c7:64:f8:44:c4:ee:a1:7a:32:6a:1e:8a:4c:
         46:71:c6:0a:ee:5a:18:90:78:32:69:db:ba:cc:11:5f:df:56:
         32:da:df:1e:56:7b:a8:7c:8a:1a:38:25:47:6e:89:98:00:16:
         47:d0:44:6a:50:57:88:c2:de:bc:d6:93:90:c3:ad:4e:25:1a:
         e7:a8:25:ae:16:f0:d0:01:01:8e:dd:47:5d:dd:55:64:34:88:
         9f:fc:02:e1:cf:7b:d9:e5:6e:c4:5a:d1:80:1b:1e:22:80:c8:
         1b:fb:d0:26:11:a8:c8:0b:5f:90:89:f8:11:88:d9:bf:c8:c2:
         b9:d1:52:51:b4:58:a2:07:05:ac:a8:ff:f2:36:ea:09:f1:70:
         a6:c1:6e:4f:53:33:fc:93:18:04:f0:92:c6:dd:51:d8:cb:2e:
         fc:cf:3c:b2:1b:8b:9d:eb:ea:1a:2e:5a:8d:2d:6d:58:44:4e:
         9d:8e:41:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:57:49 2024 by rpki-client on console-ams.rpki-client.org