Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File:                     8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier:          QWZo4oWPigDZVbUj7LaJ9rKNaVVptFhhS3YT3Qh+pSc=
Subject key identifier:   3A:7F:F1:A9:81:35:F4:E5:7F:38:76:89:30:83:3C:DB:AE:9F:AF:FC
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer:       /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial:       018F20F011103C96400EE72197A63394AC98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number:          1143
Signing time:             Sat 27 Apr 2024 19:02:34 +0000
Manifest this update:     Sat 27 Apr 2024 19:02:34 +0000
Manifest next update:     Sun 28 Apr 2024 19:02:34 +0000
Files and hashes:         1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: vY2h6tzM44MjV/9Ziy2Xf9JUC4vDqNWAqge/NBHq7Cs=)
                          2: rd9hutk4jRx6jd3zGof52fquTMI.roa (hash: 0wlnyo9WnaOA5YVzg9FwUu88/hJCaAI7/wm0MqVGyHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 19:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:f0:11:10:3c:96:40:0e:e7:21:97:a6:33:94:ac:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
        Validity
            Not Before: Apr 27 19:02:34 2024 GMT
            Not After : Apr 28 19:02:34 2024 GMT
        Subject: CN=3a7ff1a98135f4e57f38768930833cdbae9faffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f4:7a:95:52:0c:25:c2:cb:fb:de:bb:0c:32:
                    c1:82:ff:60:fc:b3:3f:b0:b2:25:42:4d:ea:b4:af:
                    f2:dd:33:5d:2a:18:de:9f:a0:53:15:61:81:fc:76:
                    a5:16:c9:d1:56:03:0a:f8:c4:36:00:88:49:1c:6f:
                    6b:54:da:5f:e0:7b:5c:70:fa:38:20:9c:8a:19:ed:
                    a5:26:0b:9b:a6:69:c2:60:fe:93:98:9e:57:f2:b7:
                    06:69:e3:f5:09:9f:eb:7a:26:c8:75:34:a5:90:25:
                    91:62:26:b0:9b:d3:02:ad:68:62:7a:a9:6f:cf:00:
                    c9:35:b5:b6:39:a6:84:5a:c2:88:f2:6c:c9:7b:2b:
                    56:1c:0d:9f:91:e1:da:b3:6e:0c:4e:01:be:34:08:
                    3b:79:82:53:49:b5:5d:ba:86:0f:94:ad:69:83:a7:
                    59:35:de:b9:fc:fe:e4:fb:fb:e6:fd:11:0e:af:66:
                    63:1f:6b:97:57:79:4e:f7:17:bc:8d:91:77:ca:06:
                    b0:b8:3b:c0:c3:13:c1:f1:ae:7a:16:34:f1:86:37:
                    dc:9c:dd:57:7a:7a:94:d4:60:1e:0e:90:6a:fb:11:
                    0a:2f:bf:ea:62:1d:bb:b0:b7:aa:89:3e:d1:f3:89:
                    6a:ab:96:32:4e:ad:aa:10:38:da:25:fa:4e:6b:b1:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7F:F1:A9:81:35:F4:E5:7F:38:76:89:30:83:3C:DB:AE:9F:AF:FC
            X509v3 Authority Key Identifier:
                keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:56:37:ac:46:f5:d7:77:1a:e4:43:4f:21:bb:18:ba:86:6b:
         5f:e9:e6:6e:bc:2e:22:d1:9d:8e:e9:c1:74:a1:0e:7d:97:65:
         29:8c:c6:7e:b3:9b:c2:c4:8e:e9:25:fd:53:06:99:96:b1:82:
         16:61:a7:c0:57:7e:68:e6:14:24:c7:d9:25:9e:ec:0d:97:d7:
         03:95:97:61:20:d8:31:df:f3:d7:23:ce:36:30:82:24:e4:8c:
         cc:89:78:25:3a:1a:55:c0:32:82:6d:50:3d:a1:7d:a4:32:40:
         98:3a:13:6a:10:ba:61:23:2a:93:28:1c:d0:a2:46:b6:ab:b7:
         8a:76:9c:e0:3b:0f:b9:20:5c:35:bd:28:26:71:97:12:b0:27:
         b0:a1:19:6d:73:f9:be:41:c4:32:16:7a:08:31:c5:13:50:d8:
         d4:15:0f:83:c1:cf:62:9f:d9:9f:2f:d9:54:59:9c:40:49:6f:
         04:17:e9:59:ea:49:ea:78:06:da:53:19:01:d0:0b:13:17:db:
         19:35:79:d7:3b:dd:cf:8f:e2:bd:73:14:20:ae:c5:dc:e3:d5:
         ea:d0:30:26:5a:bf:9b:3f:5d:db:98:79:3b:c7:d4:bd:9e:e6:
         8b:94:a6:b9:e5:e2:fe:b7:9b:bc:7b:46:73:85:f5:ae:07:5f:
         a3:54:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:25:36 2024 by rpki-client on console-ams.rpki-client.org