Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File:                     CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier:          UGzen+ufHfFuAFlp1zZOIpoB43YYiHGdonG2t6N2NtM=
Subject key identifier:   78:CA:26:F8:A4:00:EE:A1:4E:99:90:98:D4:7C:86:EF:43:DF:82:7C
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer:       /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial:       018F4DC806FFE32834AC7B78C182055DDEFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number:          0C7A
Signing time:             Mon 06 May 2024 12:01:45 +0000
Manifest this update:     Mon 06 May 2024 12:01:45 +0000
Manifest next update:     Tue 07 May 2024 12:01:45 +0000
Files and hashes:         1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: lcX2lrrOFul3vkZEjBowBTQCej3D40sL2w3LIfahihs=)
                          2: QubasF67rsvGz5JIN9k_zWLe_vA.roa (hash: TT4qcaAR+A0zx/mhNwxe3LnJC/ufW6/rqfNnJP/PjGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c8:06:ff:e3:28:34:ac:7b:78:c1:82:05:5d:de:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
        Validity
            Not Before: May  6 12:01:45 2024 GMT
            Not After : May  7 12:01:45 2024 GMT
        Subject: CN=78ca26f8a400eea14e999098d47c86ef43df827c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:7a:21:c6:ae:ee:fb:1c:bf:22:1a:d3:24:
                    42:b6:bd:f6:07:2f:49:4c:70:2e:64:9b:ca:62:1d:
                    48:b7:d2:83:e1:63:1e:8e:46:3b:a3:62:f9:17:c6:
                    2b:3e:b4:81:70:72:19:6f:db:76:31:07:aa:80:6b:
                    9c:26:85:3a:ea:95:3d:a2:d9:79:56:f2:48:ab:00:
                    61:36:1f:b3:f2:62:5c:45:f0:6a:a3:f0:8c:b4:8f:
                    5e:c3:9c:f2:cd:58:51:c5:3c:fe:31:70:03:ab:10:
                    33:7a:51:5b:35:23:47:2d:32:18:36:ab:b7:ee:6f:
                    48:cb:5d:98:81:ca:07:6e:ce:96:10:ab:e6:0d:75:
                    93:b4:99:2e:66:59:8f:97:92:c5:08:fc:44:08:bc:
                    eb:2c:f8:ef:51:3b:82:39:58:1e:55:e1:37:65:6f:
                    ba:97:6c:63:74:5a:44:a5:8b:75:8a:a9:41:ba:ad:
                    17:10:5d:64:90:ea:2b:da:54:92:3f:6f:40:c1:8a:
                    f6:0c:32:f6:3c:ae:86:3e:ed:5b:82:53:fc:41:e0:
                    75:6e:1f:cb:50:59:74:66:c0:5f:6a:1e:e9:87:7a:
                    da:eb:69:7b:85:a8:cc:70:db:6f:58:5a:b4:c8:7e:
                    a3:d1:51:e9:ca:38:e6:8b:8d:c1:3f:e7:ab:69:09:
                    fa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CA:26:F8:A4:00:EE:A1:4E:99:90:98:D4:7C:86:EF:43:DF:82:7C
            X509v3 Authority Key Identifier:
                keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:24:bc:ca:ac:23:b3:dc:9d:b2:45:ad:1d:dc:6d:fe:32:a7:
         1f:74:76:d8:30:ea:1d:08:57:58:9a:8e:02:24:b4:84:43:95:
         d5:11:3f:c3:69:b9:af:1b:f1:18:dc:98:36:3b:89:f7:bf:ff:
         3f:b3:d3:e7:7d:54:a5:a3:4b:00:05:c9:48:a3:f5:ff:58:c7:
         30:df:4d:76:e6:21:25:07:14:dc:35:46:9e:80:c6:a9:8f:d0:
         b2:2e:b8:f7:c5:6b:89:ca:f2:91:a3:fb:3f:e3:ae:9b:ff:04:
         5b:bf:21:a3:1c:23:63:15:0a:10:a8:41:82:d4:b6:bc:b0:55:
         f1:71:e3:c3:09:18:35:29:68:35:d9:90:72:af:95:9d:22:65:
         89:8b:46:4e:4f:8b:0a:1c:74:5f:f2:66:4a:97:d3:9e:04:55:
         b6:c5:96:c7:d6:d8:e0:29:fa:7f:2a:8f:e6:42:e9:89:55:e3:
         9f:13:90:40:18:63:6a:fa:53:a6:ba:27:0d:0b:85:2f:46:63:
         00:7a:f4:0a:b1:2f:0a:5c:64:82:e9:77:37:4f:42:9d:ca:a3:
         70:c5:14:a0:69:73:f2:88:6c:a7:94:3f:c0:f7:1e:d7:3e:b2:
         2e:b9:7d:cb:63:5a:c6:ad:01:eb:45:b5:8b:0b:77:df:3f:92:
         75:64:31:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 16:23:45 2024 by rpki-client on console-ams.rpki-client.org