Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
File:                     9pglYdLaF5Avg-_-EySZ-C1S8WM.mft (raw, json)
Hash identifier:          s2vTMMfC1gBqYx3UyVc9XhrB3709OEEHWel0LHwGFks=
Subject key identifier:   93:D0:64:9D:6D:AC:18:DE:16:72:0C:D4:3E:E1:6C:7B:4D:FA:2D:F4
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Certificate issuer:       /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial:       018F3A09A5B717D135BB0F51662A1024E5BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
Manifest number:          0F08
Signing time:             Thu 02 May 2024 16:01:01 +0000
Manifest this update:     Thu 02 May 2024 16:01:01 +0000
Manifest next update:     Fri 03 May 2024 16:01:01 +0000
Files and hashes:         1: 9pglYdLaF5Avg-_-EySZ-C1S8WM.crl (hash: 5LPN29NHkRZ94qRHJ39anHbkA1AKC6MptkSV6YuiyVc=)
                          2: N0UQ4LJ_Og6ZvvzbOU2iK8C8UdI.roa (hash: ca6pNVpPfIaLTZYiE6tqUIJ35sDGh17EPtcuZHAu9a0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:09:a5:b7:17:d1:35:bb:0f:51:66:2a:10:24:e5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
        Validity
            Not Before: May  2 16:01:01 2024 GMT
            Not After : May  3 16:01:01 2024 GMT
        Subject: CN=93d0649d6dac18de16720cd43ee16c7b4dfa2df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:00:37:c5:77:61:4d:93:1a:28:43:49:fc:
                    c1:fd:17:8e:c3:db:ab:93:9e:32:bc:29:7c:14:86:
                    13:1c:5c:52:ce:ee:68:30:ed:e6:d7:28:fa:ce:21:
                    31:5f:74:e1:4b:27:9c:28:25:5d:c0:aa:78:73:8a:
                    7d:9c:de:0e:e6:ba:50:91:15:07:5d:22:0f:fa:81:
                    08:da:1f:0a:a8:59:e0:50:ef:c9:c0:7a:cf:8b:08:
                    fc:44:2d:69:1b:a9:d4:cf:eb:c3:c0:96:cc:b0:ef:
                    75:19:9d:5c:b1:b5:54:1d:26:dc:e6:d9:fd:00:7e:
                    f2:71:95:f9:e7:be:3d:10:93:5a:1d:5c:6a:cc:13:
                    64:68:1c:07:a3:f1:6b:7e:65:a2:65:54:b2:4c:91:
                    7d:15:56:95:46:86:44:55:4e:68:8a:3b:2e:7c:62:
                    e9:16:49:cd:97:1c:01:75:ec:16:99:39:10:1a:59:
                    c0:a2:79:74:ef:ac:9d:52:05:f7:e8:7f:30:58:43:
                    16:6c:79:25:77:40:11:63:00:c9:76:fc:21:1f:08:
                    2f:b7:7b:9a:7f:cc:88:af:09:ec:1a:8b:df:fb:d6:
                    8e:61:02:4c:4b:f8:d4:8e:1c:e1:df:71:7a:19:74:
                    d7:a5:9d:9e:92:dc:21:66:17:c6:d5:65:8e:cf:33:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D0:64:9D:6D:AC:18:DE:16:72:0C:D4:3E:E1:6C:7B:4D:FA:2D:F4
            X509v3 Authority Key Identifier:
                keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ba:1f:aa:b8:55:dd:a7:41:cf:2f:a4:cc:61:4c:44:25:43:
         f9:1b:22:dc:32:de:b1:d5:de:9e:91:c3:57:f1:4d:ae:b0:dc:
         63:3d:f3:89:48:40:cd:51:44:2e:2a:c2:f9:c3:37:73:2b:e9:
         bf:cd:11:5e:8d:47:55:54:fa:66:7f:04:2f:b1:fb:30:63:be:
         79:3a:6b:a4:4d:fb:98:3f:ca:10:8a:44:c5:e8:07:b6:42:07:
         0e:45:c7:f2:ec:ef:49:ef:1a:e7:0c:d5:5f:b7:e5:03:38:b8:
         f7:ca:93:c6:00:a4:d3:b0:c5:85:20:f6:42:2a:e7:e9:2e:2d:
         77:79:88:7c:a2:d0:95:3a:4e:d6:dc:7b:f7:e9:74:b8:0f:71:
         61:21:5a:56:35:6f:92:f1:8c:aa:94:1c:f9:0f:2a:af:40:4f:
         bb:68:e4:d5:f2:e5:99:48:f6:5f:a2:a1:2d:ab:e2:3b:ad:45:
         01:1c:70:d2:d6:f9:10:d6:26:31:47:a1:59:5b:4b:ec:a8:4e:
         65:1f:4d:9d:99:37:fb:3d:3d:42:35:97:28:e3:6c:61:52:0b:
         cf:06:45:69:1e:c5:18:a5:40:c0:f8:bf:19:72:da:06:f0:d3:
         b8:74:ed:b5:d1:2e:d0:ac:7a:e9:97:a1:bc:04:56:3b:00:d6:
         14:67:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:25:15 2024 by rpki-client on console-ams.rpki-client.org