Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File:                     8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier:          a1ITLlv8fNfxZhN/D7eULpYxb8oCuBPhHXHi0sBcUss=
Subject key identifier:   1E:AA:FA:AA:5C:75:FA:4E:46:C2:06:73:23:2C:33:5B:94:06:F5:AE
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer:       /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial:       018F381BB8CCA70D3317BAB25E51ABC9F72D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number:          0C8F
Signing time:             Thu 02 May 2024 07:01:31 +0000
Manifest this update:     Thu 02 May 2024 07:01:31 +0000
Manifest next update:     Fri 03 May 2024 07:01:31 +0000
Files and hashes:         1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: 0Yv7YqVDaYVOc6VOI+aFuRgU+QOIP3Hl0xrlHgFZ6l8=)
                          2: W8C4AXGxEoCT0v4WkBwaQ0PCTMc.roa (hash: BerVcfPZ2HZHF6RnVrk+EkQyhTlfHfBMrzTP71NoXd4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:b8:cc:a7:0d:33:17:ba:b2:5e:51:ab:c9:f7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
        Validity
            Not Before: May  2 07:01:31 2024 GMT
            Not After : May  3 07:01:31 2024 GMT
        Subject: CN=1eaafaaa5c75fa4e46c20673232c335b9406f5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:fd:6c:07:c6:8f:63:25:90:5d:c2:34:5b:
                    e5:dc:bc:e8:f1:a8:53:17:fa:6a:9e:1d:c7:38:b4:
                    a1:bd:9b:dd:0f:37:f2:cb:5a:61:9b:12:1d:96:e7:
                    14:c1:1b:89:6d:84:31:29:05:a0:42:19:7d:7f:47:
                    ee:35:4e:7f:bf:75:27:d8:34:dc:55:e6:ad:7d:7a:
                    36:38:31:df:3c:ef:9b:b0:93:49:58:f6:8d:f9:9d:
                    f5:f6:a2:96:9e:35:ad:9d:9b:52:3a:38:7a:82:86:
                    b2:bc:ae:4d:5c:78:3b:c2:37:39:52:8c:16:ee:6e:
                    d9:aa:83:0b:76:22:af:5f:de:9c:a9:fb:bf:5e:45:
                    9b:15:4e:72:70:9c:a7:3e:04:66:5b:ff:fa:8f:c9:
                    85:1a:09:73:82:ad:82:d3:ef:22:92:c5:e5:26:66:
                    af:fd:f6:bc:16:6e:e2:33:70:a5:67:e7:27:94:fa:
                    90:72:74:e2:dc:c0:4b:1b:5c:d5:e7:c0:b8:04:61:
                    4e:25:d1:b0:51:22:3e:ef:b6:38:1c:d2:4c:d6:aa:
                    ca:c7:82:2d:ba:2e:3f:6f:bd:0a:c3:cb:a9:30:9c:
                    71:6b:52:e9:94:87:26:11:01:2c:0f:23:8a:65:0d:
                    92:2b:55:3d:f7:07:37:4c:c5:09:54:15:86:ad:7a:
                    de:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AA:FA:AA:5C:75:FA:4E:46:C2:06:73:23:2C:33:5B:94:06:F5:AE
            X509v3 Authority Key Identifier:
                keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:54:f9:52:a3:4f:31:cf:4c:40:1c:9f:52:f3:23:f4:50:cb:
         97:33:b2:e1:a4:1b:13:e4:cc:68:16:08:14:be:39:b2:4f:9c:
         f5:64:90:93:f2:7e:69:90:04:89:fe:7e:6b:6b:1e:c1:e9:e5:
         66:53:02:89:8d:2d:99:8b:e1:ab:44:89:7a:53:64:d9:90:83:
         8f:e2:40:d5:aa:93:19:a1:ed:38:c0:42:85:88:66:89:ab:46:
         33:8f:fc:ea:2e:e9:7e:c2:b8:ed:15:06:86:20:60:6a:c7:d9:
         46:a1:a6:55:15:f9:ff:d8:21:bd:9b:cb:1f:f9:77:2b:ce:ef:
         e0:cd:32:fe:e7:ee:d5:40:22:7c:51:2c:4b:9c:1a:70:b9:1a:
         34:48:39:c0:8d:5e:6a:48:dc:3f:39:2c:5b:70:85:a3:43:97:
         9e:83:69:2c:cf:f4:19:c4:86:29:94:bf:29:49:f5:67:88:18:
         47:02:57:8a:5e:ea:c8:1e:c5:24:fa:4f:7d:9d:2d:bd:df:72:
         eb:96:66:3a:d8:46:6d:ec:19:95:67:49:ed:aa:9f:af:77:e4:
         85:6e:78:b9:96:7e:34:29:c1:cb:0b:01:71:21:d8:cc:81:5b:
         65:13:30:eb:63:83:60:27:55:6d:f7:8b:79:7d:2e:20:8f:24:
         58:54:00:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:32:11 2024 by rpki-client on console-fra.rpki-client.org