Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File:                     AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier:          U8EQnpPcei2S3oI9aFkYYukwqaUh0S8ZcCOl9O9Lp/M=
Subject key identifier:   F9:7A:CD:0B:C3:88:4C:86:BF:78:9B:19:18:0A:5E:3A:AE:AC:6A:60
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer:       /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial:       018F46B2CE41D81DCE9E22EB264D32DB2410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number:          0C92
Signing time:             Sun 05 May 2024 03:01:14 +0000
Manifest this update:     Sun 05 May 2024 03:01:14 +0000
Manifest next update:     Mon 06 May 2024 03:01:14 +0000
Files and hashes:         1: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: R0/lJSjowPhpb0ttCBQtbzc54kINOj2AIdFoJ0vhkPc=)
                          2: _d87b2Kx9QRZpKd6wjqfBNxG98o.roa (hash: CPLlvF/UPYrHFakqpUknxAbghqReilZMeu4TDCYBVGw=)
                          3: krN-pEy9EgLrK_vRvuytLJcocZ8.roa (hash: a2zXII3OYoJ601Av1FgC/xdYhOrH2hqb+n3vaPqPCc8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b2:ce:41:d8:1d:ce:9e:22:eb:26:4d:32:db:24:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
        Validity
            Not Before: May  5 03:01:14 2024 GMT
            Not After : May  6 03:01:14 2024 GMT
        Subject: CN=f97acd0bc3884c86bf789b19180a5e3aaeac6a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:f9:d2:a7:6f:e5:13:41:d6:b2:21:f5:e3:
                    00:45:27:af:27:bf:4a:08:a8:a3:5a:8c:d6:88:ed:
                    ec:de:ed:92:11:50:b8:2c:ca:13:e0:95:49:1c:03:
                    74:7d:95:8c:f8:3d:00:0a:b4:d6:66:71:6a:66:a0:
                    a5:76:55:33:38:6f:16:06:4d:bd:f9:13:69:17:00:
                    90:e1:1c:4d:b9:97:5f:8e:04:f0:3c:59:69:c0:8a:
                    75:ed:00:29:ea:4f:16:55:32:69:7f:7a:e1:d6:87:
                    97:e6:3f:22:63:fd:78:d8:30:4e:c3:f0:4f:6d:35:
                    ee:b4:fb:de:d6:2d:a8:18:39:15:8f:61:61:b8:31:
                    60:74:2b:98:eb:63:e5:bd:ed:67:ef:90:13:f9:98:
                    4c:03:e8:b8:ad:45:59:b0:58:4e:0b:70:4d:ab:b8:
                    04:be:ea:2a:4c:34:4b:3c:8c:56:83:81:06:97:22:
                    4b:8c:9c:f9:e8:cd:a6:b7:88:b7:ba:99:06:2f:f0:
                    34:cf:19:5c:67:54:54:36:48:68:bb:1c:c1:98:5c:
                    56:ea:a3:25:52:04:6e:2d:c2:59:f0:14:d3:0c:fa:
                    bd:24:f3:33:2f:ed:b6:97:4c:c8:66:90:ff:a8:e0:
                    4b:c0:22:82:5f:bb:1f:5f:5f:60:9b:7f:1c:ab:38:
                    b9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7A:CD:0B:C3:88:4C:86:BF:78:9B:19:18:0A:5E:3A:AE:AC:6A:60
            X509v3 Authority Key Identifier:
                keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:98:87:df:6b:a2:a4:cb:61:ea:b7:90:4e:2c:39:5d:a0:9e:
         d3:e8:5d:2d:20:84:d2:59:ae:e3:42:36:d3:48:ca:4a:83:f6:
         a2:88:d0:c6:d9:55:f7:75:cd:0e:3c:64:3d:48:35:c9:96:0c:
         35:a4:c4:eb:f2:89:ec:1e:bc:26:7c:e0:d2:d6:f2:8c:f9:90:
         f1:19:a3:d3:af:8d:f6:02:44:69:4d:28:a5:72:20:d7:de:1c:
         fd:a1:64:62:e5:65:29:0f:c6:5c:40:09:0a:2d:dd:62:f4:ed:
         2d:8e:db:52:2c:2c:5d:25:46:de:8d:b5:13:be:b7:35:7f:7c:
         10:27:cb:86:62:ce:18:e2:5d:8a:4c:0c:8e:31:d4:6a:70:cf:
         a5:fa:01:7e:4c:47:83:e7:cd:f5:6f:58:e1:b7:0c:77:05:c0:
         82:b0:60:65:fc:1c:8f:9d:17:fd:51:71:29:71:d9:08:bc:c1:
         e1:a4:36:90:8c:2d:c2:26:98:e4:9d:1f:fb:95:e7:9e:7b:a0:
         0d:b3:ee:6c:c4:ce:8a:d6:1e:2d:10:be:2d:54:98:be:d4:bf:
         18:b5:01:dd:f7:67:5f:82:cf:a5:6a:3d:f3:c2:7c:a0:aa:ae:
         8f:43:28:fd:91:88:14:9f:47:89:d3:b8:37:88:cf:0e:f9:88:
         40:90:41:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 10:41:28 2024 by rpki-client on console-ams.rpki-client.org