Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File:                     CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier:          4XnHdLiAY5tAahRgp6KztEUuQv59EGni/mxVKyOJXMw=
Subject key identifier:   C4:4D:14:51:64:1B:F4:5B:EC:98:32:E7:B5:AD:80:B3:51:08:94:5A
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer:       /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial:       018F4DC7DA7CB093CCA94289C7358FA74168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number:          1087
Signing time:             Mon 06 May 2024 12:01:34 +0000
Manifest this update:     Mon 06 May 2024 12:01:34 +0000
Manifest next update:     Tue 07 May 2024 12:01:34 +0000
Files and hashes:         1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: ZKlZbcg8zpwQ95GDmdCgqIQMfuv1LVyOcJ7a3LAvi84=)
                          2: JRVztGK8XOcz2d7MhpsRhajnNt0.roa (hash: zH690o7DHuqsVpYNCSte/wK4sJBigZCEk8Wkmeh98SU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c7:da:7c:b0:93:cc:a9:42:89:c7:35:8f:a7:41:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
        Validity
            Not Before: May  6 12:01:34 2024 GMT
            Not After : May  7 12:01:34 2024 GMT
        Subject: CN=c44d1451641bf45bec9832e7b5ad80b35108945a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:29:df:fe:84:f4:13:20:2c:a5:2b:c6:10:
                    3d:07:6c:9d:88:4c:8f:fe:70:f5:7e:47:ef:bb:a4:
                    12:58:30:51:e8:94:bf:59:91:40:00:d2:34:9f:f0:
                    c9:77:aa:5b:d9:be:82:4c:c7:a7:2f:4a:7c:f3:cc:
                    3b:80:46:34:0e:fc:c8:0d:b5:2e:88:5b:fb:5d:b7:
                    f6:57:48:53:46:a4:1d:5a:0c:d7:fc:7d:2a:80:1f:
                    e0:87:cf:ce:bc:e0:01:46:bf:12:6b:16:eb:7f:63:
                    5a:68:41:76:ef:68:a5:7f:26:28:ae:dc:7b:09:a7:
                    bb:76:2e:da:72:2a:68:1b:77:24:4f:ec:ab:16:34:
                    e1:af:a5:dc:c7:b8:0a:44:5f:67:4e:a7:b3:49:86:
                    5d:d0:58:6d:d0:48:88:66:35:1c:36:40:38:da:b5:
                    7b:eb:0e:80:05:67:dc:ce:0b:a9:f1:51:f1:ef:5a:
                    6c:ca:1b:52:8b:c5:52:7b:79:49:4c:ac:48:e7:bf:
                    1c:30:42:ae:55:bb:99:6d:94:f7:c7:c1:af:5b:b0:
                    13:17:d6:94:6b:f5:ef:d6:76:80:c6:04:79:7c:23:
                    2a:cb:d5:e4:30:d7:32:b1:2c:f3:85:6b:ae:f9:d5:
                    c7:5a:07:76:a1:3f:83:35:70:b6:2a:47:83:9c:4d:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4D:14:51:64:1B:F4:5B:EC:98:32:E7:B5:AD:80:B3:51:08:94:5A
            X509v3 Authority Key Identifier:
                keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0d:a4:cc:de:a2:c9:37:08:4b:b4:d4:78:cc:a6:f1:bb:1b:
         f6:86:c6:7e:e7:07:7c:8d:4d:f6:e3:52:d9:99:df:82:d3:e9:
         81:be:75:d6:d6:90:4b:e3:9e:89:78:db:c5:d4:7e:8a:15:73:
         1c:73:84:65:5c:f4:39:30:e1:f4:e4:f9:70:ea:82:2f:d9:5d:
         f8:a1:40:6f:b0:8e:70:58:8e:ef:71:7d:e3:cf:db:35:4e:2c:
         94:18:52:8b:72:50:43:b0:29:07:3d:84:11:28:f4:3b:09:62:
         94:16:c6:59:33:f1:33:8a:5d:32:0e:cf:b6:aa:86:83:5a:b1:
         66:e1:eb:25:be:95:53:89:3e:20:68:24:36:af:66:1f:50:1d:
         31:04:98:ef:af:4a:6b:18:c0:b8:df:76:29:e4:fa:5e:e3:b5:
         35:9e:5d:08:59:8e:6c:68:c0:77:62:78:79:2a:1f:8f:41:21:
         28:f4:2a:83:38:7e:86:41:48:5d:86:10:9b:a6:58:58:80:3c:
         6d:1a:28:bf:e2:4c:e4:97:6a:2e:72:ec:c8:14:b6:ab:05:3d:
         b7:72:02:18:b4:f5:61:0f:02:ce:ab:ca:08:be:7f:5a:3e:cc:
         f8:2a:9b:9b:3f:ed:b8:70:51:e1:f0:be:85:f6:14:66:38:1a:
         3b:94:6d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 19:14:36 2024 by rpki-client on console-fra.rpki-client.org