Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
File:                     9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json)
Hash identifier:          BhVE/QRKnr2OdBYCZkqw6SBmKUysBpdXpaOlAG1v8R8=
Subject key identifier:   A3:16:BB:CE:9C:90:F7:8D:BB:B1:3E:74:95:7D:A6:40:CC:8F:DA:D4
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Certificate issuer:       /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial:       018F22DD4301E3B9E40AF756113C8D4515B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
Manifest number:          114F
Signing time:             Sun 28 Apr 2024 04:01:16 +0000
Manifest this update:     Sun 28 Apr 2024 04:01:16 +0000
Manifest next update:     Mon 29 Apr 2024 04:01:16 +0000
Files and hashes:         1: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: kwvyrG72WGZXUSnnmERBZBNgsnUSIIWpq0x0T1JakVQ=)
                          2: bSZWY8m708MqGpo5JegizWTr0eA.roa (hash: jFSh8hsCDE3CdJJk2yiiJWx+9fxFs4Nay9bXOCARI4c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 04:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:dd:43:01:e3:b9:e4:0a:f7:56:11:3c:8d:45:15:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
        Validity
            Not Before: Apr 28 04:01:16 2024 GMT
            Not After : Apr 29 04:01:16 2024 GMT
        Subject: CN=a316bbce9c90f78dbbb13e74957da640cc8fdad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f2:bd:0f:3f:93:91:36:df:6d:f9:e6:c1:ac:
                    64:97:4f:f2:a9:ab:4a:a6:29:e1:b2:3a:8c:aa:6a:
                    28:c3:88:c8:3b:b3:71:99:29:04:4f:27:2c:22:3a:
                    ca:94:17:c7:19:f8:59:a1:d4:e0:61:6c:f1:ed:4e:
                    0f:76:59:5c:37:a7:18:96:0f:47:39:28:c4:78:04:
                    23:01:69:11:b1:17:b1:6e:06:2e:d7:8b:cd:32:76:
                    c3:cb:d5:96:2e:f0:6c:1a:f1:5e:57:2e:d5:29:25:
                    b3:a4:76:3a:ff:2c:f4:f2:ae:dc:1d:15:a7:28:a4:
                    dd:ad:c0:0a:b4:a2:17:21:23:e9:79:d6:26:f2:3d:
                    40:63:b1:aa:77:51:df:ec:9e:c0:7e:33:22:75:86:
                    63:f4:f0:8c:27:c3:06:70:94:25:26:05:b1:63:13:
                    5f:e2:a1:dc:e8:41:00:0a:27:36:ca:47:a3:ef:59:
                    2c:6c:30:49:18:fc:53:18:dc:aa:ca:2d:f6:64:b4:
                    58:a1:30:49:9f:3c:a7:5d:02:14:0d:3e:dd:4c:4a:
                    ca:6f:4c:9d:b3:7d:8a:c6:c7:75:05:0f:c3:fe:aa:
                    1f:a8:57:f1:d5:33:ab:8b:23:31:b3:d4:bb:c7:a2:
                    57:cf:55:f1:73:e8:de:9f:ae:36:de:4b:95:77:6a:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:16:BB:CE:9C:90:F7:8D:BB:B1:3E:74:95:7D:A6:40:CC:8F:DA:D4
            X509v3 Authority Key Identifier:
                keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8a:48:16:b9:73:58:36:4a:d1:45:d8:36:f3:f3:aa:96:9e:
         b1:dd:f7:2b:09:b3:62:1c:cb:40:10:03:76:a5:35:3e:9d:73:
         8d:3e:d7:74:8f:e0:67:57:0a:9b:c6:8b:29:56:d3:4d:b9:80:
         19:a1:ad:9e:66:86:3a:f3:4e:6f:f4:15:e9:43:dc:dd:12:0b:
         bc:a6:a4:f9:ed:2d:b5:fa:7b:64:c8:c2:f8:ab:1f:da:6b:84:
         9d:ea:67:ee:5a:b9:5c:d5:6d:4d:6f:6b:d6:3e:bc:61:97:4b:
         32:2d:b8:fb:1f:38:aa:52:3f:df:a5:45:be:45:19:be:de:c7:
         e3:07:49:81:42:c6:41:44:5d:8e:cc:00:59:08:28:ec:fa:c1:
         f4:ef:87:3f:e2:1b:0e:21:0f:74:a1:19:8a:97:ad:22:d4:6c:
         7f:f8:e8:2c:5c:35:35:1e:ea:42:b0:54:95:e9:b5:63:8d:2c:
         4e:37:eb:5e:d8:15:44:a1:5f:31:41:06:76:3f:0d:3e:79:4b:
         ae:8c:37:45:5e:3e:54:4e:de:e0:3a:ec:1c:8c:85:94:ee:b6:
         ba:e1:39:f3:ee:7e:a9:05:f7:87:48:c2:97:40:c2:22:65:db:
         24:7f:b6:55:8c:28:f2:f5:09:dd:11:7a:6b:5a:41:52:f4:56:
         4f:28:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 11:08:27 2024 by rpki-client on console-ams.rpki-client.org