Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File:                     CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier:          511GSWnqBeMpXt0JCV97hxC5xR3g61GC/G+RBhXaNlo=
Subject key identifier:   AF:DC:00:30:2D:7E:3A:F8:2D:3C:8C:D0:E4:76:05:79:8F:18:E4:80
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer:       /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial:       0191FA476BEC064E72CE577C6462EC959CC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number:          010A
Signing time:             Mon 16 Sep 2024 10:01:10 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:10 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:10 +0000
Files and hashes:         1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: 9BFo9eQzHaijDB7n5/4SezjWAa6sPlv87NOm2+GFRBk=)
                          2: zpxvOPd2pkye3KZsVH66MF9-PCM.roa (hash: +HcghRhOjeAPozIDKbSBpE2TMo/gUohS21aLgMnIfHA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:6b:ec:06:4e:72:ce:57:7c:64:62:ec:95:9c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
        Validity
            Not Before: Sep 16 10:01:10 2024 GMT
            Not After : Sep 17 10:01:10 2024 GMT
        Subject: CN=afdc00302d7e3af82d3c8cd0e47605798f18e480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:e4:0b:4a:13:39:3c:89:55:69:8a:04:db:
                    f4:fa:75:bb:2d:73:d7:b0:d0:b9:9d:ef:c7:d8:fb:
                    ac:a8:2d:58:01:90:b7:50:4d:a1:3c:81:81:a4:32:
                    6b:70:3e:f4:ab:ce:2a:0d:a7:d8:42:20:1e:09:db:
                    c8:17:25:01:08:a2:88:12:81:2b:0e:eb:37:de:d7:
                    a5:89:95:f0:12:f7:2a:44:e4:f4:d9:38:ef:b2:4b:
                    a4:f6:68:40:62:e9:74:76:fe:c5:4d:79:d4:a8:93:
                    ce:a0:2c:c9:be:31:6b:40:a9:d3:ec:fb:b0:a1:f3:
                    78:fa:44:01:fd:13:a2:1d:07:08:19:d1:43:71:a6:
                    8a:5f:86:9f:ce:dc:6d:2c:64:92:4c:50:52:2e:38:
                    e3:6e:e8:15:cc:32:fe:55:1b:9c:5d:c5:66:b6:68:
                    bc:26:ea:dc:df:92:9d:09:33:b8:23:32:d7:30:60:
                    99:7a:1d:83:4a:18:b4:9c:a4:39:e1:de:de:ec:5b:
                    6d:1c:19:38:5a:84:61:9a:91:a4:62:b6:96:a4:20:
                    ee:46:5a:ad:66:8a:74:94:37:7e:ad:54:06:42:21:
                    20:c6:f5:20:75:c8:26:df:49:eb:ed:99:6a:7c:b0:
                    a1:5d:0d:c3:61:3e:55:f9:42:ed:5d:8d:ef:57:bf:
                    53:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DC:00:30:2D:7E:3A:F8:2D:3C:8C:D0:E4:76:05:79:8F:18:E4:80
            X509v3 Authority Key Identifier:
                keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e6:3b:b9:5c:b2:0c:50:dc:53:fe:28:65:c7:4b:76:09:e9:
         f9:8b:cf:bd:de:89:1f:c0:12:e4:29:7a:74:f6:24:f9:4d:17:
         21:93:7e:a5:71:52:d5:28:b9:1a:42:66:36:8e:01:b7:1f:e9:
         df:5d:10:f6:ac:2a:b7:98:30:9a:a4:76:22:f3:ac:25:42:ae:
         2f:74:de:e2:c4:72:e2:f4:2d:21:14:6f:c2:32:6a:fa:c9:06:
         74:c2:b0:1d:5e:08:08:20:2e:58:23:46:4b:19:67:c4:6b:c6:
         a4:a3:1d:cd:99:1c:87:18:45:72:dc:86:22:e9:67:1b:02:5c:
         6e:9d:19:da:f8:1e:cb:d4:e2:a3:e0:0e:70:5a:c3:82:53:e9:
         83:41:dc:89:e7:65:03:25:82:23:8e:4c:a6:b0:e1:41:e2:ac:
         dd:f5:dc:07:a9:dc:8b:ee:90:35:33:20:77:1a:dc:16:29:9a:
         59:48:cf:e0:d9:ec:11:cf:ba:7e:dc:ba:ec:5a:60:ba:45:19:
         89:6b:d2:98:81:21:15:4d:19:f2:21:1d:a8:b8:97:0a:12:f7:
         0d:a9:00:ee:bf:91:18:38:e0:7b:a6:d2:d9:99:03:2b:a5:09:
         5e:48:5a:30:c1:cd:65:3e:a6:2c:b1:ba:ca:f8:61:1d:44:46:
         d0:ca:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:37:58 2024 by rpki-client on console-ams.rpki-client.org