Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.mft
File:                     9N6JFHS0vv0-shULVHWda-1mQZY.mft (raw, json)
Hash identifier:          g6BmUkHwekDjosGfU3a251wG9A1zIOH1VAO37Bn7oCY=
Subject key identifier:   AC:E1:1D:F8:64:83:16:B2:52:AA:72:EA:A0:63:28:A7:5F:AB:4B:7B
Authority key identifier: F4:DE:89:14:74:B4:BE:FD:3E:B2:15:0B:54:75:9D:6B:ED:66:41:96
Certificate issuer:       /CN=f4de891474b4befd3eb2150b54759d6bed664196
Certificate serial:       018F87ED0E2C3C75A68E53EC69A19E40148C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9N6JFHS0vv0-shULVHWda-1mQZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.mft
Manifest number:          0120
Signing time:             Fri 17 May 2024 19:00:10 +0000
Manifest this update:     Fri 17 May 2024 19:00:10 +0000
Manifest next update:     Sat 18 May 2024 19:00:10 +0000
Files and hashes:         1: 9N6JFHS0vv0-shULVHWda-1mQZY.crl (hash: sgYI7Ld8Riu6lK2FuyZBEkLixdPjlLlzLOfifCQiO4s=)
                          2: KQI8dRLirQatqsxjgc3mS1BCCIs.roa (hash: qxBIfgIFeYVVup/miZjV1QuETPdRYzT74jCv5RpDkrg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9N6JFHS0vv0-shULVHWda-1mQZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:0e:2c:3c:75:a6:8e:53:ec:69:a1:9e:40:14:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4de891474b4befd3eb2150b54759d6bed664196
        Validity
            Not Before: May 17 19:00:10 2024 GMT
            Not After : May 18 19:00:10 2024 GMT
        Subject: CN=ace11df8648316b252aa72eaa06328a75fab4b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:35:04:f9:ef:7e:8f:13:36:40:c4:b8:ef:
                    9b:4d:c8:73:b8:d2:39:67:ec:cd:3a:66:37:42:18:
                    5e:d5:1b:ee:23:a1:da:35:f8:e6:71:3e:fb:86:11:
                    4a:b8:d3:47:e2:fa:4e:89:45:07:c7:dd:7f:1f:60:
                    a6:60:3b:95:50:83:a7:80:07:cc:39:b4:6d:bf:08:
                    bc:c3:45:45:be:c0:17:9e:40:f8:4e:98:a1:3d:b6:
                    e6:f1:ed:fb:f9:dd:8e:7e:ab:ff:05:bb:e3:c4:c2:
                    9f:5e:99:27:c2:8f:14:cd:8a:58:b3:18:25:3e:19:
                    bd:13:1b:b5:13:46:20:80:24:41:9d:c4:81:0e:39:
                    e8:6f:05:6d:ed:c3:83:19:47:22:52:03:e2:fd:88:
                    f1:1e:16:6f:bb:db:70:91:36:f6:5e:d5:03:0d:b4:
                    4b:21:b7:2b:77:fa:02:bc:90:54:0e:9e:56:bd:d7:
                    80:e4:92:50:a6:91:32:c7:91:2c:29:b6:2d:5d:e1:
                    94:64:5d:8a:9a:7b:d7:2d:a8:b8:c0:89:68:84:45:
                    64:09:65:da:c3:94:2a:33:30:8c:e2:37:da:e8:f3:
                    99:06:6b:d5:42:0e:0c:ef:9a:91:9b:66:ec:63:5c:
                    69:3c:4a:ed:d0:d6:52:9a:de:ed:c6:f1:71:65:5a:
                    26:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E1:1D:F8:64:83:16:B2:52:AA:72:EA:A0:63:28:A7:5F:AB:4B:7B
            X509v3 Authority Key Identifier:
                keyid:F4:DE:89:14:74:B4:BE:FD:3E:B2:15:0B:54:75:9D:6B:ED:66:41:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N6JFHS0vv0-shULVHWda-1mQZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/45fc7c-69ec-4290-960b-2c51d90c4ffe/1/9N6JFHS0vv0-shULVHWda-1mQZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:69:c8:9a:08:fd:9c:00:06:09:6d:71:02:3b:89:63:b7:5c:
         2b:fa:9b:c9:8b:cc:e9:39:60:ca:b8:46:31:67:89:6a:c3:44:
         09:f9:26:5a:2e:e8:8c:3e:d1:ca:a3:3b:72:9c:4c:8e:c1:3b:
         f6:dd:bc:4d:b9:cf:82:9c:b0:a3:d6:ae:fd:e9:ac:2a:8e:c2:
         b3:2f:d7:f1:d9:d3:74:7c:0c:e1:63:d0:3a:64:8e:46:7e:9c:
         a2:74:6a:20:d9:97:d6:3e:c8:3c:ce:43:c5:d2:48:0b:41:81:
         46:fa:18:69:1a:31:2b:4d:0d:8b:25:d6:4b:6e:f2:45:f3:da:
         17:5c:8d:c9:ce:7d:ac:fc:87:72:90:98:95:32:c2:c7:86:39:
         d6:e9:c1:c0:c2:38:45:0e:95:91:30:78:7b:ab:3b:be:e1:63:
         42:e3:bf:b5:14:aa:d3:49:f0:e2:c9:ac:16:68:aa:a7:28:8e:
         af:82:74:47:10:88:0e:16:21:3d:e5:06:d2:b3:da:c1:bb:1f:
         11:64:bc:c9:14:3c:ac:26:62:a4:9a:42:2f:42:7d:c5:44:97:
         3f:45:6f:c1:2e:ae:55:4f:b9:17:3c:10:e3:84:93:0b:32:31:
         e2:39:e9:45:eb:65:78:99:8e:34:01:ae:3c:5f:32:6b:8d:bf:
         4e:3b:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:21:06 2024 by rpki-client on console-fra.rpki-client.org