Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File:                     jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier:          TiY+H6ltTElkqeDbVQdpjucWX2uVLW8izD5grCA4ok4=
Subject key identifier:   D0:D2:68:EF:23:1C:56:61:7B:94:EF:3B:D9:D9:9A:51:6C:7E:AC:C9
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer:       /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial:       018F8748D8C6DA1C0762884BED0DC070786F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number:          0E3D
Signing time:             Fri 17 May 2024 16:00:49 +0000
Manifest this update:     Fri 17 May 2024 16:00:49 +0000
Manifest next update:     Sat 18 May 2024 16:00:49 +0000
Files and hashes:         1: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: vRY+conMgQUl0QCu1L9G93ZV9gXjt4CDxcB4OBmaOhQ=)
                          2: suw4yIf7sqD9_2hZvww8OlT0ED0.roa (hash: 8N5NVnwXcCzmlVNN/HCpemxkA/L4MCEhvW2Cj0RNfeE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d8:c6:da:1c:07:62:88:4b:ed:0d:c0:70:78:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
        Validity
            Not Before: May 17 16:00:49 2024 GMT
            Not After : May 18 16:00:49 2024 GMT
        Subject: CN=d0d268ef231c56617b94ef3bd9d99a516c7eacc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:13:b5:59:4f:0e:3b:1b:cd:a9:35:a6:94:
                    b4:74:3d:f1:6f:8b:a4:d0:40:2f:35:87:ed:59:7e:
                    ee:07:fb:da:ff:55:13:cd:73:af:c7:4e:1a:12:49:
                    2d:dd:dd:a2:39:2a:86:4e:13:6b:fb:c1:4d:4d:5c:
                    53:dd:97:4a:e7:39:c6:84:eb:f1:c0:7c:d4:59:62:
                    ab:4e:3e:a0:f7:c1:66:62:ac:38:05:b0:a2:7a:4d:
                    9d:c7:c3:7d:fa:72:65:96:b1:0c:86:f5:2d:40:78:
                    26:dd:3c:34:3e:fe:0c:e4:93:75:d1:78:41:98:ef:
                    7b:f1:59:91:37:26:4e:20:e7:b6:ce:75:8b:0e:f2:
                    84:39:42:53:22:fc:26:20:36:6b:31:e1:ed:7e:f7:
                    6f:33:53:52:22:80:5b:e4:7a:bd:3f:cd:05:fb:77:
                    8d:1f:5d:65:4b:65:54:d2:f5:11:dd:86:97:4a:8e:
                    f6:c4:3b:32:ae:bb:25:20:c1:b8:6f:12:db:a2:f0:
                    36:bc:b6:51:f1:91:19:c2:16:2a:b4:dc:b7:b7:c7:
                    40:32:68:74:d3:2f:4e:69:0a:24:14:5d:b4:17:d3:
                    15:de:fe:86:65:a7:82:ca:74:21:bc:6b:f8:20:02:
                    f7:83:72:a1:a8:4b:8f:bf:67:fe:b7:68:c9:16:92:
                    67:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D2:68:EF:23:1C:56:61:7B:94:EF:3B:D9:D9:9A:51:6C:7E:AC:C9
            X509v3 Authority Key Identifier:
                keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:64:67:3a:f8:56:58:5b:cc:3f:a5:bf:c6:aa:a2:38:16:a5:
         c3:73:93:93:4b:7e:18:c2:9b:21:d8:b4:b2:ff:7b:da:b0:9d:
         ae:af:57:a0:c2:6b:3b:b3:11:47:8e:47:83:a5:01:87:fa:ec:
         21:c3:dc:38:e5:09:95:1b:4d:54:0c:58:16:2e:6a:c4:6d:b0:
         b3:d8:39:6c:7b:16:11:93:08:3b:cb:50:56:d5:93:97:4c:2f:
         08:13:7e:7b:57:f5:84:a5:11:5c:16:73:b8:24:3d:5e:05:58:
         ee:42:73:22:5e:75:22:92:1f:5e:1d:c2:84:5a:3c:fc:0e:24:
         77:5f:83:6b:0c:2c:42:f3:73:56:41:4c:8d:81:13:4d:3a:bc:
         40:e1:aa:ae:a7:3b:2b:eb:71:6d:d8:ae:42:8b:fc:99:62:d2:
         39:a8:aa:0f:32:e4:f4:2e:16:ba:1b:f2:a4:a0:e7:a5:3d:b5:
         3c:bd:4f:33:56:8a:f0:14:21:cf:a0:a2:79:db:66:da:f7:87:
         e2:76:4a:9e:1e:b2:f6:fa:ff:8c:cc:0d:d2:c4:d5:22:aa:a2:
         b4:f7:6e:e5:a5:4d:09:8c:73:29:40:f0:c8:fa:b1:bf:81:c0:
         91:68:8f:80:17:04:b2:65:a5:5e:3c:d6:8c:fc:8c:91:b2:04:
         cb:98:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:39:02 2024 by rpki-client on console-fra.rpki-client.org