Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File:                     8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier:          eV1M4HJKri5+t4UxTTVWiNzz/n7nHOc9MXHMMzNawnc=
Subject key identifier:   76:89:B6:78:E9:99:34:91:1F:60:C8:14:68:D2:02:C4:F8:1C:D7:F0
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer:       /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial:       018F3D0AD0321517107CA2CB55275E925D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number:          1055
Signing time:             Fri 03 May 2024 06:01:09 +0000
Manifest this update:     Fri 03 May 2024 06:01:09 +0000
Manifest next update:     Sat 04 May 2024 06:01:09 +0000
Files and hashes:         1: 1-Q_uIdLBKkokL6qEgABzEr69GJk.roa (hash: La34rf7DHXpcZ3P+AKdqjL6xIl05Y+N6aPsnjZeX1Ys=)
                          2: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: Ha4jxvbvyp5vJzG4cONAD1Q1ZnmWcFxKfm1yRmcyqS0=)
                          3: rh0OQYDCMxNLH85mpnVhRIYaEWU.roa (hash: kyHJcDB/JyRU+Jsm/bvHQ+F1B+GYVbflFjnmRkBBHvE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:0a:d0:32:15:17:10:7c:a2:cb:55:27:5e:92:5d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
        Validity
            Not Before: May  3 06:01:09 2024 GMT
            Not After : May  4 06:01:09 2024 GMT
        Subject: CN=7689b678e99934911f60c81468d202c4f81cd7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:c5:57:d4:1a:67:69:80:e8:ff:3d:fa:16:
                    39:89:ca:1d:35:7a:54:03:6c:67:38:b1:aa:50:79:
                    56:c2:b2:a8:31:37:24:78:54:b5:46:e5:32:17:79:
                    77:ff:79:34:98:73:34:3c:51:94:ce:4b:4f:df:6e:
                    10:7b:a2:61:fe:ab:ad:66:0a:3a:83:ed:9a:4d:ff:
                    c1:3c:ed:25:17:47:6b:f3:22:42:26:03:60:1b:b6:
                    72:5c:7d:45:0d:69:88:a1:5a:19:37:09:1a:18:c1:
                    54:41:36:8b:77:9b:e0:8f:6e:ef:27:6f:9b:36:01:
                    74:00:18:fa:35:67:bc:3f:df:c8:56:e6:63:d5:41:
                    7b:d3:30:07:b6:c4:8a:92:df:9a:f8:07:8d:92:c9:
                    ab:f9:c8:b6:3a:60:78:6f:29:94:a4:44:c7:45:3f:
                    7a:b0:12:54:8e:86:fc:62:e3:45:65:18:1f:ea:15:
                    54:b4:be:04:11:6a:13:a4:0e:af:b0:03:6c:98:c4:
                    d8:b6:9a:e4:2a:54:c2:40:9e:9b:e7:95:11:22:68:
                    51:5e:db:17:5c:b6:f4:dc:9e:07:e6:22:d2:69:2b:
                    68:88:a1:5b:18:a5:37:da:ab:79:5c:06:4d:ba:e9:
                    06:43:75:41:43:ad:6b:da:32:df:8a:fb:0d:18:77:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:89:B6:78:E9:99:34:91:1F:60:C8:14:68:D2:02:C4:F8:1C:D7:F0
            X509v3 Authority Key Identifier:
                keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:23:81:87:fa:1f:d3:3f:c0:2d:e8:dc:93:6b:41:ba:96:98:
         a3:2b:05:28:01:bb:1d:68:58:cf:b0:b5:62:0d:50:28:52:0d:
         d6:51:db:9b:37:59:1f:c9:09:9f:04:d3:60:f0:e4:4f:00:60:
         32:35:a9:db:46:70:1f:90:e3:38:93:10:b6:d3:b2:fd:fe:fc:
         91:ac:bc:7b:d7:15:3c:45:7e:49:b6:c1:d6:f2:0f:d0:05:a3:
         1c:1c:4c:19:0d:27:31:32:cc:f2:e7:c0:73:58:c5:b8:ce:4e:
         6c:69:83:fc:cb:30:2f:2e:27:81:84:02:62:26:35:07:91:a0:
         36:cf:28:3e:6f:69:ec:b4:72:24:5f:56:77:ab:1d:36:27:b8:
         b0:a4:fd:9c:a7:16:18:b3:a2:4f:cc:ca:07:6a:86:22:99:6b:
         3a:7c:ef:f5:a4:2b:95:f2:df:13:dc:56:4c:18:66:97:0d:93:
         6f:c0:b6:6d:e1:8f:4a:41:dd:b8:da:20:47:c6:d1:76:96:73:
         ae:1d:31:9a:84:03:47:45:6c:4c:eb:eb:dd:bd:1d:c2:78:8a:
         ed:3d:f7:75:8b:c7:66:7a:48:e4:1f:f7:c8:b4:47:f3:fc:e7:
         30:47:fc:67:99:66:6b:8d:81:32:dc:44:ef:b2:5b:af:1f:3c:
         80:22:b2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:31:15 2024 by rpki-client on console-ams.rpki-client.org