Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.mft
File:                     CPHyEx8Fo8cYaXDTAXI6qgCTIJY.mft (raw, json)
Hash identifier:          sEjk3Wt55dKYYeY338yEi569zZPt0NLtJVQNXacDCAM=
Subject key identifier:   D6:67:BA:7D:26:13:D8:D8:7C:C7:24:03:B9:7A:9F:09:50:07:EA:56
Authority key identifier: 08:F1:F2:13:1F:05:A3:C7:18:69:70:D3:01:72:3A:AA:00:93:20:96
Certificate issuer:       /CN=08f1f2131f05a3c7186970d301723aaa00932096
Certificate serial:       01904CE933A96A00596A12C8F2D6FE557536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.mft
Manifest number:          0817
Signing time:             Tue 25 Jun 2024 01:01:09 +0000
Manifest this update:     Tue 25 Jun 2024 01:01:09 +0000
Manifest next update:     Wed 26 Jun 2024 01:01:09 +0000
Files and hashes:         1: CPHyEx8Fo8cYaXDTAXI6qgCTIJY.crl (hash: jIiYbkXWQqS/u8UjBf3BexRr/aUtGi8xMBTOHTrgpwo=)
                          2: dnApwUk79B5h78I0iHmUaFPF8VQ.roa (hash: 9GIfG/mgrLu4dBN4ZSLpzcosTySai5mJEn8+5g9QmIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4c:e9:33:a9:6a:00:59:6a:12:c8:f2:d6:fe:55:75:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08f1f2131f05a3c7186970d301723aaa00932096
        Validity
            Not Before: Jun 25 01:01:09 2024 GMT
            Not After : Jun 26 01:01:09 2024 GMT
        Subject: CN=d667ba7d2613d8d87cc72403b97a9f095007ea56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:7d:bf:51:3c:90:31:1b:c8:52:4a:22:3e:
                    78:f5:fb:c1:4a:ef:e6:0e:ed:7c:f5:18:6b:34:03:
                    a9:b8:b7:b1:fe:13:3c:30:4c:62:9c:b0:8f:2e:92:
                    d8:c6:43:77:b5:e2:c8:1c:bd:01:c4:4e:f4:37:37:
                    b5:f2:c7:ee:d0:50:ea:b9:c1:07:2a:43:da:bf:16:
                    46:94:6f:9f:ae:39:40:26:00:85:02:ae:3c:8c:63:
                    7a:1e:47:35:cc:a1:de:c4:66:96:45:9b:e1:89:cb:
                    63:54:67:aa:67:b2:fc:69:3f:2c:4b:06:db:fe:50:
                    27:9a:c6:dd:8d:6b:03:6f:84:c5:55:e4:80:ea:6f:
                    de:fd:96:8f:1f:c8:63:c6:02:89:c9:85:dc:70:be:
                    aa:ad:d6:99:f3:c2:4c:98:3e:ca:e6:d3:1b:7c:64:
                    1e:c7:01:21:57:a7:f0:0a:29:61:85:ed:c3:b8:29:
                    9b:e6:9c:01:af:fb:73:52:b7:fa:4b:e6:8d:3e:51:
                    04:e5:a5:ce:09:04:cf:4d:00:c8:fe:3f:b1:74:e6:
                    89:14:73:2e:bb:1a:47:84:f1:51:d4:92:7d:33:36:
                    14:37:71:04:93:c3:a0:6f:21:10:b9:8d:90:12:19:
                    55:57:ed:d5:4b:9d:dc:16:9e:c8:20:1d:e0:86:1f:
                    4d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:67:BA:7D:26:13:D8:D8:7C:C7:24:03:B9:7A:9F:09:50:07:EA:56
            X509v3 Authority Key Identifier:
                keyid:08:F1:F2:13:1F:05:A3:C7:18:69:70:D3:01:72:3A:AA:00:93:20:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d6:a1:1f:b3:21:47:7d:e7:b7:47:d8:4f:31:b1:ab:01:83:
         0a:18:a2:9e:3b:10:fe:37:0d:3f:54:b7:fc:ce:f0:d3:9c:e9:
         76:f6:d3:46:38:3b:9d:39:a9:ee:60:4d:72:70:13:82:62:0f:
         e5:dd:85:4f:b0:f9:06:95:4a:3c:2e:e6:74:bf:f4:81:53:10:
         e7:9a:20:81:d8:b4:ed:ae:45:1e:ea:9c:98:2d:6e:d0:16:2b:
         97:98:24:2d:09:07:37:25:c7:4f:44:ba:77:35:40:54:54:44:
         9a:27:2e:4c:f5:77:d6:f1:ee:a7:12:1d:2e:19:4c:83:e8:94:
         1d:d2:0d:07:f4:f9:cd:79:cd:ee:64:21:cc:ed:67:46:e2:18:
         dc:f8:e6:19:28:9f:04:6f:08:2e:76:c1:a1:96:6e:4b:04:39:
         43:f3:5a:a1:a6:02:5d:05:70:94:fa:7e:90:26:ec:f3:1c:07:
         72:fa:c3:40:5c:c2:5a:12:45:cb:e2:41:05:e6:b4:4b:28:28:
         72:d6:a2:fe:c4:43:da:78:99:90:a0:a5:03:fe:0f:6e:ad:d5:
         c7:9f:bc:99:aa:e6:35:c8:5f:ae:5b:53:45:1b:4c:f3:0c:8b:
         99:67:a6:54:f1:07:83:51:68:6d:b1:7a:12:81:92:dc:fa:bc:
         4f:2d:04:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 09:48:42 2024 by rpki-client on console.sobornost.net