Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
File:                     1-Pc8XA86EGqLp9_z41yBbRB43HE.mft (raw, json)
Hash identifier:          Kr/Ao0Q8oBOCErQIPVhWgTM0kXnpbHURQRpJS2H6jog=
Subject key identifier:   97:E2:E7:7E:BF:D9:CA:BD:FA:EE:6C:8D:87:2B:FE:10:78:43:71:2D
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Certificate issuer:       /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial:       018F43B2953BAA008A7480F2C9E8C5904269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
Manifest number:          1156
Signing time:             Sat 04 May 2024 13:02:08 +0000
Manifest this update:     Sat 04 May 2024 13:02:08 +0000
Manifest next update:     Sun 05 May 2024 13:02:08 +0000
Files and hashes:         1: 1-Pc8XA86EGqLp9_z41yBbRB43HE.crl (hash: hJT2FFwnCzzg5rrKNSTjwLpvOVwEIa4n9/i4XTfgkVk=)
                          2: HJa7UN5ky1qdZ6FO1DdWPphwGRI.roa (hash: DsbTF8bhilkIi3S8fxXYOw0wVNnZpM8Z3bQrAC4LBr8=)
                          3: Wq1q89GOu2McBmuixfzPjaWLhhI.roa (hash: wRHpMNZBCmITZqLhTuXBeVJnvfjdKheS3ODkIok2Jd4=)
                          4: feMe6IYvy7hX76-N35LRVkdXX4w.roa (hash: EqE4iPfrFnSE2tSbkgAQjeyeMpWGpCx9A9sA1eaHKpc=)
                          5: rhGBk7gT-sNA1-bW_M7voDH-8oQ.roa (hash: 1xksr27795p492d5x8AOs5OkQfMHxVWE8ByH1ziDkfY=)
                          6: vx864tUrOZ_5hM0OprRm00JUmY8.roa (hash: OYqhfGPqO4EUTxmIoF3zZIWpfdPPTxPjZBiGqWnylAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:95:3b:aa:00:8a:74:80:f2:c9:e8:c5:90:42:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
        Validity
            Not Before: May  4 13:02:08 2024 GMT
            Not After : May  5 13:02:08 2024 GMT
        Subject: CN=97e2e77ebfd9cabdfaee6c8d872bfe107843712d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bb:f9:98:cf:08:14:a8:0c:87:7c:84:29:b9:
                    5d:2e:ae:e0:01:db:c9:eb:a8:c5:b9:02:1a:39:fd:
                    95:11:f7:5e:a9:b9:dc:84:ed:40:15:36:a4:07:cd:
                    d4:7a:76:dd:fd:9a:77:e4:7c:0f:81:16:b4:04:a0:
                    ac:7b:54:a8:59:bd:b4:cf:99:d4:3d:85:84:2c:d1:
                    d0:bb:5b:f7:e6:40:9b:13:ab:c9:93:f9:4b:4e:db:
                    7f:63:a4:9b:44:6a:c1:84:42:d1:43:ed:91:62:98:
                    3a:97:f4:cb:b8:b9:bf:f1:10:2c:23:f1:d6:d3:ee:
                    0d:2f:91:e6:cd:64:aa:48:8a:96:bd:4b:b5:75:50:
                    5d:7d:15:b8:c6:9c:5f:d4:34:ce:da:7a:13:1a:14:
                    e0:05:a9:af:bf:86:fb:fc:85:a3:c0:53:44:4a:c5:
                    bc:d3:d2:f8:b8:90:36:ca:6a:6e:28:62:0f:a2:e3:
                    e9:0f:ea:c7:fc:c2:97:93:17:0d:70:bd:58:c4:da:
                    a6:c7:7b:4f:62:88:62:7c:f3:c7:3f:14:ea:b8:14:
                    99:23:21:6b:f4:44:e1:b9:22:2e:0b:2e:18:f9:8f:
                    8f:2d:b1:5c:01:9c:70:72:e5:49:b2:69:96:e7:b2:
                    94:e8:f5:0b:e6:19:5c:aa:29:51:90:29:88:f2:50:
                    87:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E2:E7:7E:BF:D9:CA:BD:FA:EE:6C:8D:87:2B:FE:10:78:43:71:2D
            X509v3 Authority Key Identifier:
                keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7d:6d:2b:e8:cc:66:28:38:41:cc:dc:1e:49:20:db:d2:c5:
         ca:d2:d4:a8:82:51:66:4f:74:97:d8:4f:38:5d:7a:d4:cd:e2:
         e4:b3:cd:d5:54:20:8c:30:9d:ac:09:12:30:f3:13:39:2a:ee:
         79:cc:2b:f2:3b:e7:db:de:14:b2:25:a5:63:79:db:38:a7:d1:
         28:2c:5f:40:2f:52:90:4c:10:d4:ab:3c:90:cd:23:16:2d:d9:
         fe:da:6f:03:c2:3b:e4:4a:ae:dd:b0:96:44:7e:3b:61:ad:3d:
         1c:ba:47:82:c7:2d:22:bd:69:85:8b:06:98:9c:95:54:0d:e6:
         21:be:54:32:c3:4c:91:6a:0b:0e:17:0d:d7:fb:e4:5b:a2:be:
         97:36:09:8b:f8:18:44:d0:ed:ab:e3:8d:0c:71:45:af:64:66:
         a4:05:94:c3:64:b0:03:02:5b:b4:bf:34:e4:cf:f9:67:0b:ee:
         2f:a6:6b:d5:0d:64:89:f0:a3:4c:a6:9a:5b:cb:e7:c0:e4:11:
         2d:50:fb:04:f2:70:71:bd:a2:0a:fb:ef:4c:ba:fa:8a:ee:58:
         11:49:a3:bc:a3:63:7f:0a:3b:97:95:3f:53:d2:63:af:d4:9b:
         a3:87:de:1f:84:0a:21:09:08:a9:66:82:8d:87:3a:cc:53:49:
         db:65:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:13:19 2024 by rpki-client on console-fra.rpki-client.org