Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File:                     ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier:          kEPNcBYaSW/K1J004kT3f9jcB6Yy0nUTdsmPJPMBAag=
Subject key identifier:   D8:CB:D6:E6:8C:C4:34:30:AD:FB:0C:B3:33:81:F0:FC:EF:21:1D:84
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer:       /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial:       018FA32E5747AEA121DBC8B1F0D078085425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number:          0423
Signing time:             Thu 23 May 2024 02:01:14 +0000
Manifest this update:     Thu 23 May 2024 02:01:14 +0000
Manifest next update:     Fri 24 May 2024 02:01:14 +0000
Files and hashes:         1: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: vrBlviu8ZUvKn8jAY6wQGhguGLNFC150Bcgf9TLRMa8=)
                          2: MFYeUjqc9Aypj7jELr0mjVfedtE.roa (hash: RKH8qLRpffzd63VA6HkHauthxtVwZ54SJsD84YUpOKE=)
                          3: MeyZBgdB9CG4Q9uoq11r2_LmhpA.roa (hash: 4pZ8/F1FaFtjZw+E031bgDpFptk9fhuMYq0+4UTuq+0=)
                          4: hd9PB0kYB6sqhK8rDQow9bRbvgI.roa (hash: 2cSId57jJDHM48gVarhYmfN9ze4MaA2ujVYED/yNgoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 22:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a3:2e:57:47:ae:a1:21:db:c8:b1:f0:d0:78:08:54:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
        Validity
            Not Before: May 23 02:01:14 2024 GMT
            Not After : May 24 02:01:14 2024 GMT
        Subject: CN=d8cbd6e68cc43430adfb0cb33381f0fcef211d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:30:5f:20:bf:dd:52:e5:68:df:fd:2e:8c:
                    96:04:74:90:40:42:5b:40:ed:b1:48:44:51:b6:89:
                    42:e5:35:e8:ac:aa:81:8e:39:6e:c4:7b:a0:53:b8:
                    eb:0b:3f:7c:fe:9e:90:b4:fa:fe:34:d5:e6:cf:f8:
                    3f:bb:5f:17:2c:ac:9f:02:94:2b:26:58:35:90:dc:
                    76:f7:f8:a4:c4:2b:2c:6c:a3:d5:c5:44:62:c7:87:
                    91:3f:ea:fa:e3:fb:cb:07:53:a7:61:46:b6:1f:10:
                    73:a8:de:5c:d2:68:92:c5:70:67:3a:17:75:ce:eb:
                    61:d4:96:e9:88:6c:b4:e1:f1:ae:a1:08:26:bf:65:
                    a3:17:b1:c3:20:4e:9b:0a:c1:51:34:61:f7:96:68:
                    85:08:f1:43:8c:ff:c6:9b:1a:92:dd:7e:95:3b:d5:
                    65:dd:d8:d0:78:1b:80:93:4c:6d:68:51:72:01:cc:
                    41:a2:69:57:7a:16:dc:3c:ca:51:ab:5a:d6:dd:5a:
                    e6:a1:cc:05:d5:6b:f5:1e:8c:49:57:a7:42:93:0f:
                    8a:24:7e:37:ea:64:0f:a0:3f:25:70:0b:fa:eb:58:
                    9d:7a:05:65:ba:9d:c6:5a:fe:af:e4:aa:4a:ef:ce:
                    b7:a2:66:8b:33:68:fa:f8:d3:5d:b6:6a:a7:6b:2b:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CB:D6:E6:8C:C4:34:30:AD:FB:0C:B3:33:81:F0:FC:EF:21:1D:84
            X509v3 Authority Key Identifier:
                keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:05:f7:dc:09:ab:0b:e2:a0:23:9f:64:54:cf:4f:ac:45:76:
         11:ef:c8:c3:d0:2a:a8:e3:aa:45:2c:8d:b6:91:f2:c9:e9:90:
         bd:8f:ae:a8:28:ea:f0:91:2e:68:34:06:8d:10:61:80:44:ba:
         3f:ce:c4:52:ee:89:66:65:07:1c:f4:eb:7d:96:d7:3e:d6:f4:
         a6:32:f5:ff:36:a3:c2:8b:9a:d4:1e:80:e6:02:85:7c:be:40:
         fd:83:40:96:e4:95:81:1e:cc:a9:09:47:ee:95:cb:3c:35:0e:
         61:d1:ed:09:17:e1:a0:4e:32:55:bc:44:30:0f:e6:40:1d:55:
         1f:fc:33:ef:28:aa:b0:76:95:86:20:87:08:46:c0:28:cf:37:
         2c:50:dd:bb:8c:4f:c1:74:49:76:36:5e:8a:36:32:64:d6:a3:
         a8:28:43:66:dc:ca:4d:10:de:ea:b7:7a:45:7e:3c:30:a9:a6:
         5d:55:31:b6:71:2a:8b:80:0c:3d:b8:9e:72:ce:7c:2a:21:2d:
         a8:f0:95:47:30:cf:ff:d5:58:0c:13:c5:1e:39:82:6a:84:ba:
         33:66:f0:63:63:8f:39:28:cf:24:f8:7c:2c:e9:a7:9d:51:1e:
         fd:88:aa:5c:cb:e3:56:ec:ac:aa:8d:3b:3f:e6:27:58:c6:d9:
         39:5b:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:35:59 2024 by rpki-client on console-fra.rpki-client.org