Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File:                     irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier:          iJFpwFygHYxvr6wAPDOXmuEtuw9zU1bUGES/wlLB4+E=
Subject key identifier:   0C:6A:9F:94:76:45:66:3E:06:32:3C:02:F6:E0:E8:A6:BB:F3:88:B3
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer:       /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial:       01901B584E1E349DD2CD8BE93EC4F798693D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number:          1157
Signing time:             Sat 15 Jun 2024 10:01:30 +0000
Manifest this update:     Sat 15 Jun 2024 10:01:30 +0000
Manifest next update:     Sun 16 Jun 2024 10:01:30 +0000
Files and hashes:         1: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: 0OQt9P4sizcLFSRCiDhn7TDmkVPgxlw+9trUiL6GuV4=)
                          2: tyC3aQiPwIi_V4NtCZX7ZivaPFg.roa (hash: Od7Eq3EfpcE84cJD05ZSKoxYzpjlzUxpesvDuyXAbAk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:58:4e:1e:34:9d:d2:cd:8b:e9:3e:c4:f7:98:69:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
        Validity
            Not Before: Jun 15 10:01:30 2024 GMT
            Not After : Jun 16 10:01:30 2024 GMT
        Subject: CN=0c6a9f947645663e06323c02f6e0e8a6bbf388b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:ef:0b:96:4c:09:71:f0:12:e5:3d:ea:22:
                    c4:7a:4e:98:85:db:54:bb:ed:76:41:44:36:c4:54:
                    3f:40:23:9c:ca:3d:da:cf:d9:38:f1:69:30:a7:61:
                    a8:64:6d:6b:2b:9b:68:7e:c4:ff:28:38:51:d7:7d:
                    87:ac:80:9c:c9:26:c5:45:7d:5d:12:69:17:83:04:
                    02:9c:4e:d5:96:e2:95:36:ef:9d:cd:dc:71:8e:23:
                    68:5c:b7:57:77:f3:50:26:ef:7f:ce:4e:c9:ee:a6:
                    00:2d:8d:3a:15:c7:42:d6:7e:cd:f9:78:90:3c:58:
                    da:d1:cc:39:52:c3:1d:e1:ea:8a:ff:70:50:47:65:
                    80:07:98:8b:e5:ff:4b:1f:a3:47:f7:71:d1:eb:ef:
                    a4:de:63:a3:62:e3:77:8e:a5:8c:ee:af:b1:00:24:
                    c7:47:17:d5:ec:41:29:56:70:04:1e:86:0f:e6:60:
                    6d:f7:04:06:d7:4c:0b:aa:e4:9d:81:bc:a1:74:d5:
                    06:33:a4:0c:e1:07:49:98:44:6f:42:41:59:f9:e4:
                    f1:bd:f8:0c:3b:1c:27:42:b9:9b:82:34:6e:68:10:
                    f4:6c:ea:a9:0e:88:8c:b5:67:cc:df:04:3a:88:be:
                    48:10:2d:a9:02:5e:8e:ed:19:3e:bb:c8:aa:e6:5a:
                    db:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6A:9F:94:76:45:66:3E:06:32:3C:02:F6:E0:E8:A6:BB:F3:88:B3
            X509v3 Authority Key Identifier:
                keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:dc:14:3c:cd:90:0d:91:74:77:52:4b:92:3c:a4:fe:7f:ca:
         55:a9:5a:f7:0b:96:51:c3:7e:b1:b6:e8:18:d6:69:ee:2b:92:
         eb:92:84:93:70:b1:03:b3:cb:91:25:14:ee:e4:ea:0c:31:ed:
         c7:18:79:cf:3a:83:88:d3:5a:2b:7b:5e:5c:16:7b:73:49:e9:
         5b:fe:78:20:1f:03:f8:19:e9:1d:5a:ec:0f:e9:02:14:fc:43:
         f8:4b:b4:e1:04:a7:a4:2a:22:2c:a1:91:00:2d:96:bc:7b:6c:
         ba:93:a5:e2:4c:69:e1:c5:5f:7a:e0:b3:c5:b3:b1:9e:22:5f:
         3a:fc:8f:c9:72:b0:46:69:8e:2b:24:20:eb:10:2f:63:b3:5a:
         09:7f:6e:bb:94:40:1e:c0:33:a8:f4:c5:41:b9:b5:63:e2:f5:
         24:c4:50:79:80:a7:ca:0a:f9:c0:0a:db:15:dd:35:be:b1:1f:
         3b:b6:bd:a3:48:ed:39:e0:b6:87:c4:fb:b0:89:85:72:c9:bf:
         e9:6b:a3:5e:bf:c8:c7:1a:8d:68:d3:88:92:6f:51:9e:82:f6:
         e7:4b:73:41:50:1e:62:04:b9:68:bd:53:9c:4e:bc:09:4a:ba:
         8d:0a:1e:3e:0c:c0:b3:0d:2b:64:20:b4:3e:c7:e8:a7:bf:08:
         71:d7:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:10:55 2024 by rpki-client on console-ams.rpki-client.org