Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File:                     4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier:          YnqOoxv7LmXsCeEusVlCLkyGuH/RKWTtcoSOeOMgKdc=
Subject key identifier:   71:38:61:A3:19:04:45:E1:03:D5:1F:8C:35:6D:A1:C7:72:C2:34:7B
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer:       /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial:       018F874A7A6D343EA17F0CEEAE908931C31A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number:          012F
Signing time:             Fri 17 May 2024 16:02:35 +0000
Manifest this update:     Fri 17 May 2024 16:02:35 +0000
Manifest next update:     Sat 18 May 2024 16:02:35 +0000
Files and hashes:         1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: I6emUdvYi/Hy2bWAX0oKBoWRBbdGbraNUaDiY9nnMZA=)
                          2: IoqtWeCdVH8DHVLIaRpGU-blUe8.roa (hash: Sx2kacD0TJvhk/JtGsEN09rRLqwG4Id48BO6hIGCO7A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:7a:6d:34:3e:a1:7f:0c:ee:ae:90:89:31:c3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
        Validity
            Not Before: May 17 16:02:35 2024 GMT
            Not After : May 18 16:02:35 2024 GMT
        Subject: CN=713861a3190445e103d51f8c356da1c772c2347b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:7b:42:38:f7:32:86:90:ac:31:70:97:43:
                    7b:92:c0:bf:23:87:71:34:47:86:6e:bc:98:b3:e9:
                    f8:26:99:c6:ea:0e:ab:64:e6:33:c8:56:fc:08:5e:
                    65:03:26:62:ad:40:51:23:8b:ff:9d:33:86:3f:72:
                    bc:18:e6:ec:81:2a:7f:2e:3b:99:1f:b4:35:0a:ac:
                    e4:74:14:30:06:cd:2b:7b:be:23:c6:aa:02:c4:44:
                    cd:cb:0f:56:ff:2a:86:fd:65:a5:ac:2a:07:b7:e4:
                    57:fb:c5:5a:70:31:47:9f:d0:c7:7a:43:2d:fc:bd:
                    05:d3:c0:bd:97:85:29:f4:f0:63:8f:f7:37:95:aa:
                    06:33:2d:ac:a7:78:51:89:56:35:cc:87:61:4d:ae:
                    2a:2a:84:20:33:6f:b4:aa:8c:e7:1d:bf:ab:27:a3:
                    01:bb:71:37:a2:f2:ae:24:3e:e7:fc:70:eb:3a:17:
                    f7:60:2e:09:25:76:ec:dc:c8:4f:21:09:5f:70:53:
                    15:6c:56:76:d3:8e:c6:51:79:cf:33:3d:ad:96:a7:
                    f4:65:6f:a0:27:90:a0:33:5b:33:07:9c:17:93:f3:
                    04:71:93:d4:e9:d9:94:3c:d4:8c:73:56:50:af:68:
                    f2:ba:bd:ee:0b:87:00:4c:be:cd:a7:a4:a9:70:66:
                    e0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:38:61:A3:19:04:45:E1:03:D5:1F:8C:35:6D:A1:C7:72:C2:34:7B
            X509v3 Authority Key Identifier:
                keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0e:9d:86:fb:e9:b7:3e:ff:52:10:0c:a1:5b:46:de:31:1f:
         80:cd:c2:b2:57:39:2d:64:7e:2b:31:41:85:32:3a:2c:f9:81:
         72:ce:41:18:c8:03:ac:49:74:b9:65:d9:8c:4f:8b:ae:23:72:
         41:cf:b8:26:29:5d:3a:24:91:8c:7c:ff:7f:e8:5d:c6:9d:25:
         56:ca:c6:f0:24:07:50:1d:6a:ef:71:c3:d2:29:ab:10:76:78:
         95:fc:6f:fd:f6:7e:3f:62:78:85:47:50:c7:34:9d:71:49:f8:
         4e:fe:a2:4e:0b:04:d7:68:35:2e:cb:be:01:16:73:ad:b2:85:
         a7:eb:91:61:b4:a1:2f:b7:56:05:79:66:dc:5e:fe:a6:6a:bc:
         03:a7:09:81:37:5a:22:f7:06:00:b4:71:14:7b:47:53:1a:65:
         bf:9a:62:9e:ed:56:51:29:4c:5b:59:9b:73:a5:94:39:52:97:
         7b:4e:19:3a:e0:76:2c:00:8a:50:c2:92:52:aa:10:4e:26:0c:
         b3:b5:38:11:a8:0d:f1:9a:79:5d:67:1b:73:32:5e:dc:5c:f9:
         9e:33:88:dc:c0:3e:05:c2:7c:81:5d:73:89:a5:fc:96:50:ff:
         18:42:12:17:99:39:29:f0:f0:1e:ca:07:a5:27:aa:38:73:9c:
         8f:e1:31:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:36 2024 by rpki-client on console-fra.rpki-client.org