Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File:                     1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier:          8dsLq2Pguy+QWP+Qv0/orT/C08YK16wuRzkuq12tsaI=
Subject key identifier:   C4:B9:4B:AE:02:22:24:EF:CA:55:96:43:07:D9:56:E9:B6:8E:D5:9D
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer:       /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial:       018F2C873655EDA95832B5D2DBA269A4CA5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number:          1148
Signing time:             Tue 30 Apr 2024 01:03:29 +0000
Manifest this update:     Tue 30 Apr 2024 01:03:29 +0000
Manifest next update:     Wed 01 May 2024 01:03:29 +0000
Files and hashes:         1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: l3+/Hg5bUOWuCaiJ6iJey3qrVY6EMnm0UWfbU9GyfmY=)
                          2: aYHNYlRBIOdg14UribFBq7vPmzE.roa (hash: YKxowAQ1A3UaAYmJ6nkIJieUMg1EEoi8NUxQZjnV5UM=)
                          3: nn7Mk89YuCe-kl2VsB_TgaqWMms.roa (hash: 4rqXWGm2WSca98waaluzkh1zTvyQTV4QClEyqR24/5M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 01:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2c:87:36:55:ed:a9:58:32:b5:d2:db:a2:69:a4:ca:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
        Validity
            Not Before: Apr 30 01:03:29 2024 GMT
            Not After : May  1 01:03:29 2024 GMT
        Subject: CN=c4b94bae022224efca55964307d956e9b68ed59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:58:ca:6f:39:75:7f:e3:a5:49:3c:f2:cf:c5:
                    d4:72:7e:76:15:73:9f:c5:ab:d4:be:aa:14:48:7d:
                    52:0c:15:91:6c:79:53:87:e8:a5:4d:84:ea:f0:84:
                    9d:9f:3e:a9:2c:bf:14:6e:95:65:c8:11:2d:48:c1:
                    9a:3f:ab:09:5e:e6:07:23:82:e0:28:40:78:21:04:
                    f5:69:16:69:bc:b8:05:42:c5:2c:3c:8c:7c:0a:2c:
                    f1:e6:f8:64:8c:87:bc:fb:bc:c9:fc:a3:fe:f0:16:
                    59:88:63:9b:3a:72:2f:cd:64:eb:03:8f:b5:49:56:
                    ae:a9:a9:3b:d6:f5:51:65:ce:70:d8:af:79:35:b4:
                    0d:a9:db:00:3e:aa:7a:57:d7:d3:b2:f8:4d:f7:1c:
                    32:40:4f:c9:fc:84:39:9d:94:d4:5e:a8:c9:7e:4c:
                    60:13:5a:95:0d:43:af:b4:a3:7b:8f:ae:3b:f1:08:
                    30:5f:91:81:e7:2c:3d:5d:24:35:b5:61:90:da:bc:
                    ac:15:ea:d1:d5:69:98:ed:f5:c1:56:60:70:2f:81:
                    eb:72:c6:1e:04:96:e6:15:16:d4:19:da:28:3e:29:
                    71:f0:8e:39:eb:15:bd:6b:61:ab:ee:76:66:94:41:
                    1f:ac:4d:4f:e1:17:18:a4:f8:1b:d9:67:54:4b:b7:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B9:4B:AE:02:22:24:EF:CA:55:96:43:07:D9:56:E9:B6:8E:D5:9D
            X509v3 Authority Key Identifier:
                keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:96:0c:40:8e:d7:69:27:df:b0:54:f1:93:8b:82:8d:28:b2:
         03:a8:0e:30:26:1d:1c:ab:06:9e:ed:3a:0e:62:13:63:dd:53:
         b9:4f:0e:36:41:f1:31:83:7e:c2:dc:e5:4b:2c:20:de:c3:23:
         4b:c2:56:63:e1:57:ec:f0:c4:c2:98:ae:da:df:3e:8c:db:81:
         af:32:a0:c4:48:b8:aa:e2:b2:77:12:51:7f:f5:61:5b:58:1f:
         02:f6:8f:42:5b:a7:36:f8:10:a4:0c:d8:19:ee:10:45:1b:55:
         7b:7f:e9:23:4e:8d:0d:87:90:ae:33:b0:7a:2f:18:41:cb:cf:
         84:3e:9e:8c:e9:ec:55:e2:89:77:5f:1a:a7:84:c1:c5:a2:70:
         d2:2e:7f:b1:33:3e:30:20:62:22:a5:a9:34:12:1e:d3:f2:6f:
         a4:3e:7f:08:f8:a0:16:38:92:a2:ad:fe:bc:27:b6:62:f0:7e:
         99:45:35:96:27:65:03:d4:b6:cc:cb:87:bb:f6:0b:88:78:2b:
         e1:8c:04:7f:95:31:91:3b:de:33:94:8a:48:da:75:b8:b8:e0:
         e0:4e:6a:35:a3:1d:01:bb:ab:12:84:be:c5:59:0f:e3:bb:de:
         5b:3c:c1:49:22:72:60:33:e2:94:70:62:85:3a:f8:f3:05:c5:
         96:56:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:22:15 2024 by rpki-client on console-fra.rpki-client.org