Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File:                     2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier:          +O79KGKa/5OKKMwpo4pajm4BMsQlxskK2LSFOqWXOa0=
Subject key identifier:   E6:B5:EA:49:B1:28:F8:86:77:4D:E5:ED:39:6D:E7:2A:1D:22:D2:46
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer:       /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial:       018F22DDA2968758A8370A473EF859FE4828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number:          1147
Signing time:             Sun 28 Apr 2024 04:01:41 +0000
Manifest this update:     Sun 28 Apr 2024 04:01:41 +0000
Manifest next update:     Mon 29 Apr 2024 04:01:41 +0000
Files and hashes:         1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: /lYXZnTK+EAh/3O3iJ3T1vrgfcWu8V5PatpvTwOp8qg=)
                          2: lyroA4dCT7RkBVImmk7axDw7Ac0.roa (hash: zJCYvY8kuH+vRYajnq9zpJeQBbUV6UuxVmErfr3KHtw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:dd:a2:96:87:58:a8:37:0a:47:3e:f8:59:fe:48:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
        Validity
            Not Before: Apr 28 04:01:41 2024 GMT
            Not After : Apr 29 04:01:41 2024 GMT
        Subject: CN=e6b5ea49b128f886774de5ed396de72a1d22d246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:d4:e7:c3:ba:1d:be:04:56:32:49:69:29:
                    3a:95:4e:f7:6b:01:79:36:96:6c:c9:1b:20:ae:be:
                    00:7b:c7:0e:54:1a:46:5e:f5:e8:7a:f0:05:7f:33:
                    98:54:1b:dc:03:42:50:1a:29:4b:11:53:20:b6:d1:
                    a7:e0:a1:3e:01:cd:db:c7:52:79:f6:bc:fb:45:73:
                    6b:d7:1d:da:c6:1a:0f:fc:dc:31:d2:69:5a:3e:36:
                    07:f2:0b:dd:3f:3a:58:38:0a:90:94:d2:5d:40:19:
                    85:ff:90:57:0c:8b:b6:34:0a:91:cd:7e:30:96:46:
                    4f:0b:49:af:9c:93:e7:4d:82:b1:72:58:d5:91:b6:
                    fa:92:9d:60:60:41:b7:53:a0:04:0d:a1:38:21:5b:
                    23:c2:a1:2a:24:05:e0:82:17:ec:a1:15:27:3e:d0:
                    77:87:6f:9b:e0:45:7b:60:81:d7:c9:9b:27:18:2c:
                    70:ec:03:a6:12:16:54:a6:e5:cd:83:2b:25:e9:a2:
                    3b:cf:1c:85:2f:b8:dc:f9:f8:9f:48:4c:8e:a3:d3:
                    cf:51:70:9b:e2:d9:98:89:da:db:69:b1:f0:13:9d:
                    3c:ef:45:c0:39:2d:cb:d6:f4:b5:5c:30:1b:53:3f:
                    5a:87:a5:85:a3:1b:cb:58:19:8f:ec:00:a1:c2:6c:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B5:EA:49:B1:28:F8:86:77:4D:E5:ED:39:6D:E7:2A:1D:22:D2:46
            X509v3 Authority Key Identifier:
                keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6a:1f:e2:2d:6a:9d:1d:22:83:16:46:31:ce:42:02:72:67:
         79:77:2f:3e:a0:c5:a6:5e:b6:29:9f:c8:57:3c:74:bd:30:5a:
         be:7e:a6:9a:7c:85:af:85:b7:9b:49:6e:57:67:64:3b:8a:43:
         f9:e5:f5:55:c9:c1:00:e3:ad:68:1d:83:61:91:cf:90:6b:de:
         99:9c:23:f0:84:1e:c2:53:27:f8:3b:eb:db:fc:95:06:b9:3d:
         cc:3a:ff:f7:c5:ab:35:e0:00:9a:6e:ae:fe:6c:96:36:0a:5d:
         c4:d2:27:6f:31:ae:7a:79:40:2a:78:a2:70:5a:4e:c1:90:68:
         b8:07:18:ff:1c:69:ff:a3:8e:c4:74:14:37:25:0a:aa:a0:c6:
         0f:b9:c8:24:8c:59:b3:48:2a:dc:4b:63:b6:12:1a:22:7d:01:
         af:d0:9f:28:7f:ea:54:d7:fa:2c:5d:4c:74:ad:ed:65:7a:5b:
         f7:47:28:67:ab:c3:5c:7d:b9:05:97:a0:07:db:d3:b9:45:97:
         92:c2:f4:c5:f4:6a:74:a6:b9:ba:d9:54:42:28:85:0a:6c:12:
         36:dc:94:6d:23:67:86:93:67:36:2c:a5:34:58:c6:d3:2a:c9:
         a2:1a:df:89:e6:ec:2a:cc:47:88:64:cf:a5:de:a9:ff:78:28:
         1b:5c:c2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:35:41 2024 by rpki-client on console-ams.rpki-client.org