Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File:                     41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier:          3+P5Y/hPWt0NKp0TizhBQmos2w+MwZ6mb8bQXUi3kWw=
Subject key identifier:   1C:64:C0:4B:7B:42:E4:67:00:83:83:72:48:72:09:69:51:C0:0C:26
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer:       /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial:       018F17476E27FBDE30902427CC51F122D0A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number:          113F
Signing time:             Thu 25 Apr 2024 22:01:48 +0000
Manifest this update:     Thu 25 Apr 2024 22:01:48 +0000
Manifest next update:     Fri 26 Apr 2024 22:01:48 +0000
Files and hashes:         1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: clEn602sPx7wcA3CkaAOrXRchF9sK7St4ha5pSVL5gc=)
                          2: JIqe6cNP4CRnqSsCqOsqH33oiUs.roa (hash: qzF9U2+iUb6xkpvSPes7rMqo6dB8DXTllwFAKutlSnk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:17:47:6e:27:fb:de:30:90:24:27:cc:51:f1:22:d0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
        Validity
            Not Before: Apr 25 22:01:48 2024 GMT
            Not After : Apr 26 22:01:48 2024 GMT
        Subject: CN=1c64c04b7b42e467008383724872096951c00c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:53:28:fa:58:ce:ab:32:a3:d9:72:bc:08:82:
                    ff:e5:0f:7a:ce:86:80:27:05:09:4a:44:73:bd:d4:
                    38:51:3e:60:2b:8a:21:1b:4f:2f:e2:1a:00:78:cf:
                    18:34:41:df:ba:e5:3e:4e:b7:15:34:fb:4d:2e:d9:
                    73:12:65:63:23:06:19:29:47:be:1d:a8:ad:8d:ab:
                    3a:59:db:fb:d2:ed:47:78:bd:a9:0d:92:05:5d:52:
                    e1:b0:84:78:24:a5:5b:f3:15:2f:04:c4:7b:e3:f4:
                    78:52:6b:c8:2d:c8:7e:e6:05:32:f7:3c:b1:da:15:
                    0b:68:23:16:7e:80:68:eb:3b:0b:91:b0:eb:03:96:
                    78:3f:18:fe:2c:3f:d2:57:0d:41:77:a4:54:99:ab:
                    60:ca:9e:3f:76:2a:59:7e:27:b3:6f:fc:c5:de:b1:
                    6a:a5:1a:8c:a6:43:79:6c:52:dd:65:79:48:3a:39:
                    a6:47:f5:fc:69:73:d0:8e:10:dd:e0:34:eb:98:44:
                    e6:86:32:1b:84:b1:cf:0d:a0:34:95:cc:f8:4f:df:
                    9c:75:c0:b6:7b:5b:5e:e8:f7:91:0d:fc:9a:28:45:
                    fc:d8:ca:03:fe:eb:5a:0a:a6:a4:93:38:a0:81:cc:
                    0f:21:98:ed:71:bb:ab:fd:4a:4a:d0:2f:17:b5:55:
                    64:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:64:C0:4B:7B:42:E4:67:00:83:83:72:48:72:09:69:51:C0:0C:26
            X509v3 Authority Key Identifier:
                keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bf:81:4b:94:53:af:df:f4:86:48:13:92:26:4a:89:00:5a:
         ea:09:5f:48:79:c2:ec:87:c6:78:b3:e6:60:31:bf:c0:77:d6:
         8c:6d:2f:83:c3:98:f5:1d:b9:49:b1:94:c4:c6:99:f9:39:3a:
         c9:bf:cc:15:30:2b:b7:02:3d:fb:f4:93:64:1f:53:0d:4a:c9:
         63:38:52:f5:a8:c3:46:fb:c7:17:c9:94:7e:b0:d1:3a:47:44:
         cd:9c:d5:0f:71:56:b9:47:f2:9c:ed:3b:f2:ae:f4:ff:4e:0c:
         f0:be:26:66:0c:29:9b:c1:51:47:42:36:16:b6:ca:35:39:68:
         e2:ed:d0:a8:f2:74:03:4a:0f:bd:56:bc:b0:ea:49:3e:c1:9b:
         0e:aa:44:99:0e:ce:61:0a:49:61:81:81:9e:1c:f1:4a:75:7e:
         fa:2b:76:28:c4:2c:57:6f:d2:b4:d8:93:13:c9:09:ef:ae:c2:
         05:8e:e7:34:bd:5a:ce:58:56:b1:37:89:e0:92:55:0b:f0:83:
         61:6a:8b:16:db:5f:ed:df:ca:03:0e:d9:51:dc:87:da:c7:e9:
         62:1a:08:08:8c:e6:fd:7c:7b:86:e9:93:b5:95:49:79:d0:5f:
         30:5c:39:62:88:8a:b6:e6:d3:b3:80:08:58:68:e5:82:91:0a:
         a4:10:6a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:52:08 2024 by rpki-client on console-fra.rpki-client.org