Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
File:                     1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft (raw, json)
Hash identifier:          98W6OA6nzx7F160Vv0p6mveMZ2Ughv6R5iZKQpJThM8=
Subject key identifier:   11:E9:D6:81:08:A0:FC:36:C6:F0:35:56:29:61:94:AC:FE:84:1F:9D
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Certificate issuer:       /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial:       018F5702C7DC07D09C45A82E3361DB885D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
Manifest number:          1011
Signing time:             Wed 08 May 2024 07:02:30 +0000
Manifest this update:     Wed 08 May 2024 07:02:30 +0000
Manifest next update:     Thu 09 May 2024 07:02:30 +0000
Files and hashes:         1: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl (hash: mJCkNR5zwOIZp76Xm1zGGC7spB47FrY+C4bVQNPqNm4=)
                          2: vn8c2dOQ-6-r-DCWHbprUAVUNM4.roa (hash: 341h+d4mJY0vTQFiCwszBSqkth6gqLwitAnSQTHBx8E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:02:c7:dc:07:d0:9c:45:a8:2e:33:61:db:88:5d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
        Validity
            Not Before: May  8 07:02:30 2024 GMT
            Not After : May  9 07:02:30 2024 GMT
        Subject: CN=11e9d68108a0fc36c6f03556296194acfe841f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:b4:c7:9f:00:8c:ed:87:cc:fb:1c:14:f0:
                    4f:6b:c3:3f:24:ee:a8:df:2f:73:d4:57:5b:2d:76:
                    0a:3a:1b:b9:48:aa:9e:9a:dc:90:9f:ff:9c:f1:8a:
                    5a:c4:a8:d4:26:68:85:1b:c5:ff:6b:d2:3a:82:c9:
                    31:64:b1:34:53:32:7b:11:83:65:6f:db:d4:c2:67:
                    3d:dc:10:c0:78:31:d3:d0:51:f1:b7:c2:a3:44:46:
                    2c:20:e8:20:1b:53:a9:a6:ce:04:f7:07:03:c4:67:
                    1d:ad:12:0b:3e:51:be:c0:54:ec:d2:ce:cd:dd:83:
                    76:87:50:e0:08:3a:fc:49:36:5e:fe:13:10:71:5c:
                    d3:0f:6d:2c:f3:79:43:66:5a:0c:a9:78:f4:62:db:
                    be:75:b7:66:8b:70:7a:a7:4f:e4:b2:4b:24:a4:cb:
                    d0:2a:61:93:08:51:fe:4c:bd:ed:6d:cd:b1:4c:be:
                    a9:5e:5d:24:65:1b:66:e9:e7:c8:bf:01:93:92:95:
                    76:80:2c:a2:7d:ba:85:a7:ca:bb:fe:a2:2b:f6:4d:
                    81:0d:14:97:ab:43:64:f5:5e:07:03:1b:24:bc:85:
                    0b:93:94:31:5e:48:ed:01:a0:06:62:6e:d4:4b:7c:
                    36:51:87:4e:c3:05:f8:a6:b4:e0:cc:10:a9:b5:ad:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E9:D6:81:08:A0:FC:36:C6:F0:35:56:29:61:94:AC:FE:84:1F:9D
            X509v3 Authority Key Identifier:
                keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:06:23:6b:ed:0a:e6:07:17:36:9a:97:60:dd:df:27:82:69:
         c9:db:64:7e:74:ff:97:63:90:59:b3:cd:2e:24:de:ad:10:b1:
         de:42:7e:1a:92:16:5e:21:8a:95:3d:9d:09:9b:c8:ce:74:4a:
         6d:29:9c:d7:d6:62:ae:de:d1:40:c0:21:33:e2:02:78:48:4d:
         6c:9b:7e:66:ca:48:dd:3e:72:a9:90:53:60:36:48:11:ab:2c:
         07:d7:21:c9:b5:70:0c:61:73:62:79:ca:2d:51:7e:14:26:37:
         7f:f8:d9:a4:87:2c:62:48:c6:41:55:8d:da:48:79:c4:9c:66:
         11:fc:09:59:7a:6d:fe:62:d3:65:30:d3:56:db:71:33:db:59:
         c3:bc:d8:ab:9c:56:b1:d8:4e:42:43:aa:63:33:6d:f3:3f:41:
         ab:e1:82:ef:2e:e5:17:ee:e8:59:37:da:9a:7d:8b:6c:e6:36:
         f4:ef:6c:21:7b:52:1a:4e:f4:57:26:8c:a5:57:9b:a8:97:b6:
         25:9a:b5:a3:4d:36:50:29:67:aa:15:69:86:4a:db:a6:4b:2b:
         64:cd:8d:7a:cb:14:b2:b3:c3:1b:0f:41:81:ef:a9:bb:b2:b9:
         07:97:68:b7:fd:cc:de:8c:4c:ac:e2:a6:7f:c7:93:18:0f:26:
         37:18:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:26:06 2024 by rpki-client on console-ams.rpki-client.org