Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File:                     1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier:          LEPMjas3UVX7k1Oyy+/27yd9qIsSl4kb4YDAdYKnR64=
Subject key identifier:   8A:3A:D3:AC:A1:EE:5C:BA:B4:4D:87:8B:21:4F:2E:93:22:73:2A:DA
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer:       /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial:       018F381CFBDA91113B1B5811CD8E75E518E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number:          10CD
Signing time:             Thu 02 May 2024 07:02:54 +0000
Manifest this update:     Thu 02 May 2024 07:02:54 +0000
Manifest next update:     Fri 03 May 2024 07:02:54 +0000
Files and hashes:         1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: jMObrmcWLNDnmEuQA3FqIpWi5FNbQDhvJwDxKbkeesk=)
                          2: JPqCrG4zNSlH911exXawjGFm1Jo.roa (hash: BRU6a2GSkeQP6cQVNX4zaxQAXsyUlwJub/Weibd/PV8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:fb:da:91:11:3b:1b:58:11:cd:8e:75:e5:18:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
        Validity
            Not Before: May  2 07:02:54 2024 GMT
            Not After : May  3 07:02:54 2024 GMT
        Subject: CN=8a3ad3aca1ee5cbab44d878b214f2e9322732ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:58:54:4a:63:f3:a3:65:80:f8:e1:46:7e:
                    02:39:f3:65:4c:4c:42:27:43:28:b2:11:91:dc:b8:
                    a5:a6:82:bd:79:30:9b:50:34:bf:bb:1e:0a:9c:49:
                    0c:ca:65:87:a9:70:51:cf:b3:5e:15:0a:2c:5d:18:
                    32:b4:60:ca:0f:c4:28:b0:0c:17:04:8f:64:ed:92:
                    b6:db:5a:6c:53:54:58:96:2c:9c:9e:8f:43:c2:58:
                    47:2d:71:56:6b:3f:02:b4:ae:10:c8:b2:93:45:14:
                    33:f1:a7:ff:ca:57:81:53:30:1e:95:2f:f9:a8:11:
                    e7:46:e3:31:8a:83:e8:09:f2:7c:9d:d3:ce:96:eb:
                    e3:af:a6:ad:f3:7f:6e:43:8d:68:91:20:18:f8:77:
                    64:8c:ea:ff:5f:4f:ce:9d:49:78:c2:1d:72:0e:00:
                    46:83:81:77:ba:be:07:17:55:0b:67:ea:5f:f4:91:
                    b1:a9:82:c3:87:45:fd:1e:75:c9:c6:e8:bf:a8:70:
                    03:0d:f6:92:fe:e3:6f:fc:9e:e2:a2:1e:96:e0:03:
                    37:32:fc:e6:7e:b1:b1:45:f4:d9:06:4c:aa:16:45:
                    6d:26:16:bd:5e:38:f1:76:51:5c:18:9c:f2:02:66:
                    f3:a7:15:ae:db:96:c1:65:c9:04:42:bf:9b:22:c3:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3A:D3:AC:A1:EE:5C:BA:B4:4D:87:8B:21:4F:2E:93:22:73:2A:DA
            X509v3 Authority Key Identifier:
                keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:af:e1:07:4d:72:77:13:21:64:60:d4:1c:de:08:4b:1f:19:
         ca:2e:fd:46:a3:ea:61:6d:e9:3c:19:a8:12:d3:34:d5:86:9d:
         08:e4:53:dd:45:41:7b:ef:35:30:30:c4:cf:6a:7a:dd:a0:a7:
         27:9f:ad:60:11:ee:e2:14:d6:ec:48:71:fe:50:fd:e6:f2:25:
         39:ac:4e:d7:4d:7f:78:aa:c9:da:e0:82:65:1c:6a:11:18:1b:
         07:ed:4f:23:9d:6e:a8:ac:83:fb:7e:70:ab:e8:54:66:7b:b9:
         69:02:0c:80:ff:84:71:ff:57:5c:89:55:87:e5:47:d6:a2:c4:
         57:1f:9b:59:dd:c5:6c:34:38:2d:0b:b7:d5:dc:65:10:bd:69:
         e0:f3:56:c1:9f:71:bd:61:b1:18:96:09:ae:8b:0d:0b:c1:6c:
         34:72:e8:aa:fa:c8:28:b1:37:43:3f:02:92:ff:21:d0:7d:02:
         e5:0a:73:af:c0:9a:da:c0:ff:c8:b2:f8:fa:c7:2f:4f:c1:43:
         dd:8c:ba:91:9c:d7:b7:d0:be:9b:50:76:85:fd:b2:38:f5:27:
         1b:55:28:c6:3e:a4:17:2c:cc:7b:b5:a1:e4:22:f3:51:77:bf:
         c7:6f:6f:20:fe:34:f1:51:71:39:ca:c7:bb:7f:c5:30:24:e0:
         b2:1d:1f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:03:55 2024 by rpki-client on console-fra.rpki-client.org