Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File:                     8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier:          OjudzsE9FpH2N+ai+HlvdYjQxhqoLGvM8bpzVflSmdo=
Subject key identifier:   3F:2B:62:4B:28:52:93:25:E6:7F:19:24:20:61:10:2B:20:5A:43:52
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer:       /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial:       018F3E54B741B4CBCA3982D06F15021E8F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number:          1154
Signing time:             Fri 03 May 2024 12:01:30 +0000
Manifest this update:     Fri 03 May 2024 12:01:30 +0000
Manifest next update:     Sat 04 May 2024 12:01:30 +0000
Files and hashes:         1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: 0O+4LxKjJvcokJ4c4NQDyRITKsYxXBFgUdHqwMvAbhg=)
                          2: uIUHMCUHibxsJgVpBvtl8p-LcO4.roa (hash: fHSqJ39acdkfmESBNHMrHLiPcW+cdjimkMp/hGIVx9I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:54:b7:41:b4:cb:ca:39:82:d0:6f:15:02:1e:8f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
        Validity
            Not Before: May  3 12:01:30 2024 GMT
            Not After : May  4 12:01:30 2024 GMT
        Subject: CN=3f2b624b28529325e67f19242061102b205a4352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:d8:7c:68:99:a2:80:b5:d7:52:b3:e3:db:
                    a5:a1:ef:1d:ff:55:fa:4c:d7:83:54:1f:e8:c3:fb:
                    59:ab:4f:82:33:a0:55:52:f7:5c:43:3e:a4:54:be:
                    5a:10:94:80:12:9b:e2:ee:32:95:c4:83:5a:f2:c0:
                    4b:5e:9c:2b:b3:3b:61:65:6a:17:b7:d1:22:4d:b8:
                    40:8d:ac:41:86:44:dc:16:17:b4:3d:f3:17:da:98:
                    96:b7:7c:da:9c:34:1f:a8:94:a7:6f:1c:39:b3:52:
                    8b:45:a3:e8:70:51:58:42:04:81:e6:b7:e5:be:43:
                    4e:30:9d:78:a6:5d:19:ea:04:cc:28:c1:77:b6:7f:
                    52:71:4e:5f:20:cf:42:78:8e:ca:dd:67:a8:cd:22:
                    6c:71:ee:4c:14:b7:e6:98:5c:a4:4d:de:a3:45:81:
                    7a:f6:8a:42:0e:81:54:14:9c:3d:65:9d:7a:79:dc:
                    c8:13:76:5e:ba:c2:79:81:d7:6b:0a:e3:b2:b3:67:
                    15:c6:f3:30:71:60:38:58:da:df:33:97:17:d6:6b:
                    06:c3:4e:1d:4c:22:a7:a4:0d:d5:fb:96:f7:a9:b2:
                    ce:d5:b0:19:cf:0c:15:97:98:94:ef:3a:4e:cf:22:
                    11:fc:bf:27:a0:f5:21:57:b9:8d:7b:6b:c4:b1:be:
                    c4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2B:62:4B:28:52:93:25:E6:7F:19:24:20:61:10:2B:20:5A:43:52
            X509v3 Authority Key Identifier:
                keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:58:f2:4f:75:0b:e8:d2:a3:57:c3:d3:cd:9e:51:4b:03:fb:
         78:77:bd:dd:0b:ba:88:9b:05:23:6a:3b:62:a4:01:42:0b:12:
         de:22:7f:38:e7:87:ea:ec:fe:1b:e7:bc:24:7c:fe:7c:49:de:
         ce:a0:7b:6b:b8:f5:4a:f3:6a:21:8a:51:75:e1:d4:64:c6:b1:
         18:5e:46:d9:07:a9:01:72:87:58:07:02:a8:15:94:9f:8e:da:
         65:81:ce:e1:5a:53:2f:82:b7:43:09:16:bf:5d:5c:ac:ea:19:
         d2:df:0b:fd:8c:62:f0:fd:af:1d:8b:1d:25:30:66:e0:8c:03:
         24:8d:55:1d:71:8e:61:3c:4e:27:11:f1:dd:07:d4:b0:0c:6d:
         25:aa:d4:d3:a3:cf:c4:d8:f6:2f:fc:22:5a:c4:84:6f:a1:ad:
         8f:23:2c:80:12:68:6b:7d:2b:9e:17:51:72:e6:b0:6a:ea:fe:
         e9:d9:b9:1c:07:eb:f4:c0:3d:6d:74:f7:58:a2:4c:68:eb:24:
         6d:60:11:fb:b0:2b:fe:ab:26:08:7c:45:66:9b:9d:e7:af:e0:
         f4:38:2f:57:38:0e:cd:77:e6:43:b6:eb:b9:23:32:1d:da:ea:
         20:5a:d8:69:cb:dd:c2:69:7b:c8:9e:4a:5b:48:47:34:25:77:
         ef:d3:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:27:23 2024 by rpki-client on console-fra.rpki-client.org