Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
File:                     1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json)
Hash identifier:          wCtriVrpxI0AMe0Dg5xeFgSNdnXUPO7wQM1WOOgfdsA=
Subject key identifier:   16:7C:C2:91:3D:31:40:86:80:C9:87:5F:9C:2A:60:69:A9:E7:83:E0
Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
Certificate issuer:       /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Certificate serial:       018F34401959EBAFA625F4D6ED58A4DD1DE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
Manifest number:          0DA4
Signing time:             Wed 01 May 2024 13:02:47 +0000
Manifest this update:     Wed 01 May 2024 13:02:47 +0000
Manifest next update:     Thu 02 May 2024 13:02:47 +0000
Files and hashes:         1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: dYgR/z0ytZz7130QnaZgiPlE0KLtmKBMBFoJ2uZgfRI=)
                          2: 3uMPw4QzcsJnWnl7S7T4FI18XI4.roa (hash: jUPZTGddgxdT5pxuaWIzMy/7LuJSPXtRCgLrJxcYVuA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:40:19:59:eb:af:a6:25:f4:d6:ed:58:a4:dd:1d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
        Validity
            Not Before: May  1 13:02:47 2024 GMT
            Not After : May  2 13:02:47 2024 GMT
        Subject: CN=167cc2913d31408680c9875f9c2a6069a9e783e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1c:c9:21:19:7b:f2:47:f9:91:7a:ad:26:ea:
                    42:8a:15:29:d7:65:c7:e6:30:b9:27:3d:94:03:11:
                    58:32:ab:74:3c:cb:dd:20:10:de:9d:41:f0:8b:60:
                    e1:cf:75:a1:18:82:43:73:be:db:f7:ba:f1:af:e8:
                    55:1d:64:96:d1:9d:0b:8c:d7:9f:86:9d:d8:be:1d:
                    0a:76:ac:30:24:cd:95:0c:cf:dc:be:3f:95:8a:a7:
                    69:cf:c2:52:97:2a:6b:b7:18:85:7a:a2:8d:66:7e:
                    7b:6e:6e:05:85:69:10:29:77:0b:8d:52:4d:c8:de:
                    f3:7a:b9:f1:ce:08:2f:eb:b3:06:0d:19:f0:5f:33:
                    4e:bc:be:20:84:c2:46:47:e2:d8:ab:e0:33:e5:11:
                    9a:bc:ce:f9:4b:b3:a4:b0:3c:a1:a2:f0:9b:c8:f5:
                    9b:7c:5a:c6:4f:71:b1:75:1d:93:d9:4b:3f:f3:89:
                    95:cb:31:d2:7b:bf:b8:cf:6d:b0:69:d8:36:95:ee:
                    a2:38:46:a9:74:b5:1c:fc:ca:7d:37:06:cb:68:4b:
                    1b:cd:cd:10:df:6e:80:73:5f:20:c1:42:65:1f:83:
                    d5:67:88:49:4e:56:7a:13:e0:53:55:f2:70:b5:15:
                    c8:92:d7:57:bd:65:10:e8:3b:6c:f9:6d:45:02:40:
                    59:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7C:C2:91:3D:31:40:86:80:C9:87:5F:9C:2A:60:69:A9:E7:83:E0
            X509v3 Authority Key Identifier:
                keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7c:74:c7:a1:4e:c1:0e:8a:e5:f0:13:b4:4e:11:90:23:2a:
         4e:5f:51:24:ea:9b:76:c2:10:47:db:c0:1b:82:99:82:52:bc:
         54:95:18:d6:d8:97:29:11:4f:85:b9:8e:04:67:4a:22:f9:44:
         17:d7:c3:f5:ab:95:96:1d:22:79:a4:19:df:6c:5e:cf:40:75:
         85:67:c5:30:a8:b8:17:80:44:bb:22:5c:85:c9:25:2d:b7:99:
         ed:12:2e:7c:e1:6d:14:e3:e1:50:55:fb:25:0c:f8:bf:d5:2c:
         1c:a3:fa:dd:74:f4:fa:e2:a8:e1:3e:d3:a0:21:df:5e:a0:6a:
         24:ac:4e:66:f0:b2:4f:10:cd:09:80:3d:4b:66:4a:ed:d2:c1:
         c7:0c:f9:bf:f4:ed:d6:e6:a4:e3:4a:52:27:c8:0a:a3:1d:01:
         b2:28:99:fc:0e:63:1f:11:18:ea:a2:c2:19:1c:3d:17:8f:83:
         5f:cb:7a:4e:c3:bb:68:c2:86:89:e7:41:fc:63:41:e8:85:74:
         d9:8e:2f:09:fb:a9:e6:de:08:a7:dd:3d:3a:cf:65:51:f1:ef:
         35:d0:e8:76:0e:b8:83:87:60:cf:62:7b:e3:0f:3d:4b:14:12:
         8a:4b:d4:8a:53:3b:b5:95:91:d8:86:2a:7c:fa:a3:b5:a5:f9:
         09:cf:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:38:27 2024 by rpki-client on console-fra.rpki-client.org