Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File:                     1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier:          am/su4KgSow0pMT1Pe8oSv40h5nbKXn/fRVxiwb7tEk=
Subject key identifier:   4F:A2:D2:E8:ED:24:07:BA:CF:CB:C4:A5:56:2B:5F:1C:C7:FC:B7:1F
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer:       /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial:       018F44C4A8AA9DEC52658AE9D229630E3B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number:          0728
Signing time:             Sat 04 May 2024 18:01:29 +0000
Manifest this update:     Sat 04 May 2024 18:01:29 +0000
Manifest next update:     Sun 05 May 2024 18:01:29 +0000
Files and hashes:         1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: sjZEF1fM16G07eOIqJexk40j9+OtnTStiGg9yrSdypM=)
                          2: ibbUyELQhKjbyC4vGuBJQ9JvHI4.roa (hash: yhXWbPVrcUcuC8qY1sWv2JnA+afHPBx2Lp6OeW/psOg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:c4:a8:aa:9d:ec:52:65:8a:e9:d2:29:63:0e:3b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
        Validity
            Not Before: May  4 18:01:29 2024 GMT
            Not After : May  5 18:01:29 2024 GMT
        Subject: CN=4fa2d2e8ed2407bacfcbc4a5562b5f1cc7fcb71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d7:0a:10:ae:27:2f:d0:a1:38:06:0b:2c:7b:
                    f8:e3:4c:9d:eb:81:72:6f:6f:4e:de:fa:5d:89:9a:
                    87:ba:1d:01:f3:8e:42:67:2e:82:f0:da:15:97:b0:
                    ed:d5:c5:37:d5:cf:c5:d0:b7:2a:ec:51:db:fa:c7:
                    bc:34:8c:cd:5a:0a:c2:33:72:6a:47:7e:d2:d0:23:
                    4e:2a:52:08:f5:97:26:1f:78:7b:23:74:3d:ed:9d:
                    98:b8:22:14:2b:41:7d:8f:ec:b3:14:49:11:2f:f4:
                    58:e3:b7:b0:fc:5d:4d:62:88:a7:4f:d3:0c:2a:b4:
                    ea:2c:ae:3c:46:13:02:bd:33:dc:db:1f:07:f5:a2:
                    2a:0b:61:e0:3a:7d:30:00:f0:54:25:ea:38:94:21:
                    6b:1c:1e:6f:b9:4d:83:e7:f6:e4:2a:3e:8d:3a:4c:
                    88:f7:81:61:78:0a:7e:94:2c:0f:f6:99:b2:4d:a6:
                    6b:a7:30:d4:c1:76:78:2a:e0:ce:e6:cf:53:7e:cd:
                    18:51:7e:b2:0f:84:67:d6:a4:82:f4:27:0f:a2:85:
                    02:9e:ad:87:fa:08:36:99:b8:af:e8:8e:f2:fd:8b:
                    42:68:9c:c4:25:26:4f:ab:12:82:ef:17:4d:ce:e2:
                    91:01:1c:ca:7e:2b:68:60:b0:4f:27:2f:a7:fa:c8:
                    26:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A2:D2:E8:ED:24:07:BA:CF:CB:C4:A5:56:2B:5F:1C:C7:FC:B7:1F
            X509v3 Authority Key Identifier:
                keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b3:87:c1:9a:61:87:44:41:af:b3:92:84:da:f6:12:58:4b:
         3e:1f:47:d8:86:e8:ab:df:9f:68:74:03:29:80:ee:5e:9f:7e:
         b9:dc:6a:b4:60:c5:f3:35:ba:11:d1:f4:01:93:52:06:a3:52:
         07:d9:96:25:9a:1b:86:25:03:b6:99:75:56:f5:11:fe:70:c4:
         a6:9d:17:cf:e7:fa:40:64:80:50:b6:89:60:ea:79:a0:69:f4:
         08:29:dd:65:a4:70:d1:db:2c:48:be:fc:60:e9:cb:18:b7:f4:
         4d:12:c3:02:66:a6:82:3e:2f:02:31:47:3d:04:e0:57:fa:37:
         83:8a:f9:a5:fe:c2:a9:a6:06:63:35:87:bd:66:7b:7e:41:b1:
         f7:72:36:0e:e9:1d:11:01:af:ce:32:6b:09:36:52:70:a7:dd:
         bb:90:09:86:d1:4a:7d:8f:43:fc:87:01:a4:0a:e8:dc:4e:e9:
         a2:be:24:ef:d4:0f:b4:82:42:57:80:0f:66:bd:10:bf:6e:f5:
         61:8a:b8:ae:36:ea:de:2e:e9:58:fd:f9:ca:48:df:79:82:92:
         f0:e1:5d:7b:3a:5f:c9:00:74:14:dd:8b:d6:fc:52:bf:51:65:
         fc:2b:39:56:3b:26:35:ea:d2:f3:db:03:dd:2d:54:13:a2:e9:
         55:ba:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:16:19 2024 by rpki-client on console-ams.rpki-client.org