Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File:                     4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier:          6Lf502iLYkJnQeQgCmSnAsoafqNz35RCh3EOkr8IQYo=
Subject key identifier:   11:19:22:98:B0:72:E9:08:DC:AD:4D:49:11:03:9C:79:76:82:51:AE
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer:       /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial:       018F5392F189E066031D23EE76B69CFC4284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number:          0D94
Signing time:             Tue 07 May 2024 15:01:29 +0000
Manifest this update:     Tue 07 May 2024 15:01:29 +0000
Manifest next update:     Wed 08 May 2024 15:01:29 +0000
Files and hashes:         1: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: kLdrLvA+3QHD6KC8++K0PVWGm/8cIgNjz6CE7emSqTk=)
                          2: GInx4-Q5UHml9WjZq0iTTgFrsek.roa (hash: 2CxAijRMnPGAF2AHISjE4BzVZPvPqkdX+udUN3OGaM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:92:f1:89:e0:66:03:1d:23:ee:76:b6:9c:fc:42:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
        Validity
            Not Before: May  7 15:01:29 2024 GMT
            Not After : May  8 15:01:29 2024 GMT
        Subject: CN=11192298b072e908dcad4d4911039c79768251ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:d7:a7:ad:5d:d7:16:63:ec:91:9e:6d:0c:
                    1c:b2:67:e4:f7:bf:14:28:a8:fd:8e:90:21:24:e5:
                    c6:fb:ef:36:b3:1e:3b:26:43:f0:89:3e:35:c9:c4:
                    53:98:8c:a0:ef:ac:47:41:e0:22:3d:88:f1:97:d8:
                    e6:3a:82:e5:eb:7e:bb:76:ed:98:94:bc:5d:82:04:
                    f9:23:54:83:10:85:1e:37:81:cb:ae:fe:ff:f5:85:
                    cc:c9:9c:bc:1a:1e:4b:a3:fb:06:b5:b2:02:e4:48:
                    2c:c2:8c:8e:a2:b7:4a:1a:c6:43:64:19:f8:a4:57:
                    69:63:26:ee:0c:17:2b:a2:0d:9e:84:3e:bf:f9:1b:
                    d5:ea:d3:38:e0:2e:cd:0c:71:45:af:de:7b:33:35:
                    db:3e:06:61:3c:5f:1f:58:e0:88:54:5a:26:c0:57:
                    e0:a7:2b:10:7d:18:bd:96:f2:98:38:17:80:ea:68:
                    4b:80:89:96:62:a1:7f:7a:c3:7a:85:33:7c:3e:47:
                    20:df:20:61:31:20:80:f4:52:43:5b:24:27:c7:e8:
                    ab:6d:8b:49:37:57:5c:a0:e3:fa:a8:72:6e:c4:4b:
                    df:19:08:bd:b7:a0:bd:e8:4d:ac:ee:38:9f:7a:18:
                    c6:1e:40:b3:4f:62:8f:5f:19:64:99:5d:c1:7a:21:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:19:22:98:B0:72:E9:08:DC:AD:4D:49:11:03:9C:79:76:82:51:AE
            X509v3 Authority Key Identifier:
                keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bd:71:42:23:a2:31:9b:bf:dc:ec:eb:24:19:97:17:a5:e1:
         ac:57:e3:f1:fc:62:3a:59:67:d4:54:9c:66:1e:39:d0:af:f6:
         4f:3e:50:1c:ef:a6:08:3c:60:20:df:84:26:96:fd:bd:5e:c7:
         c2:af:83:51:0e:8b:30:5b:f4:f7:dc:11:48:46:f6:6f:92:61:
         91:6c:3b:33:59:8f:7c:6d:40:f0:59:be:4b:79:7d:ea:19:56:
         d2:65:f1:d9:71:85:57:a0:2a:29:60:8d:4d:8c:be:60:1f:08:
         d5:03:2c:c0:f1:7e:b0:bb:da:5a:44:8f:6e:5a:70:f3:53:a1:
         2f:bb:54:fc:47:51:d0:fa:db:a8:e1:a1:64:72:31:2a:ee:33:
         da:58:d9:57:7d:de:a6:7b:d2:a4:34:c2:b7:66:dd:28:14:41:
         0f:81:f3:26:f6:18:1d:dc:ef:a3:58:6f:8b:20:da:8f:12:96:
         4f:35:5d:7d:c3:ee:bb:de:a0:fa:c1:d9:b5:26:f3:8b:ed:a7:
         c6:8a:a6:0b:7a:58:11:26:fa:a1:e2:d2:d8:0d:a8:61:d6:fa:
         f7:bf:b7:5d:bc:4f:64:3a:4b:db:4e:f1:16:b0:d6:17:e0:f7:
         de:ac:b4:ca:48:18:e5:1f:1e:94:7a:50:7d:9e:af:8c:bd:33:
         df:77:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:35:34 2024 by rpki-client on console-ams.rpki-client.org