Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File:                     1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier:          IiP5IoBWT7vu/dt5+Ml8Tpof6P7axgJajuBz82VcZxQ=
Subject key identifier:   07:FE:37:9E:91:38:C3:F2:95:F6:5A:30:16:67:90:77:8A:A1:DD:5A
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer:       /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial:       018F4A58CFA950CEBE295220BC3A543657BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number:          115A
Signing time:             Sun 05 May 2024 20:01:25 +0000
Manifest this update:     Sun 05 May 2024 20:01:25 +0000
Manifest next update:     Mon 06 May 2024 20:01:25 +0000
Files and hashes:         1: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: UVCu48fDq+xghyY1Uv3tnxWmONYWWePX46jao5CFH8k=)
                          2: Cg9jnniW3hl5JJn2PxWRGeld7Mg.roa (hash: R1Lw2M1Vj/8FcJ6CiGZdiX2llgLpA0gjO63OfdAJeJI=)
                          3: hMOfdz7IYRfRAquZke5ca-f2lS4.roa (hash: MNCxsQPuaTgXMceVCtAdg4znJP3oml1ywl3NLZrSODc=)
                          4: n92K3tBjYXFblQmDMty-rgdYRT4.roa (hash: HMyztyd4TbGG4K4DHbgAQLNvMb4S7gFlfUR2KeVtKW4=)
                          5: r-pWZtY6PHzZUtrLVHgmYVqhibs.roa (hash: dBntIJudF5zpzD/YcnJ5cFAEa85n70cQWOiQcj1F1cU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 20:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:58:cf:a9:50:ce:be:29:52:20:bc:3a:54:36:57:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
        Validity
            Not Before: May  5 20:01:25 2024 GMT
            Not After : May  6 20:01:25 2024 GMT
        Subject: CN=07fe379e9138c3f295f65a30166790778aa1dd5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9f:43:93:c9:f2:6c:58:38:d5:e7:0c:b1:f7:
                    41:9c:e3:5f:dd:ff:86:ad:44:be:0a:d5:4a:07:36:
                    06:21:45:aa:a1:e8:59:9d:f1:d7:ef:5d:05:62:fa:
                    a8:60:e3:a2:2a:ff:d8:c6:27:91:54:b1:fb:ac:48:
                    e1:0a:36:22:eb:a2:7b:ba:de:7d:e9:dd:55:8e:57:
                    d7:e9:3c:aa:3b:1c:7f:a4:a1:57:73:f3:16:db:08:
                    f0:c3:6e:cb:a8:41:9d:b5:06:3a:e6:11:da:82:cb:
                    2f:6d:b1:9e:9a:9c:c4:6b:4a:01:22:9b:0f:33:8d:
                    a4:40:e4:ab:98:d4:ce:bd:10:9c:f0:a7:3b:59:d0:
                    54:b8:23:92:30:20:8c:78:bf:d3:c4:40:dd:91:52:
                    f2:e4:e4:16:0e:ba:86:ea:03:a1:c1:29:c1:be:6b:
                    2a:64:96:7b:1d:1e:d2:0f:c2:ae:43:ff:56:5f:c1:
                    ed:b4:56:08:25:1d:cf:0f:11:46:15:19:84:fe:1e:
                    d4:61:44:05:f3:83:2f:3c:14:0b:a7:d3:16:65:3f:
                    62:ac:ea:41:21:2d:ab:63:a9:de:87:93:b5:8c:1f:
                    5b:42:34:aa:f3:8d:c9:d4:dd:d6:b6:15:24:67:b1:
                    64:6b:b6:1d:c6:cc:85:5e:4a:90:50:80:56:bd:a4:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FE:37:9E:91:38:C3:F2:95:F6:5A:30:16:67:90:77:8A:A1:DD:5A
            X509v3 Authority Key Identifier:
                keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:83:34:a3:d5:74:9a:46:9d:8f:19:13:8e:c2:61:2b:d3:e2:
         13:99:f1:07:78:65:d0:a2:56:46:f1:8f:c7:52:ba:a0:60:e3:
         d4:0d:59:64:db:47:d1:6c:28:8e:5d:ca:b9:71:f1:b2:f6:08:
         36:14:32:88:59:5d:70:46:31:0c:32:f1:fc:e6:6e:cd:55:98:
         6a:ab:12:01:5f:6c:e8:e8:0a:c3:2b:d9:26:cd:31:49:a2:14:
         b3:57:a1:83:2e:ea:08:07:39:96:31:58:45:47:72:45:a9:b1:
         0d:00:89:ad:dc:5a:ac:92:57:b3:25:58:f8:48:b0:0a:74:b8:
         52:66:e5:ae:04:1f:ac:29:53:b9:a4:73:2c:38:64:6c:61:9f:
         48:ca:ef:7d:db:0b:56:9a:f9:62:44:2f:ff:3e:16:04:55:69:
         dc:97:f4:14:36:21:5f:77:e0:5c:70:1d:fe:0a:bc:81:cd:a2:
         14:ed:cf:f4:fe:be:01:57:dc:f6:77:70:4c:0f:95:bf:eb:5c:
         c4:42:1c:06:3d:f2:ec:f1:32:08:2b:4b:ea:cc:5d:0c:26:a2:
         4d:15:61:f8:06:83:fb:57:b5:64:11:16:92:b7:e5:2c:a9:9a:
         17:f7:f6:ed:bc:97:aa:b2:d8:0e:d2:30:3e:6f:c1:dc:07:46:
         f6:1d:50:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:00:10 2024 by rpki-client on console-fra.rpki-client.org