Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File:                     1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier:          phJ/w5XDjBVNZAatabjcEIflmMB7UZWVSunLTlwVaJU=
Subject key identifier:   A3:1F:81:1B:7E:A1:86:08:C9:A2:CA:B8:4F:7D:F2:9C:BC:48:79:DC
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer:       /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial:       018F41C4EB746C21F7D6A9FED34C94834239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number:          1159
Signing time:             Sat 04 May 2024 04:02:55 +0000
Manifest this update:     Sat 04 May 2024 04:02:55 +0000
Manifest next update:     Sun 05 May 2024 04:02:55 +0000
Files and hashes:         1: 1-P-lJQpEsB9pHnAhIK0be4sn7H4.roa (hash: s+sPM1YPcW/Ci52SEJoTuZtphliTaSRq0Rp/prQVLBo=)
                          2: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: sEN7n8hmMTQLWvghpuTLN1dEgKHTB4ZDEG11BcWOEPE=)
                          3: suxbfBDv6U8os-0LcyJZBiWAHLE.roa (hash: 9NzMxgKgEjY6HbaCUb2/XOqHlKbZoxItCK9Pj4GZGLM=)
                          4: u7kZEmPkzeH7ogOl50Q6OMIhQSg.roa (hash: HAnF37F+llBFg7vSn5VarmDOyWPkjATVz1ZhBYurftw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:eb:74:6c:21:f7:d6:a9:fe:d3:4c:94:83:42:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
        Validity
            Not Before: May  4 04:02:55 2024 GMT
            Not After : May  5 04:02:55 2024 GMT
        Subject: CN=a31f811b7ea18608c9a2cab84f7df29cbc4879dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:58:27:dd:3f:37:04:66:eb:f7:21:e1:4f:
                    dd:00:73:7e:a3:e7:15:6e:6d:92:bb:f9:93:50:82:
                    8e:13:ef:ec:ba:2b:21:8c:a3:5d:5f:f6:c4:be:a4:
                    23:75:c1:e6:d6:c2:fc:6f:0e:2b:c7:08:8f:65:41:
                    27:e7:e5:e6:70:1a:c5:55:87:f5:7b:f5:36:78:b0:
                    2f:dc:d2:a0:f2:41:be:c0:f9:f0:b4:e2:e5:75:72:
                    25:9a:60:98:6a:e9:4f:81:e1:b4:a4:aa:a6:be:46:
                    1a:7e:3b:3a:44:e1:b7:ae:31:64:82:d4:17:7d:2d:
                    d0:33:b6:f4:6b:ce:4e:73:9b:38:13:6d:99:6f:a6:
                    5c:f1:16:a4:8e:8a:6a:a6:56:23:86:a1:bc:c0:5f:
                    f2:5e:0a:da:08:b9:f1:87:37:a1:fb:c2:fc:04:a0:
                    29:f4:1e:de:e5:77:26:d3:a6:2a:f5:dd:64:75:06:
                    8a:0f:91:3a:a7:31:b9:6a:77:73:b0:bb:1a:62:3f:
                    f4:b2:0f:1b:e4:3e:34:9d:0b:d1:89:5e:78:e8:62:
                    44:bd:14:9c:e1:31:64:f7:66:99:5b:b8:6b:26:f6:
                    b6:52:b5:4a:97:0b:98:34:a6:b6:7a:bb:73:bd:4e:
                    33:f2:a9:0e:e1:9d:7d:1c:bb:0d:d8:d6:d6:8d:45:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1F:81:1B:7E:A1:86:08:C9:A2:CA:B8:4F:7D:F2:9C:BC:48:79:DC
            X509v3 Authority Key Identifier:
                keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b1:0a:a2:50:81:88:2e:dd:74:b3:09:34:d8:cd:ca:96:37:
         e4:ce:6b:66:2a:0e:c5:50:ad:66:ee:2d:20:85:cb:55:73:3a:
         bc:c1:36:c0:ba:a8:29:11:d2:f4:56:07:ea:6b:29:9d:b7:57:
         34:35:dc:7f:49:f3:fc:72:4b:bb:90:24:18:f7:12:3a:41:26:
         02:70:5a:53:b4:02:e9:44:c3:06:75:92:53:db:0f:7b:a3:50:
         cb:4d:f6:91:6d:f8:e2:12:58:9a:f0:4d:35:0b:ea:6e:91:73:
         a4:3d:15:91:17:58:f1:2f:27:a4:25:7f:c6:1a:b6:8a:f0:aa:
         4e:67:ef:17:df:a5:fc:f6:44:79:29:82:66:16:ae:0c:59:f4:
         8f:a0:24:2b:9f:cf:35:4c:02:8c:90:73:c7:90:d6:ba:ee:ee:
         b6:55:51:43:f8:1a:89:ac:5b:3e:83:8e:8a:6f:53:68:1d:56:
         5b:da:ac:86:89:da:2f:e0:6b:e2:40:4b:56:6a:59:89:5a:5a:
         ac:91:b7:4d:1c:f6:e6:f5:41:65:a7:74:e2:32:7a:df:c6:29:
         8a:c4:33:b9:50:fb:fa:03:c9:b9:f0:de:42:0d:62:6e:ed:c2:
         53:97:57:9f:25:e8:e6:0b:89:01:01:f0:53:a2:71:f0:ea:64:
         4f:27:f6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:35:17 2024 by rpki-client on console-ams.rpki-client.org