Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File:                     ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier:          OCf+BCizejNOEa49tyGBrzzjLBxEDhnAMwzbblcIDxA=
Subject key identifier:   48:3D:5A:CE:C1:E0:43:36:60:FD:97:82:CF:4F:FA:BD:24:7E:82:AC
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       018F23EF2813EDBDBECE80F1BF41076B96DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number:          1166
Signing time:             Sun 28 Apr 2024 09:00:26 +0000
Manifest this update:     Sun 28 Apr 2024 09:00:26 +0000
Manifest next update:     Mon 29 Apr 2024 09:00:26 +0000
Files and hashes:         1: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: aLWOgdpshJZYGS4YqHgmTkn4/cmCRBuarWq7y0Yp67E=)
                          2: Hb4yv6y38Cek8o1Insig8TZYe7s.roa (hash: TDSxDNH1oNsDc3XHBFm0bu4yKLzLpHmUSwvzdfPz9tA=)
                          3: RKwnXUtyV_J-ELUAzZf1CR-908c.roa (hash: Zwzxq5Ivi69JTdDChsr6PALySj4VLJB1VKgHyVEmGsY=)
                          4: WdaIr-CVhcMIdbM-SuOVSm7er5M.roa (hash: ywpGd+gFKEwmFL8RERDkvjnkT8k04VvAC1VukzBfKT0=)
                          5: iggqa0ns_KLEWTN6S_0dUW9MqgE.roa (hash: pBuTaOstCCtRE8aISyp+fT7tn28eJcq4TaJQEXaNl0o=)
                          6: lhsdwEfoDvs1fjVGF8b2AidJik4.roa (hash: vi/+4TMbQHrVy1VdjS3z0nNRbfHFPEbA+99I/N5SLjo=)
                          7: m82VyEkW6fHi0OaYvMCvLjBDmhE.roa (hash: zK0ltneiNVoaR7T5+wRdC11ULapghbwzZX/BOYhaPVY=)
                          8: wBPtIQBAAWr81L1dBYt8-0ymg-4.roa (hash: jGDcpscd5UL40we3eIXzYgM0U7tJgwOBhtdDob57Ur4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:ef:28:13:ed:bd:be:ce:80:f1:bf:41:07:6b:96:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Apr 28 09:00:26 2024 GMT
            Not After : Apr 29 09:00:26 2024 GMT
        Subject: CN=483d5acec1e0433660fd9782cf4ffabd247e82ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e3:09:ed:6b:46:20:61:83:c3:72:4f:e2:72:
                    6e:67:ed:6e:7e:ca:d5:50:3b:b4:e9:85:97:20:12:
                    1c:fe:8f:f7:60:26:ab:0b:45:40:bb:8b:af:78:8c:
                    00:58:57:cb:93:47:7a:f8:a7:84:fb:21:56:5d:aa:
                    34:3b:cf:16:5c:56:b5:45:19:f1:88:ea:52:14:3e:
                    68:42:d2:46:37:69:b4:64:70:f3:4e:f3:6b:a5:f0:
                    d4:dd:86:a0:a8:80:ac:0e:fb:02:02:5b:51:1c:d0:
                    f3:70:21:ed:82:40:38:65:2f:2d:34:52:c0:31:d1:
                    58:ed:06:87:2c:70:0d:a6:eb:26:a3:76:dd:19:48:
                    87:80:51:3e:cf:26:21:c5:1a:5a:f0:68:65:77:b2:
                    ed:f3:62:a4:8a:70:08:96:fb:f6:45:b1:77:8a:fa:
                    97:33:8d:a1:4e:ec:99:2a:52:f4:4c:cf:5b:f0:d0:
                    7d:57:6e:01:ce:02:92:59:e4:1a:4b:06:5c:93:dd:
                    70:08:01:0b:8c:7f:9e:60:6b:84:34:f6:c2:8b:56:
                    16:0b:19:6a:9b:1e:2a:c5:31:7b:35:f4:74:d6:30:
                    0d:42:c0:10:04:5b:8e:08:69:06:79:03:d8:11:ac:
                    72:fc:b0:87:3b:c6:9f:a2:4b:f4:92:1b:b1:97:38:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3D:5A:CE:C1:E0:43:36:60:FD:97:82:CF:4F:FA:BD:24:7E:82:AC
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:d4:ec:a9:5b:00:e1:e6:67:67:76:0e:7f:39:e2:7c:22:
         31:5e:55:48:f2:8b:2e:bd:58:3e:47:03:ba:db:b4:dc:cf:3f:
         c7:a5:9a:62:23:e2:2b:c8:23:b2:3f:cd:06:e5:3c:1d:7b:b5:
         48:8b:5b:a2:c0:21:5a:ee:37:ca:81:fa:1b:a1:98:6b:96:36:
         15:14:64:f1:ed:44:40:d0:94:dd:f0:89:e3:d6:66:f9:cb:35:
         4e:d8:ec:57:92:5c:be:12:3c:5f:21:2d:e6:94:0b:85:b0:48:
         b0:9d:4b:f1:51:a2:a7:dd:47:6b:23:9d:fd:00:03:e4:68:81:
         6e:ac:eb:ea:29:de:8a:41:df:de:ec:11:59:8d:c5:0e:79:3d:
         ad:97:ec:c2:4e:46:44:26:3c:6f:55:50:bc:0b:81:c4:a9:60:
         66:e3:65:3d:45:41:60:b0:85:2a:7a:bb:c5:2d:e9:08:3f:07:
         2d:2b:dc:60:a1:82:ef:3e:ed:4a:4f:19:a8:db:a4:ea:1d:ac:
         b5:06:02:60:50:e9:56:71:99:7e:e2:7c:9b:84:1f:6e:0a:78:
         8b:a2:f0:ea:c7:f3:2a:b8:29:30:e1:4c:f2:f9:39:82:3b:4c:
         f2:2f:40:62:03:b8:56:92:d0:92:87:6c:87:9e:14:01:22:14:
         a3:a6:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:12:24 2024 by rpki-client on console-ams.rpki-client.org