Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File:                     1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier:          2EqyuRYy23xT4h4DtkzNu0Ex1r56klZdH3vRXl3/IdQ=
Subject key identifier:   A0:1A:9B:43:D9:86:26:55:4B:F8:CC:89:D3:12:F0:DE:8A:D3:2F:CF
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer:       /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial:       018F5091F80A7F9E7F2F877DD2882DB80AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number:          112B
Signing time:             Tue 07 May 2024 01:01:34 +0000
Manifest this update:     Tue 07 May 2024 01:01:34 +0000
Manifest next update:     Wed 08 May 2024 01:01:34 +0000
Files and hashes:         1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: gSzlUUBuRVw+d9Rny4EPrHnNcoWtBeORhH5wuUzTz3Q=)
                          2: w4l41doPapOlO9g9eJSCO-Minek.roa (hash: yZTHBFMyar8SpQ+CU5MvMtARzW816/lkB+mqL/JrzC0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 01:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:91:f8:0a:7f:9e:7f:2f:87:7d:d2:88:2d:b8:0a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
        Validity
            Not Before: May  7 01:01:34 2024 GMT
            Not After : May  8 01:01:34 2024 GMT
        Subject: CN=a01a9b43d98626554bf8cc89d312f0de8ad32fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:54:7c:04:e0:c3:17:63:4e:dc:eb:0e:8d:
                    9b:6b:da:b5:36:db:8c:76:fe:50:9e:67:62:47:35:
                    63:ea:1a:47:66:0c:d1:f1:8a:96:f5:15:b6:2e:96:
                    68:31:f7:15:d0:03:d9:6a:41:a0:f6:c4:61:39:86:
                    b7:cd:8a:3c:2a:f7:4c:18:40:2c:96:66:14:5f:a0:
                    fa:73:e8:df:f2:dc:f5:91:cb:e5:51:2c:1d:90:35:
                    5c:d3:d5:c0:7f:bd:bd:f5:b3:98:52:21:1c:a4:a3:
                    3f:bb:98:75:fb:00:db:46:57:c7:ed:39:da:3a:40:
                    c1:5b:12:07:c3:25:5e:cc:c1:53:b3:28:db:92:05:
                    21:1f:45:f7:1b:e1:82:a2:fe:b1:df:7d:93:d1:c7:
                    af:f9:6f:5c:14:54:2f:a1:22:29:37:4d:48:28:e6:
                    07:7d:1a:0c:ac:3a:9a:44:2e:4c:22:46:5a:e1:cf:
                    59:10:6d:9a:75:ce:71:3b:b4:ac:1f:63:f4:45:81:
                    36:1a:16:89:ba:aa:fc:33:ad:b7:3d:09:a3:fd:3b:
                    48:ce:a2:2f:e0:4e:1a:46:a9:5d:ec:39:49:81:8a:
                    d8:8c:df:e8:81:01:8e:1c:c2:c1:a2:71:e7:ca:a7:
                    7d:ae:9d:1a:7c:09:f5:1b:d1:98:78:e9:63:3e:7b:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1A:9B:43:D9:86:26:55:4B:F8:CC:89:D3:12:F0:DE:8A:D3:2F:CF
            X509v3 Authority Key Identifier:
                keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:9c:7b:32:9a:45:6d:35:e9:3d:3a:79:dd:37:f0:69:f9:52:
         dc:fe:d2:13:e8:00:4e:23:6d:07:97:87:f7:70:8d:06:78:be:
         e0:d3:04:a0:6d:a9:79:8c:98:0e:b7:ed:45:34:f2:6a:47:a0:
         15:37:1a:b1:2d:01:e8:fa:89:0f:44:d6:18:bf:5b:97:0c:6e:
         68:05:86:19:be:df:54:80:26:e1:5f:87:17:66:fd:72:6a:5f:
         9e:fa:6f:07:9a:df:4a:0f:86:85:dc:14:82:68:d2:0a:0a:f4:
         f3:67:9a:b4:89:b8:0c:11:37:2b:f3:2e:ca:48:cc:57:33:7f:
         ac:25:b8:a9:02:0c:a0:ad:b1:01:ad:80:d4:29:96:a0:80:2d:
         6a:d9:12:77:94:91:b5:5d:93:86:91:da:41:f2:bc:fe:d1:81:
         1d:74:da:c8:b8:9d:fc:03:23:3c:3f:bd:97:d0:fa:58:9c:58:
         5c:f6:b1:61:82:d3:f0:d3:99:28:14:d7:95:ee:ff:d3:ec:41:
         89:d6:18:e1:a0:f7:6c:31:0b:e1:d1:1c:67:ae:59:38:5e:10:
         9c:35:6a:c6:94:5c:31:d5:f0:f6:cd:79:ab:99:bb:b3:ad:5c:
         ef:b9:6e:07:95:6a:ac:9d:8d:d6:f0:e9:1a:9e:c1:a9:4a:6c:
         f5:42:67:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:22:49 2024 by rpki-client on console-ams.rpki-client.org