Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          EOfO94lTCYMBK0rZ4DpKTqHjVtbVjJEwJdOlziTIMOE=
Subject key identifier:   6E:8E:9F:18:AE:44:98:DF:7B:8A:A0:9B:B5:5B:28:63:A9:E3:D3:4A
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       018F5400BC6BE815B9F53C88BDFD56C74416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          1168
Signing time:             Tue 07 May 2024 17:01:25 +0000
Manifest this update:     Tue 07 May 2024 17:01:25 +0000
Manifest next update:     Wed 08 May 2024 17:01:25 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: OpuBGJgx2/pS9cc41uwAj0jkSSO2nSN6jAmEcDH/L9k=)
                          2: PnbCsSNznRRluDBSBy4v2MzxIYM.roa (hash: fIa5ZMZSV5RjWOp8V2cbGfywfjHHa5cxoXympH6gqE8=)
                          3: fgA8eG8OiiUwOlpIAfVqbyFIGUo.roa (hash: QVenHOakNN7iaPQuosh7/Do740EZOWuf7xHyLzedZ4A=)
                          4: kdT3CWNf0iL3GwkkPlfxY3Bbydc.roa (hash: QNIgV4InOsH44bcL0rILLHN85HUzOrBdPfOUMs+Bz6Q=)
                          5: qZgq5PEruZKDXlqWF1xLZ6Y5UKs.roa (hash: 8A4ep0EEhUT4nPG2srtH0UdmXwR5nnzVhFIc5NbOWEs=)
                          6: zD0j8OiV2NvUAuYsWx_KiPhwiAc.roa (hash: QCIUxLhfAXS4VKNcKKZcAlOFpNWNCTKnA4v7BQ/4wp0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:00:bc:6b:e8:15:b9:f5:3c:88:bd:fd:56:c7:44:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: May  7 17:01:25 2024 GMT
            Not After : May  8 17:01:25 2024 GMT
        Subject: CN=6e8e9f18ae4498df7b8aa09bb55b2863a9e3d34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:29:ee:17:e1:73:f2:ae:bd:f5:80:4e:c6:3d:
                    d0:cc:85:ac:7e:45:a8:88:59:04:29:0f:d9:2e:18:
                    67:a9:e9:e7:ea:13:f1:9b:d6:b5:99:b8:a4:40:2e:
                    dc:d8:99:6e:b9:c3:b4:d1:ae:a0:13:ee:a2:c6:48:
                    f5:84:59:97:8c:50:ec:26:96:62:3b:0e:cb:63:53:
                    7b:68:80:44:86:db:26:ac:a7:ce:1f:8c:aa:90:2f:
                    7d:d6:bb:e2:e2:fc:61:42:0d:a3:66:db:23:c4:7b:
                    f4:0b:54:3f:73:d9:d9:61:80:45:cc:4c:ba:84:6f:
                    6a:bf:54:92:db:b0:f4:00:f7:a3:cc:d2:41:02:07:
                    f3:41:de:87:2f:47:b4:dc:07:bb:43:c7:67:9e:ea:
                    f3:a9:24:81:8d:af:d2:d5:bc:de:60:44:3d:4e:10:
                    c9:9d:e0:b8:f0:22:aa:e2:35:bb:ba:fe:a0:4d:e6:
                    22:98:59:33:71:92:27:a1:00:5d:e3:6a:2d:86:53:
                    a5:04:e2:ec:52:4e:b0:a5:f9:08:b6:5d:d0:86:25:
                    e8:39:bf:3d:55:b5:b4:b3:67:39:48:5f:89:8d:50:
                    93:34:92:de:72:6f:73:73:95:12:61:d5:eb:54:43:
                    27:e0:f6:3e:c9:1d:9a:83:b9:a7:b2:c1:48:20:e6:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8E:9F:18:AE:44:98:DF:7B:8A:A0:9B:B5:5B:28:63:A9:E3:D3:4A
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c1:39:73:71:a5:fb:3d:20:ca:fe:ac:bf:56:5a:76:10:a6:
         78:14:7e:9b:5d:bf:aa:e9:ab:a3:23:ac:cc:79:1f:81:98:6c:
         1e:0b:91:b9:98:4e:00:46:89:58:4c:c8:cf:04:74:04:cf:b8:
         10:72:ee:f1:f4:9a:87:d6:8a:ac:87:8a:92:0a:a5:56:b5:ec:
         78:7f:29:ea:60:12:61:de:86:17:02:68:16:4e:f4:54:54:f2:
         55:9d:19:99:68:86:eb:7e:c7:71:7d:94:23:f1:56:06:8f:4e:
         d4:bb:37:54:aa:4f:1e:75:97:75:b0:6f:b9:4c:20:18:68:dc:
         b4:53:08:6a:a7:87:34:97:28:7f:37:02:2a:8f:7d:63:91:ca:
         8d:0c:d3:20:52:2a:97:27:b9:8e:f7:ee:f0:b3:82:ec:46:ff:
         04:ac:87:77:0c:65:2a:c5:3a:df:73:4a:df:21:18:48:13:45:
         3a:6a:59:25:28:4c:ba:16:4a:02:5d:7f:16:ee:ea:34:5b:f7:
         30:8c:8d:4c:b5:32:95:55:93:b8:44:34:46:7f:d3:35:16:be:
         d2:aa:92:2d:76:0a:90:5d:c1:18:d3:5c:ab:6e:e3:87:4f:70:
         c5:8d:ea:3e:2d:3c:1f:09:0f:3f:c6:03:fa:38:e0:9e:6f:cb:
         e3:db:7a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:38:04 2024 by rpki-client on console-ams.rpki-client.org