Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File:                     9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier:          ipVtbwq+EV3w8UKNWmk6XSwrpNooWphPJxFU3ApTU7g=
Subject key identifier:   AE:2D:5A:BF:82:C0:58:A6:EA:E0:01:F9:05:FF:F1:34:F4:C5:68:E9
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer:       /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial:       018F3FD7935A2DF49781889A70F36F139FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number:          1155
Signing time:             Fri 03 May 2024 19:04:03 +0000
Manifest this update:     Fri 03 May 2024 19:04:03 +0000
Manifest next update:     Sat 04 May 2024 19:04:03 +0000
Files and hashes:         1: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: Pkvsb9rLWY/LgUCyOv5WoGuWdoiBzinDa8/ZEdWfa4o=)
                          2: n5eXbGkH_aw5CuhL68ZyMaGN1lk.roa (hash: WLq282Jqhc+uAPUDeMFGUJGmnhv3DngBSxbKUoUKzj8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d7:93:5a:2d:f4:97:81:88:9a:70:f3:6f:13:9f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
        Validity
            Not Before: May  3 19:04:03 2024 GMT
            Not After : May  4 19:04:03 2024 GMT
        Subject: CN=ae2d5abf82c058a6eae001f905fff134f4c568e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:92:db:34:c1:66:c8:d4:a7:e9:df:b9:51:
                    db:07:15:88:46:b6:2d:09:fd:e5:71:c1:3f:75:41:
                    7a:a2:2e:15:6c:7a:1e:f1:2b:b6:ad:ea:62:97:b4:
                    8d:36:e7:37:eb:aa:f2:cb:70:86:1c:a1:ea:10:06:
                    c2:97:2c:f2:78:06:b1:fd:79:18:f4:d5:5d:c9:ec:
                    a7:d9:45:d8:f9:1b:88:5c:48:47:05:d5:a1:b0:6f:
                    84:26:04:0c:ae:37:03:82:42:7e:18:56:5c:e0:85:
                    fb:d6:ff:72:88:da:15:5c:d7:54:33:5a:46:27:ed:
                    2b:ad:a3:d3:22:bf:64:87:b0:aa:0d:73:8a:e8:03:
                    d9:db:e0:f4:95:bd:da:7f:4c:11:99:b9:3c:2e:47:
                    34:98:d9:e6:03:04:ec:8c:7e:b4:89:3f:bf:8e:30:
                    56:27:02:17:95:93:0e:d6:0f:07:66:b4:23:ee:58:
                    d3:62:ba:e8:61:03:69:98:47:c8:71:85:55:02:4a:
                    d1:88:2b:ab:72:81:2a:17:83:d2:f1:fa:06:1c:ef:
                    4a:6f:43:76:ec:85:f8:93:bb:56:08:67:1f:5b:f0:
                    02:f9:9e:e5:dc:61:ec:99:90:1d:9f:62:a9:39:9b:
                    95:95:49:09:22:1c:12:fa:82:6c:7a:e2:0f:11:4c:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2D:5A:BF:82:C0:58:A6:EA:E0:01:F9:05:FF:F1:34:F4:C5:68:E9
            X509v3 Authority Key Identifier:
                keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:13:72:ba:86:d8:5e:3b:50:b3:6d:4d:86:99:90:16:27:a8:
         3b:b1:98:5f:55:61:81:da:08:5a:25:bc:71:bb:01:39:b9:30:
         bb:10:ed:5f:8a:9d:b6:52:5a:03:20:0e:fc:ea:41:cb:10:77:
         20:ee:d2:3f:5e:0c:55:73:c2:bb:f6:b3:1c:d3:a6:4d:c5:99:
         c2:4a:5e:db:bf:da:bf:38:16:9b:3c:d3:e2:4d:eb:87:ea:79:
         27:1f:62:1c:8e:d2:58:92:6f:bb:50:2f:6f:14:3b:40:e2:a4:
         81:58:e6:9d:38:cd:c0:d7:bb:09:00:a1:f7:e6:8d:a1:2b:58:
         cf:53:03:07:af:a9:c9:af:c6:ab:d7:ec:43:f2:45:ed:ca:cb:
         e0:3c:88:22:9c:51:fc:4e:de:0e:f2:69:5c:64:6e:0a:1f:bc:
         ef:95:61:1e:06:df:6d:ce:1a:6c:47:dd:6b:79:9f:49:3c:d4:
         c8:df:ae:11:32:0a:35:64:55:d7:d0:fa:ae:62:96:ba:8f:b5:
         4c:da:cc:e5:82:28:9f:8e:2c:2a:ae:93:39:98:a4:32:b4:05:
         ed:2a:d7:72:63:c0:9a:5e:8c:89:d1:e7:97:90:44:bf:68:11:
         bd:8c:5e:79:9a:7e:18:b9:57:a9:58:bb:05:12:86:2e:a8:ee:
         cd:f7:25:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:43:15 2024 by rpki-client on console-fra.rpki-client.org