Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File:                     I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier:          mArY36ZUxMcKoRbeip3YEBvgjY6Nrlg+q/pqGSgfcQY=
Subject key identifier:   EF:72:5D:47:01:F3:EB:70:69:61:F1:4F:FC:A1:90:21:61:B6:48:39
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer:       /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial:       018F4CB4D88472F20784F7D1040F8EEA29FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number:          115D
Signing time:             Mon 06 May 2024 07:01:11 +0000
Manifest this update:     Mon 06 May 2024 07:01:11 +0000
Manifest next update:     Tue 07 May 2024 07:01:11 +0000
Files and hashes:         1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: WNVHEfgsG9e7QU6WMoMi0fU4S98UEV1wx3rC48kYX1g=)
                          2: R0W0NRhjch8zxiT9-2IcDl1o32o.roa (hash: hbu/2es9dHAHS/74WPwDN8M95BwEtelbbOZfGujOlxU=)
                          3: mNLrIEHX0Gcvqv8AbQC2QUsUS40.roa (hash: ROs4k8Hbe4MIAeI4Fp4Ta/y7MBRtKXabFY/5maoND8U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b4:d8:84:72:f2:07:84:f7:d1:04:0f:8e:ea:29:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
        Validity
            Not Before: May  6 07:01:11 2024 GMT
            Not After : May  7 07:01:11 2024 GMT
        Subject: CN=ef725d4701f3eb706961f14ffca1902161b64839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:04:f5:45:03:25:68:33:6e:d4:b9:d3:3b:
                    29:f6:cd:a4:76:8f:cb:cc:f2:f4:47:12:a4:74:4a:
                    6e:6a:d3:d6:6b:c3:01:e1:ef:c7:c1:d7:98:fa:4d:
                    3f:ea:6f:14:70:46:d2:fb:9c:69:14:99:49:a3:a3:
                    37:6e:c7:70:39:db:5b:53:c2:00:00:03:41:c0:55:
                    c4:c0:97:c2:69:7e:e5:6c:79:10:d3:0d:9b:04:ca:
                    9a:88:ed:0d:e3:4d:28:0c:46:39:23:87:a7:16:26:
                    ea:91:57:5a:e6:5f:d1:40:75:f1:ae:e9:d0:ab:25:
                    3a:94:c6:13:cf:dc:f8:7e:39:4f:37:18:4c:f9:3f:
                    52:10:4f:cc:e1:0e:67:7d:73:ad:c5:be:90:88:e0:
                    b7:28:a3:11:6c:5f:8e:35:a4:07:00:ef:d5:b9:72:
                    20:f1:86:16:dd:81:ae:39:07:62:c7:49:d1:bf:a6:
                    19:7a:83:a6:b4:9c:b1:1f:ae:78:c0:3f:dd:c3:0e:
                    9f:b4:2a:72:05:1a:05:e6:85:2e:3e:73:5e:7f:9a:
                    b9:1a:8f:b5:59:cd:5a:be:4f:e8:2e:ea:bc:53:8c:
                    c8:78:09:17:ac:43:5b:dd:c8:1f:cc:a4:ad:3f:c8:
                    0d:62:4f:8c:76:22:c7:cc:33:81:95:ba:48:aa:b3:
                    3e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:72:5D:47:01:F3:EB:70:69:61:F1:4F:FC:A1:90:21:61:B6:48:39
            X509v3 Authority Key Identifier:
                keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:ce:3d:b0:6a:1c:3a:62:cf:02:3d:2e:9c:e7:44:cf:b1:
         58:26:23:7c:73:d9:f9:4b:79:4e:8d:21:05:33:5d:87:10:5d:
         4c:83:55:73:05:86:90:2b:26:6d:31:35:eb:6e:fa:3c:78:7f:
         0e:8b:e5:d2:f6:10:3e:53:87:69:9c:e4:ac:f4:11:6e:b2:a8:
         80:4d:27:98:27:7a:ad:28:e1:b7:98:19:cb:73:ff:fe:f1:c6:
         24:13:60:f1:38:2c:86:c6:3c:88:1d:8d:28:5a:a2:f0:73:8d:
         53:71:32:72:bb:ea:fd:20:9b:64:ef:8f:21:4f:2a:c7:5f:b2:
         4b:c8:e7:a0:ed:20:7c:25:11:ba:74:28:11:e8:ba:04:3e:6a:
         6c:c9:f1:09:a6:03:68:86:06:a2:3e:5e:ba:2d:c9:4d:d5:82:
         96:90:b9:a1:c4:57:63:03:bc:b7:83:f4:be:72:f8:a8:f8:db:
         95:96:74:db:e9:b2:f0:76:e4:52:0d:08:fa:25:22:61:84:12:
         1a:fc:21:2b:cd:e5:72:fa:4c:40:5e:3d:6d:d1:75:71:12:2a:
         2c:43:9c:45:06:43:2e:11:25:56:bd:f7:4a:1a:5c:48:e5:e2:
         df:fa:10:32:fb:35:89:0f:36:1e:4e:92:34:28:9c:3e:31:c6:
         f3:4b:39:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:11:53 2024 by rpki-client on console-fra.rpki-client.org