Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
File:                     Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft (raw, json)
Hash identifier:          KgM3Uz3bPXA3IUYRsriFbncU+D/gFVA8ePEavDq1UeQ=
Subject key identifier:   01:42:40:34:71:AB:C8:0F:74:F5:B7:87:0F:81:51:23:57:E4:16:9D
Authority key identifier: 21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
Certificate issuer:       /CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Certificate serial:       018F8824648009A95F7CEE1E70F482501DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
Manifest number:          013B
Signing time:             Fri 17 May 2024 20:00:37 +0000
Manifest this update:     Fri 17 May 2024 20:00:37 +0000
Manifest next update:     Sat 18 May 2024 20:00:37 +0000
Files and hashes:         1: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl (hash: auv/3YV/YGoAMaow6OU+d9rxmEfuPOxek8r47rpwb94=)
                          2: r_eUJ3JQd8oFpunLMpezsuG47ZY.roa (hash: XV+mSO/EmB23qlGkGBMJqvyQ8NflNQ1qKi509eDKCU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:64:80:09:a9:5f:7c:ee:1e:70:f4:82:50:1d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cf53481d133bacf527868dba1b3763e3d6dda7
        Validity
            Not Before: May 17 20:00:37 2024 GMT
            Not After : May 18 20:00:37 2024 GMT
        Subject: CN=0142403471abc80f74f5b7870f81512357e4169d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:a9:7f:81:28:8e:c0:76:d3:08:82:cd:42:
                    3b:c5:fe:ea:cd:9d:37:69:87:20:3f:8e:70:e2:83:
                    3d:fd:36:af:63:42:d0:69:0c:cd:31:8f:46:b0:ca:
                    28:61:1f:60:ac:90:aa:fc:c0:9a:b8:71:91:7b:3f:
                    38:59:88:8d:c7:03:eb:ad:a9:5d:71:3a:77:c5:f4:
                    3e:4f:02:2c:92:a8:19:e9:b2:75:3a:fe:a8:24:f9:
                    9a:dc:8d:91:5a:99:44:f4:0b:1c:1b:79:95:9f:78:
                    90:50:77:1e:d5:fc:1a:de:9c:48:b9:0e:e4:e0:e4:
                    4c:d8:25:7c:86:80:2b:1f:5a:20:0c:12:9b:8b:e2:
                    cb:7c:62:f0:ca:28:54:a7:36:42:5e:75:6f:1e:ba:
                    fc:3f:5f:7d:14:87:67:19:b1:33:a4:dd:27:b1:14:
                    eb:50:d4:d2:9b:ad:22:02:88:8a:ec:3d:00:cc:6c:
                    28:22:c7:ed:c0:f6:a4:ef:6e:9c:ac:9b:d7:f7:e7:
                    fa:e2:32:c7:f7:25:81:00:7e:bf:ef:4c:2b:ca:74:
                    83:9a:6f:70:ac:90:a1:fc:83:d5:c8:db:e6:e9:74:
                    28:5d:18:89:35:fc:39:33:c1:2a:1c:27:6f:d4:e0:
                    e8:84:2b:ce:d6:73:93:ac:27:14:86:98:35:16:df:
                    24:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:42:40:34:71:AB:C8:0F:74:F5:B7:87:0F:81:51:23:57:E4:16:9D
            X509v3 Authority Key Identifier:
                keyid:21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:94:53:79:46:68:49:5b:0c:fd:df:63:07:67:9a:9b:1f:32:
         73:ba:13:2b:39:5b:59:bc:42:1b:fa:0d:56:b7:86:bc:7a:0b:
         c1:1a:61:c7:3d:b6:1f:07:18:23:92:2c:80:f6:b1:9d:79:76:
         64:ff:96:ec:1b:76:b6:61:0e:6d:f2:7a:36:8b:20:fe:72:b1:
         81:1c:85:9d:0a:05:15:b6:c4:c0:6c:45:95:5a:17:14:87:ab:
         42:c2:88:4b:c8:40:2a:0f:fd:f1:0c:08:df:80:88:a6:27:ad:
         01:63:b2:d7:24:30:cb:47:bb:0f:88:47:17:18:2e:cd:55:4d:
         c7:06:1d:19:89:3d:ac:67:f9:58:37:7c:85:3a:75:b9:ab:a2:
         1e:53:59:02:91:c8:c8:e0:9a:49:8e:ad:33:16:12:a6:14:f6:
         63:da:a2:50:15:47:d0:9d:46:f4:37:11:ec:fa:bb:72:47:b5:
         a9:4f:b8:8e:66:d6:a8:cc:e9:d4:f4:bf:4c:e1:02:49:9c:1e:
         61:ae:79:29:42:fa:cf:89:ed:14:6b:66:75:9b:e5:86:90:d1:
         e2:cf:26:64:7a:dd:ce:fb:e4:58:ae:6a:34:36:a4:41:57:55:
         70:e6:d2:04:b3:62:70:a6:9b:1c:03:60:4d:20:c5:aa:ec:0c:
         4a:cf:05:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:11:48 2024 by rpki-client on console-ams.rpki-client.org