Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
File:                     1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json)
Hash identifier:          l1pqOOXJBBsZmkDb18gOysaRpTVsh1IEtl0+N6OLqoo=
Subject key identifier:   54:EA:66:45:75:32:1E:E2:00:5C:C5:6E:4E:79:D7:3E:BD:01:B9:EF
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Certificate issuer:       /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial:       018F324FCD616EFD03BFC4AFE94849F16EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
Manifest number:          1151
Signing time:             Wed 01 May 2024 04:00:41 +0000
Manifest this update:     Wed 01 May 2024 04:00:41 +0000
Manifest next update:     Thu 02 May 2024 04:00:41 +0000
Files and hashes:         1: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: P9qyM+bnik8lXiX2Et0hxztT2rF2zM2NuFmgLUvnK74=)
                          2: 2Nva2FWD0XRAjgHuXYdCRG-0-4U.roa (hash: kuNM1yCLCQOYKVQAFIYZZ929wa67STu2M6a2vT7W/88=)
                          3: A-R9o5MjO1MB-9IoZuCaOUnrsFw.roa (hash: FC7UgYDp+rT/b+xFm6MMd1NzJFKYZ+XASr6GFfvO0OU=)
                          4: ABd1WLeyANCdcObOqJSodjnIA0s.roa (hash: 3pAzqwXQ8P22wv3Qqj+hpdnqsShpOXmnq4LbfpnOstw=)
                          5: DFF6e62bbHxPwsDaAfko-o7Ii5I.roa (hash: EgGP5Xm9YJx+FtN7tFlUdOH/ecyeGylrP17I+nAAEr0=)
                          6: V8J01GJ5zIM4veiDRHZy_TKM1H0.roa (hash: dlv88++Gq04DpOT/bLoD9EKj+qY1adV+MZpyrTkC8zU=)
                          7: YGjVS2FHQ8eHsumhPKDAhP8_o2U.roa (hash: ULZ/VZg/v1d2ccw++Kz1L9Aj0Vu6BGOtC8VoCX0fU7g=)
                          8: vv9K_YYYAn9YDj5HRyfXIXI8gv4.roa (hash: k+PJ2FicWcLKKJpMn5+vbadH3hMuSJVDkQ8BxcynSow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:4f:cd:61:6e:fd:03:bf:c4:af:e9:48:49:f1:6e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
        Validity
            Not Before: May  1 04:00:41 2024 GMT
            Not After : May  2 04:00:41 2024 GMT
        Subject: CN=54ea664575321ee2005cc56e4e79d73ebd01b9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:f5:af:0a:93:67:f1:ed:43:ae:09:33:84:
                    de:17:52:17:f0:a5:d0:d5:cb:c0:ed:7c:6b:31:3c:
                    07:3c:15:bf:80:f0:68:42:b0:5a:8f:0c:91:6f:f3:
                    13:a6:00:38:d0:fa:ab:3e:ba:71:c4:ba:34:f2:04:
                    c7:b9:47:35:23:37:55:b5:98:82:50:93:1c:f8:c8:
                    77:a5:7f:67:89:30:41:5b:ac:23:c3:0a:54:33:0b:
                    35:98:fd:fd:29:d6:da:a0:e9:82:f0:78:ef:94:fd:
                    35:4b:4c:01:28:82:4a:36:34:da:ec:2e:08:bf:c2:
                    e7:e0:e8:46:94:e5:0f:5c:57:c1:44:7f:58:00:7e:
                    5b:f5:d8:a4:db:52:43:9f:27:db:e6:08:88:4e:87:
                    61:65:46:e7:b7:1d:82:c4:3c:5b:80:8d:7e:a4:ba:
                    2b:22:a2:7f:c1:b6:a3:81:c6:b9:e1:9b:89:0b:b8:
                    f1:c8:7f:73:2c:6e:4e:a3:ef:79:e8:e6:8a:d7:2e:
                    8b:78:6e:c4:cb:8d:81:ed:61:27:fb:ef:ab:72:22:
                    56:04:9e:39:be:b1:e5:e3:f1:b5:ae:2c:58:1f:a1:
                    7f:e6:44:d9:f5:bd:d5:84:40:ba:5c:06:d6:dd:b8:
                    9c:5e:b7:da:18:8d:7d:dd:0f:96:7c:a3:ec:43:05:
                    e0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EA:66:45:75:32:1E:E2:00:5C:C5:6E:4E:79:D7:3E:BD:01:B9:EF
            X509v3 Authority Key Identifier:
                keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:64:3f:bf:f8:c6:28:f5:1d:5d:86:39:6d:2b:ff:af:ed:55:
         f0:2a:8b:a4:23:bc:97:3e:ec:fd:a7:0b:5c:c9:9e:c7:71:3a:
         9e:42:dc:d7:de:fd:ea:7e:a2:c9:7b:4c:c5:d6:d2:d9:2b:e0:
         3d:09:54:c7:52:7d:1e:45:c3:ca:84:1b:bc:83:39:28:0f:72:
         1f:ca:74:6e:65:dc:56:73:1b:c6:3e:ab:56:97:2e:84:ca:53:
         23:f8:84:a2:d0:3a:3c:cc:45:a1:fa:95:c3:b9:03:fc:f2:97:
         aa:ac:6d:e2:73:2f:75:d6:b4:48:55:54:2b:d6:62:98:cc:a7:
         77:e8:72:fd:42:91:94:fe:6e:96:f6:a6:03:6a:b6:49:a1:5b:
         a3:0b:70:0f:0f:b0:93:4c:24:c9:9f:7d:b4:dc:f1:69:df:f4:
         80:32:ea:14:69:55:0a:8a:c0:c2:e3:04:3d:1c:2c:8c:e6:f5:
         03:a8:f6:f3:ad:c3:20:2a:da:19:c0:0f:82:06:16:a3:2e:79:
         68:da:7b:f7:ea:ab:79:08:f3:8e:37:b0:76:8b:12:95:d8:f9:
         ba:79:a1:da:57:11:2d:1c:c7:6d:52:57:b7:40:c8:b5:b5:a5:
         43:93:d8:e3:6d:08:ed:c2:de:cb:9e:d6:10:f3:02:10:c0:5e:
         0a:be:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:25:44 2024 by rpki-client on console-ams.rpki-client.org