Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File:                     1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier:          F2xP3J6fU0o7n2WitvS8qx2xR7exnkOpuBkAn7cKJHs=
Subject key identifier:   01:32:52:A3:AF:52:4E:BC:B3:82:FD:9A:4E:B2:F2:D6:49:55:DB:E2
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer:       /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial:       018F4A8FB682270408E7CEB1804B18D74C6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number:          115D
Signing time:             Sun 05 May 2024 21:01:23 +0000
Manifest this update:     Sun 05 May 2024 21:01:23 +0000
Manifest next update:     Mon 06 May 2024 21:01:23 +0000
Files and hashes:         1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: gpwzb4f2yNXWGTQ/S6piA1BoD8KeVoCuDoGhyJehX9c=)
                          2: IQUY6hZIRlDD87bVe3Fdnfwe3cQ.roa (hash: yLkAZNO68WsfjR6Rq6ZHJh3pFlE8GxmK6nsysNArrSs=)
                          3: _D4aDdgXjfDC3w2x8vgzuFoc0_o.roa (hash: koCRhSdvjI0PZh70imVyxfMgs3ix1LtC+CWFg1BgnVk=)
                          4: afbV6p7LvuvEEyjVSuP-TtnXjNI.roa (hash: fB0GG3sjxq89aZXqrSQW/PX5OHHdGlDl7be2SycqE3o=)
                          5: cD1Y9rt792fQ-TazQwxzuH85B-g.roa (hash: /991gHkkNrAJOnOk8relhLJG9blT4WFiJp6SP0Leilw=)
                          6: g39fXJWWgdCYIuc9NcTAEnSqFg8.roa (hash: Pn0kxOQJZO5SyvSjWpMJbvsc56KeKH5wdJMaQRT8/1w=)
                          7: nc1mP5BfexK_yeyVv2zTWCwwwzY.roa (hash: zkO6Pll4dK4kF42u+5vqnHBGhM3Wi1hRQbcUmOb3Iqw=)
                          8: qOL2GhcvZfH468QXPCfSQ8BM5uY.roa (hash: nS7rWT9BeH8zXl6eqUXfOxluzVFf2FAVgD62ZhDeWtA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 21:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:8f:b6:82:27:04:08:e7:ce:b1:80:4b:18:d7:4c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
        Validity
            Not Before: May  5 21:01:23 2024 GMT
            Not After : May  6 21:01:23 2024 GMT
        Subject: CN=013252a3af524ebcb382fd9a4eb2f2d64955dbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:b7:dd:05:16:43:54:58:2d:bf:c5:b0:27:
                    d3:2f:32:18:65:76:90:62:14:59:4c:d8:07:d3:ae:
                    a4:0e:81:53:d7:4d:de:5e:91:30:41:c6:55:00:e1:
                    40:5a:81:86:80:bb:78:c4:56:ff:46:02:b1:05:45:
                    ec:cb:25:73:30:e8:93:d1:68:dc:cd:e8:8c:27:9b:
                    45:21:17:9b:5f:02:3d:8b:da:b8:0f:60:90:02:34:
                    a7:b1:e5:d7:07:3d:8a:71:20:80:8b:0e:3d:c6:4a:
                    4d:bc:f5:c5:a6:6f:50:1a:a7:95:63:0a:4b:e0:55:
                    2c:36:1d:96:7c:b7:1f:ac:ea:a3:23:8b:77:d2:96:
                    7f:9f:2e:09:40:f4:a5:bd:0f:e7:f5:b2:26:8c:08:
                    4b:e0:43:55:2d:6e:65:cd:ae:8c:77:f8:af:25:2b:
                    f3:8a:7e:1e:7c:52:9b:29:aa:31:3e:b8:74:88:20:
                    1c:16:89:80:2e:8a:5b:3c:bf:ab:fd:22:18:b9:f4:
                    33:23:34:cd:d2:46:c9:4b:02:f7:03:a6:52:7b:a2:
                    fa:19:9d:2c:d4:30:e4:7a:bc:23:6e:99:c6:81:4c:
                    03:e0:f8:c4:b2:98:d5:0f:f0:ea:16:b9:0d:45:57:
                    95:de:a6:7b:e1:be:c7:53:c3:be:fd:9f:b4:de:bb:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:32:52:A3:AF:52:4E:BC:B3:82:FD:9A:4E:B2:F2:D6:49:55:DB:E2
            X509v3 Authority Key Identifier:
                keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:c1:10:54:72:a8:a8:c3:f9:c0:9a:25:f0:18:dd:fd:a5:
         83:25:e0:bd:6d:dd:8b:0c:29:9a:ca:ba:43:ff:86:e0:ab:5a:
         09:cc:47:cf:4d:d3:a4:a1:82:c4:e7:f1:90:e9:1c:66:ce:0a:
         05:3b:c4:bf:ef:84:cb:d8:c0:a2:01:2e:e2:7c:cc:0e:2f:b1:
         2c:47:76:eb:4d:0b:dd:33:54:f6:9e:99:8a:75:7e:26:c4:69:
         b8:c2:64:16:ce:8d:01:b8:4c:a9:e0:5e:b4:67:e9:d7:76:57:
         27:9d:ca:3b:5c:47:c4:c8:ff:49:2e:3f:ba:0b:eb:50:af:67:
         81:5e:6f:8c:be:df:a9:b7:e7:cc:ec:4c:ad:04:96:b7:ee:a8:
         fb:11:9c:7e:42:19:2b:e3:7d:59:48:d5:b7:18:ee:47:db:de:
         d3:a6:b6:8f:08:33:2f:a6:b6:55:c2:36:90:47:ac:4a:02:d6:
         5c:5e:6b:16:55:8c:83:ec:21:fd:e5:df:bd:a7:43:bc:0a:38:
         b0:55:d5:9e:4e:fb:7d:15:95:61:72:91:bf:55:7a:a5:e3:6f:
         ae:93:80:bf:50:d7:43:c8:5e:5f:81:7c:40:ee:78:88:fd:6a:
         30:b8:52:e1:94:08:de:a0:ff:58:e7:c0:05:c3:e2:f1:fd:cf:
         70:44:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:02:54 2024 by rpki-client on console-ams.rpki-client.org