Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
File:                     1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json)
Hash identifier:          sj8xsCs6HOF2V9V2kz2Q5O5boNr291A4c9b9wvcCZt0=
Subject key identifier:   44:55:13:9A:1F:23:16:9E:A4:E8:51:16:BB:54:2D:DA:A0:AA:CE:F2
Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
Certificate issuer:       /CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Certificate serial:       018F3AAEF0B1E72855B1A5C4675FA45F3EA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
Manifest number:          1152
Signing time:             Thu 02 May 2024 19:01:34 +0000
Manifest this update:     Thu 02 May 2024 19:01:34 +0000
Manifest next update:     Fri 03 May 2024 19:01:34 +0000
Files and hashes:         1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: HgrnAW/hAsRUwc6XX/4FAYNoJ13k16BL9Fyrp4joa30=)
                          2: f2jOnly8IUE34mBicBRihkGivuU.roa (hash: 0BiNawE17Iv0+A5o06G84Tx37cptRUf6nzW2ythloA0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:ae:f0:b1:e7:28:55:b1:a5:c4:67:5f:a4:5f:3e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930
        Validity
            Not Before: May  2 19:01:34 2024 GMT
            Not After : May  3 19:01:34 2024 GMT
        Subject: CN=4455139a1f23169ea4e85116bb542ddaa0aacef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:b8:86:e3:7e:aa:f9:a2:e5:a4:65:d2:a4:
                    6c:78:d2:a4:e2:8d:14:7b:96:fe:34:30:cc:77:b4:
                    e6:08:a2:af:30:a5:a2:83:aa:a4:9c:44:db:34:e7:
                    44:cb:e0:95:d0:d2:03:b1:ca:b5:39:31:4b:fc:83:
                    e6:31:6a:c1:83:10:ad:39:bc:2d:fe:2e:49:73:46:
                    f0:7d:ab:7b:7c:f6:e9:55:7d:9d:6c:8a:bc:63:26:
                    73:d6:ab:6d:b8:69:f5:29:b0:98:a6:2a:b9:f3:61:
                    b7:83:f5:fa:7b:a3:15:b0:fd:e5:60:7d:9a:49:16:
                    bc:e2:35:ab:76:24:69:22:60:2f:6f:92:7d:c3:ee:
                    c5:31:84:7c:2f:80:d1:76:2f:70:8a:4a:8a:fc:c9:
                    b1:4e:5d:92:c0:52:a7:00:c1:55:d0:19:eb:e0:a4:
                    ee:9c:37:df:bc:d1:4b:d9:fc:a6:1e:71:8a:e6:50:
                    99:3c:55:f4:6b:af:6a:5b:ce:7b:4a:a0:af:30:78:
                    10:e4:6a:e5:1b:bb:e0:76:68:ee:3b:3f:85:db:47:
                    8c:50:2d:29:04:64:e3:c9:57:ad:78:a1:0b:7b:6d:
                    e3:8a:e2:41:2e:61:ba:85:7e:79:57:e6:4b:dc:85:
                    fb:cb:6f:c5:0e:f6:c2:df:10:8f:59:09:71:97:d6:
                    39:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:55:13:9A:1F:23:16:9E:A4:E8:51:16:BB:54:2D:DA:A0:AA:CE:F2
            X509v3 Authority Key Identifier:
                keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:28:85:95:c3:b2:d2:ed:be:11:49:c2:d6:56:d5:dc:b3:48:
         9f:8f:45:82:9e:26:dd:7d:20:e2:f3:25:75:a1:b3:a4:a7:9b:
         48:1c:5e:ba:04:f5:69:c4:dc:c2:5c:e8:3b:17:44:54:d8:60:
         87:4a:d8:61:45:38:dd:bc:d2:29:7e:10:cb:77:e6:4a:b9:05:
         68:24:58:59:70:57:da:bc:06:dc:48:54:85:23:5e:3f:83:56:
         e5:06:4e:78:67:fa:b9:57:84:af:69:ea:9d:b4:de:61:5d:7f:
         bb:15:94:fe:85:f6:e7:23:a1:d0:ec:ea:6c:4d:37:7a:36:b5:
         67:21:67:9d:b4:8c:c9:87:af:d5:86:4d:89:e6:3d:a1:5b:d0:
         75:20:3c:85:1e:8f:fe:98:b3:49:e9:8f:39:12:ce:ae:39:9f:
         e5:f6:e5:e0:97:19:68:64:26:7c:7f:d5:56:06:4e:03:f4:c9:
         8f:5a:ef:3d:08:8b:6f:f6:36:14:27:4a:81:61:d5:5f:6f:db:
         5c:20:7e:56:b6:5d:5b:ff:4f:82:25:0c:3c:69:0d:9c:f1:48:
         07:bd:2a:43:25:b3:a4:32:40:67:d7:ee:21:4f:02:ec:4d:4b:
         dd:5a:fd:ec:b8:61:16:76:27:c2:59:2f:1f:46:66:86:b4:f5:
         76:8e:f1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:04 2024 by rpki-client on console-fra.rpki-client.org