Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File:                     14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier:          1p63OsUQh3/kgewkXlArj4i9xgZ65hM4qpTu57ooM68=
Subject key identifier:   7A:0F:E0:81:85:0E:17:2C:DB:97:39:3F:B9:44:91:57:1D:73:60:EC
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer:       /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial:       018F46B31BCCD99A17DA5C16AEF3F22FE62E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number:          115B
Signing time:             Sun 05 May 2024 03:01:34 +0000
Manifest this update:     Sun 05 May 2024 03:01:34 +0000
Manifest next update:     Mon 06 May 2024 03:01:34 +0000
Files and hashes:         1: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: Mr3l6H/G469ghLoZoFNkZS/PJxscLzGgmvHOozFefRA=)
                          2: GrcyhGU8G4_lHDnG6ncr1QqPtg4.roa (hash: 9xwOV5hTbUQr8qLWWQSTGuCU7I+ZYNe3//mtc5fGhtQ=)
                          3: d6e4gvjOtgew1Ma0LKZMddCY1KQ.roa (hash: ngwMUWVjVQptKzurUePFwLG1RBeVXAFHrRxiqwwczQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 03:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b3:1b:cc:d9:9a:17:da:5c:16:ae:f3:f2:2f:e6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
        Validity
            Not Before: May  5 03:01:34 2024 GMT
            Not After : May  6 03:01:34 2024 GMT
        Subject: CN=7a0fe081850e172cdb97393fb94491571d7360ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:99:6d:ba:57:16:05:4e:b2:af:f9:d7:65:30:
                    e4:b7:fa:a6:0a:ba:c3:ed:44:11:f8:6c:06:a5:be:
                    87:a1:8a:4a:7b:7c:2f:38:62:80:f1:f3:0e:ae:4d:
                    2d:31:36:61:14:84:6d:f7:86:23:18:8f:c8:ff:13:
                    f8:7e:9a:b3:73:ed:2b:96:d7:e0:68:fb:82:76:04:
                    95:84:aa:7a:8f:50:5e:03:3f:3a:7e:01:bb:6a:00:
                    fe:f3:d7:c8:0a:4b:56:d2:c9:7c:9c:a1:43:af:9c:
                    12:bf:39:a7:0e:cf:60:de:3f:ea:7a:e4:68:9c:ea:
                    fe:b1:54:0f:c8:d4:b9:93:21:4d:21:8f:84:35:c6:
                    72:6f:7c:72:11:ed:90:92:ce:c9:85:d5:68:99:0a:
                    cf:8e:69:34:3f:a1:40:de:5c:ed:b4:13:eb:db:e0:
                    3c:31:d2:01:38:ff:4c:e8:d6:84:6e:c4:d9:0c:0a:
                    31:3f:05:83:7e:7a:bb:2b:d3:fd:ea:f7:f9:4a:b5:
                    d3:dd:96:77:88:85:4e:60:9f:f3:b0:39:cc:ff:6f:
                    b7:51:c4:89:97:7c:f5:05:bc:38:95:a8:e6:76:e4:
                    e3:41:a6:25:aa:1c:5f:fa:6c:2b:5d:2e:39:47:76:
                    11:6e:25:ea:58:b6:4a:4c:25:f7:2f:9d:96:54:f6:
                    eb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0F:E0:81:85:0E:17:2C:DB:97:39:3F:B9:44:91:57:1D:73:60:EC
            X509v3 Authority Key Identifier:
                keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d1:2e:3b:f2:38:9c:54:56:a3:81:80:fc:a1:f8:cb:d9:e5:
         78:f0:b2:69:fa:52:87:3e:68:ae:eb:77:d7:64:34:c1:e9:f5:
         47:5c:4d:fa:18:01:c2:72:7e:88:d9:95:3e:d1:8e:ab:61:fe:
         2a:55:61:70:cb:79:18:e3:03:d4:f9:a6:96:22:ca:3d:6c:93:
         7e:12:e6:11:f0:ac:20:a9:b0:7a:80:46:da:a0:f6:de:79:fd:
         ef:2f:99:c6:87:11:85:b9:89:44:22:f5:1e:b0:42:ef:bb:a3:
         e3:34:aa:77:65:fb:77:e6:2a:36:62:97:40:6e:15:54:36:8f:
         49:d6:a8:9a:a7:1f:48:aa:ef:da:ef:b2:7f:a5:8f:71:eb:1e:
         cf:cc:69:6c:78:35:d1:fc:f6:bc:dc:8d:f6:ab:f4:fb:76:ba:
         c3:19:2b:61:83:26:8e:db:e0:38:7c:44:6b:14:52:d9:f9:a7:
         30:e4:d2:4d:6e:75:92:2c:fd:92:de:63:05:7f:f9:24:30:d9:
         07:3a:f6:a2:a0:33:44:17:4e:0f:ac:e7:88:18:1a:ac:63:cc:
         31:90:0b:6d:be:d6:c7:7b:ac:54:8e:3e:c9:01:78:4c:d1:b8:
         1f:67:e3:2f:62:86:5e:bc:b7:ae:24:9e:e1:42:50:c0:63:7a:
         84:3e:00:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 10:14:16 2024 by rpki-client on console-fra.rpki-client.org