Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File:                     1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier:          WbeZQ9OFk6DypSnxBwiof9nJqG9c900q003zxgLwqj8=
Subject key identifier:   C8:A1:4F:05:88:23:70:4B:0E:0D:96:D5:15:CB:8A:21:66:FC:D6:14
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer:       /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial:       018F3A09E11B56DBE9F81E6314B7369C456A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number:          1151
Signing time:             Thu 02 May 2024 16:01:16 +0000
Manifest this update:     Thu 02 May 2024 16:01:16 +0000
Manifest next update:     Fri 03 May 2024 16:01:16 +0000
Files and hashes:         1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: vjTTOQgsZcu44lci5zr2OqbQGUFEwFDEjsT9k8a333M=)
                          2: g-Hf0dYSPXRhEg3IlBB6c4bDNzM.roa (hash: 6n1LnisbFYxB1TAjgxigzaB0pUB4Gvh3wYbPsApesGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:09:e1:1b:56:db:e9:f8:1e:63:14:b7:36:9c:45:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
        Validity
            Not Before: May  2 16:01:16 2024 GMT
            Not After : May  3 16:01:16 2024 GMT
        Subject: CN=c8a14f058823704b0e0d96d515cb8a2166fcd614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7c:ad:d3:43:be:d1:dd:bb:9c:1a:73:08:58:
                    8c:43:42:f5:6e:f8:a8:4d:0b:09:8c:ff:0f:4f:82:
                    2e:b6:b4:d5:38:36:0b:65:40:cf:2a:ac:f0:5b:4a:
                    6c:0e:b0:0d:3c:50:25:c3:3a:6c:17:4e:1e:50:88:
                    a5:18:42:a9:6b:02:b2:09:99:6f:b1:7c:35:d7:35:
                    4a:91:71:52:47:e6:76:d8:28:d5:8a:be:62:ba:3d:
                    e3:da:72:ed:bc:f2:06:49:f9:43:2c:b4:39:e6:29:
                    f5:f4:13:2f:68:cf:56:08:82:9f:68:f5:bd:4b:3f:
                    7f:c7:7f:dc:6f:25:82:52:d0:0d:d9:67:f2:76:ba:
                    02:ef:7b:62:71:b4:bc:5b:dd:d8:b9:1e:eb:6e:1a:
                    96:d7:14:91:f3:52:42:36:5b:13:fc:c7:21:96:28:
                    8e:97:04:4a:a3:42:22:c3:0c:2d:47:92:1a:b4:66:
                    8f:c7:ef:10:76:99:48:5f:4b:69:d3:57:75:23:e1:
                    4e:72:e8:9a:40:30:b7:9a:51:59:c4:74:b5:db:bf:
                    7f:e4:6c:57:0d:9e:b6:7f:90:e6:d0:48:42:64:5e:
                    14:28:28:48:8c:91:e5:d1:5f:14:ea:02:f2:bc:3d:
                    47:1d:d5:ef:76:f2:84:58:f5:43:2f:8c:06:fa:cd:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A1:4F:05:88:23:70:4B:0E:0D:96:D5:15:CB:8A:21:66:FC:D6:14
            X509v3 Authority Key Identifier:
                keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a3:dd:1a:a9:e5:5e:56:ea:fd:07:53:5b:35:06:dd:b6:69:
         81:71:1a:be:0d:25:47:e1:02:05:17:9f:19:06:b3:a0:50:85:
         10:48:8f:50:6d:3c:8a:4a:95:5a:04:0c:0f:ee:d8:c4:ff:3a:
         22:ad:0e:39:b0:4b:7a:89:b6:e1:2f:98:c2:ce:21:69:3c:77:
         27:e8:4c:94:9a:cb:d1:d0:13:b5:42:ff:b7:01:c7:5c:2c:7b:
         c5:51:0d:d2:14:be:b7:03:6a:fc:81:b3:90:7e:f6:98:9e:98:
         8c:72:c4:c4:ab:0d:43:7c:06:0a:8b:0e:7e:6b:7d:26:ae:6b:
         1d:4e:c4:06:69:85:76:0e:6e:52:32:58:77:4e:77:e3:12:f4:
         9a:a2:f7:ec:7d:f4:be:1a:01:a2:1a:6d:da:ea:d7:de:74:13:
         0b:cd:5e:6e:72:11:5c:55:df:9e:1b:c3:c7:07:1e:0a:66:6d:
         35:e3:23:2e:0a:b6:50:13:91:4f:33:14:32:4c:56:9b:17:7c:
         01:ba:77:29:b3:af:ea:fc:29:82:cd:44:b6:ec:cd:ef:ad:74:
         d1:49:08:d8:96:04:40:01:ee:92:d7:a6:9d:26:0b:b1:e2:70:
         2b:52:bf:10:1a:bb:c1:bc:82:28:d4:9b:fb:f5:3e:80:35:fc:
         88:99:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:19:49 2024 by rpki-client on console-ams.rpki-client.org