Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
File:                     9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft (raw, json)
Hash identifier:          818i1ORiyGxFelBjb7Q5Cjt+X5Ujjt0GMBDHamMczAo=
Subject key identifier:   2C:F3:8D:5B:50:35:F3:BC:5B:3B:87:1B:1C:84:E1:29:A4:0A:23:43
Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
Certificate issuer:       /CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Certificate serial:       018F3DE6A64922B514D2F54A1B39B291DAED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
Manifest number:          1153
Signing time:             Fri 03 May 2024 10:01:17 +0000
Manifest this update:     Fri 03 May 2024 10:01:17 +0000
Manifest next update:     Sat 04 May 2024 10:01:17 +0000
Files and hashes:         1: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl (hash: hUU1ttPzIhHg/2uE8KaI9DV5xOZGnyI/JXIuXlPamLM=)
                          2: Js-BoPvEGbdirNzPcQ1Qy051wz8.roa (hash: HxaEH0F9JZvwKZ4avYxu6WBQuLbe3YGAG1CS4cNmqYw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e6:a6:49:22:b5:14:d2:f5:4a:1b:39:b2:91:da:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8
        Validity
            Not Before: May  3 10:01:17 2024 GMT
            Not After : May  4 10:01:17 2024 GMT
        Subject: CN=2cf38d5b5035f3bc5b3b871b1c84e129a40a2343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:f9:e7:31:27:ed:b0:10:a3:42:dd:b5:23:
                    da:ee:6e:af:a6:96:81:8e:76:12:47:01:3b:25:f1:
                    5d:77:de:90:ee:37:bd:9b:02:71:d2:77:48:a3:bc:
                    68:7e:c4:e8:1e:b6:d1:3e:f4:58:57:07:3d:ee:2a:
                    83:dc:9c:8a:fb:10:b1:a1:25:d7:ff:c8:d9:7a:2f:
                    7a:54:f9:5d:78:16:17:30:70:8f:53:37:25:99:44:
                    b6:de:bc:20:a5:22:d7:10:06:5b:f9:99:9a:24:53:
                    24:64:61:a3:83:32:af:6d:f5:ba:34:bd:d7:a0:67:
                    52:42:74:79:07:fd:91:46:d1:cf:22:8f:a9:ef:97:
                    77:89:4b:86:a2:89:2e:31:07:4d:3a:ed:7e:17:95:
                    42:8d:41:0e:0d:05:66:eb:17:e6:4d:7f:be:5b:18:
                    8e:39:d4:c1:f3:32:1b:e8:62:92:09:7d:6f:82:7d:
                    f6:67:25:1f:91:da:f1:ac:54:4b:d6:f0:e0:c2:e0:
                    a8:0c:21:35:41:02:11:ee:2c:16:ed:e8:ec:d5:ce:
                    19:23:1a:61:ff:35:f1:78:31:22:5c:79:3b:28:24:
                    13:6b:39:91:f3:ed:bd:5a:b2:f1:48:c3:98:47:f4:
                    f6:25:8e:59:97:d3:ae:c7:0c:23:f9:e0:d0:11:19:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F3:8D:5B:50:35:F3:BC:5B:3B:87:1B:1C:84:E1:29:A4:0A:23:43
            X509v3 Authority Key Identifier:
                keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ab:48:61:ed:9f:ba:75:5f:59:72:8e:9b:ea:33:d3:25:a6:
         cb:a0:cc:4d:01:b4:3b:f6:30:bc:97:91:8e:8d:ad:a2:b8:6a:
         97:f2:f2:5a:97:b8:56:e0:b0:33:4e:58:b3:8d:8c:09:75:65:
         7b:98:28:9b:0c:b0:e0:00:88:a8:3d:62:11:0f:70:c0:cb:d0:
         f1:9f:28:62:69:28:5c:bf:e8:65:02:57:90:bc:94:2c:f0:86:
         7a:9f:88:35:1a:05:45:e7:16:e0:7a:4e:b7:cb:1c:ca:a0:ad:
         7f:dc:c1:48:d1:80:f9:1a:52:57:a2:2e:42:38:9b:91:1a:1f:
         77:7d:29:07:34:8e:c0:a8:d6:5f:4e:7e:fa:03:91:ec:3e:d3:
         83:87:d5:ad:be:43:70:80:27:28:85:80:c1:0e:81:d0:d9:ae:
         c2:18:24:5c:1e:81:5d:f3:45:d7:bc:52:d8:10:6b:26:dd:53:
         87:41:80:72:c9:4b:98:2a:3d:fe:56:ab:ff:70:ca:34:36:51:
         85:fe:20:bc:84:d0:fc:78:59:60:f1:e2:54:04:1c:ce:f4:36:
         90:05:64:d4:f4:27:74:80:59:82:6c:68:06:ae:9a:5f:f3:89:
         6c:93:95:5e:37:4e:14:f8:56:f0:a6:2d:22:6f:b0:5d:6f:9a:
         38:b8:d5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:42:45 2024 by rpki-client on console-fra.rpki-client.org