Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
File:                     R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft (raw, json)
Hash identifier:          VAG4sTJ8fN9dyCZIn0XgaXE+UFfq0ftTAhfEab8Rxvc=
Subject key identifier:   9B:98:31:95:1E:55:B8:F1:35:79:13:AB:21:8B:5B:9F:68:BE:B3:12
Authority key identifier: 47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61
Certificate issuer:       /CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
Certificate serial:       018F97297AAE9DF67B77C66327A52307C01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
Manifest number:          1181
Signing time:             Mon 20 May 2024 18:00:28 +0000
Manifest this update:     Mon 20 May 2024 18:00:28 +0000
Manifest next update:     Tue 21 May 2024 18:00:28 +0000
Files and hashes:         1: R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl (hash: nRd+1Bk63j2cfw9DIyD4CO3PgkFL9uBnuk7KyU9O/Vk=)
                          2: w70-irwlmtkwUlByTVe5liAbK3U.roa (hash: fR40o96A0orLFs55MffgefSijGg0MpJwsaZjzpvSIl4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:29:7a:ae:9d:f6:7b:77:c6:63:27:a5:23:07:c0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
        Validity
            Not Before: May 20 18:00:28 2024 GMT
            Not After : May 21 18:00:28 2024 GMT
        Subject: CN=9b9831951e55b8f1357913ab218b5b9f68beb312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:98:b3:6d:e4:82:a6:9d:30:c7:32:a3:3e:e4:
                    d4:dd:08:42:f8:83:22:3d:09:94:60:40:07:61:10:
                    38:b9:6d:ab:d5:98:21:47:80:61:78:de:c3:58:e2:
                    34:6f:c9:c5:79:4e:96:27:22:69:d2:15:6a:71:b4:
                    6a:2c:a5:8d:97:22:91:ae:15:1a:27:de:06:fa:fa:
                    f7:84:d4:5c:a2:36:09:9c:d8:18:78:1e:b1:b1:d8:
                    83:e9:3b:c5:b6:28:51:e0:7e:09:eb:f7:40:e0:0a:
                    f9:85:16:12:a7:a4:5e:66:0a:cc:a0:d8:39:80:6c:
                    9c:21:97:3c:12:21:66:44:1a:a3:6a:d3:3d:be:40:
                    9c:5f:d7:e5:39:6c:c6:c8:9f:c2:c6:e3:7e:83:9e:
                    e8:21:89:f9:37:aa:6a:37:1d:2f:78:a4:e4:76:f1:
                    fc:98:af:4a:ff:44:37:54:c9:f8:dc:6f:a6:c4:43:
                    ff:45:e8:bf:0b:34:65:0d:12:21:00:6c:67:34:5c:
                    b6:14:04:88:fe:02:2b:85:ee:94:a6:e2:e4:f7:67:
                    67:6d:66:d4:ff:a2:36:73:03:30:1b:64:59:e1:ab:
                    06:b4:69:70:0a:d0:da:72:08:22:fd:74:7a:bf:98:
                    05:68:e4:36:f3:32:27:72:71:2d:72:f3:78:db:0c:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:98:31:95:1E:55:B8:F1:35:79:13:AB:21:8B:5B:9F:68:BE:B3:12
            X509v3 Authority Key Identifier:
                keyid:47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b9:63:89:6f:c1:31:b7:39:50:e4:13:7b:61:39:df:c3:d3:
         1d:9e:26:d6:39:ad:8c:05:4c:1d:68:0b:1c:7e:fc:e2:8f:e0:
         40:a9:82:88:49:a6:02:3e:8f:bc:9b:69:30:be:f6:b1:be:51:
         db:e0:38:04:c0:e3:80:b5:bd:02:c1:b3:1c:65:94:0c:43:be:
         58:53:2a:79:3f:91:4d:14:2d:42:4e:55:ae:a8:b1:be:ab:57:
         13:b6:75:c8:5d:11:72:cd:2e:31:de:f0:16:fa:39:2a:c2:10:
         56:79:d3:4d:ac:dc:5e:1c:57:6b:4e:26:21:27:57:fe:1b:cf:
         d4:65:2d:af:4c:84:5e:7e:63:9c:ee:5e:1b:b1:2e:8e:ea:da:
         5b:20:7a:62:10:2d:11:cb:a4:b2:ff:a4:d4:10:70:e4:30:51:
         99:4d:54:af:70:35:73:61:e8:45:f4:46:c2:f5:e4:9d:83:69:
         20:36:23:0b:a9:ca:64:ee:3f:8b:d1:cc:8d:81:5b:85:de:ec:
         b4:3e:2b:82:76:c9:7b:eb:81:69:d5:8b:fa:a9:d0:37:91:b4:
         4e:d3:46:3c:7d:d3:4e:e7:a9:c6:24:90:84:77:93:76:07:0c:
         df:37:01:68:0d:b2:9d:5b:4b:c5:e5:7d:3a:61:63:5f:bf:0f:
         87:de:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:24:20 2024 by rpki-client on console-fra.rpki-client.org