Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File:                     4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier:          AZDPFPbjLhR8JLOGa0kQQSceYmScJ6Zriuja0svmdfo=
Subject key identifier:   40:12:D9:8D:2F:B4:40:77:B0:F6:13:91:B7:CF:6D:CF:66:1B:C2:F9
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer:       /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial:       018F52800340B20B7A46347C4B7F05100F1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 10:01:12 +0000
Manifest this update:     Tue 07 May 2024 10:01:12 +0000
Manifest next update:     Wed 08 May 2024 10:01:12 +0000
Files and hashes:         1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: 5Gm48xh5ju3TB5H6tgpdTqb2e3Kb6joxj2MdBDQ/ukc=)
                          2: HYIm1daCUpk7vhu5P57SMDIdm24.roa (hash: 20SsFTDAe3meatPDuag2i8G27/zvHBb7ZUqo/lzAWi0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:80:03:40:b2:0b:7a:46:34:7c:4b:7f:05:10:0f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
        Validity
            Not Before: May  7 10:01:12 2024 GMT
            Not After : May  8 10:01:12 2024 GMT
        Subject: CN=4012d98d2fb44077b0f61391b7cf6dcf661bc2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:16:97:cd:dd:eb:b0:9e:56:6b:4b:5d:47:
                    1c:02:1d:bb:08:89:dd:12:70:9a:01:1c:de:ec:b8:
                    9b:d3:1b:2a:c4:d5:35:6c:89:2e:3b:9b:b3:d3:3e:
                    7f:7a:62:43:7f:e1:fc:63:ab:52:24:ab:52:10:9b:
                    27:2f:fd:49:c6:5b:14:d5:5f:66:dc:4a:2b:70:a2:
                    7e:b6:06:07:5e:d1:d6:7c:83:e7:97:f3:8d:1e:19:
                    6e:c3:dd:cb:92:67:7f:70:34:da:8b:cd:c0:da:ce:
                    aa:67:3a:2b:3d:38:67:60:f7:9c:9e:af:db:8b:29:
                    0b:ea:02:0c:2d:6c:56:77:88:27:bd:9d:85:7d:1a:
                    0b:97:d1:16:42:56:c7:cd:3f:5d:bf:83:ad:d3:a0:
                    c6:00:3d:9d:47:68:42:42:7e:04:81:58:e9:33:09:
                    85:61:3a:49:88:b7:09:c1:1f:9e:e1:88:53:48:54:
                    c6:e0:a1:7c:95:ea:de:81:c3:76:29:78:6b:e7:e9:
                    b9:1a:03:37:eb:25:19:0c:70:b8:21:ef:68:b4:66:
                    f5:6a:6f:e7:a1:0f:d8:61:8c:86:63:b6:2c:c3:85:
                    da:71:a6:00:d7:78:ca:df:e3:42:ce:1c:64:3f:07:
                    7a:07:ce:19:f8:21:23:50:11:9c:03:3f:e4:ae:88:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:12:D9:8D:2F:B4:40:77:B0:F6:13:91:B7:CF:6D:CF:66:1B:C2:F9
            X509v3 Authority Key Identifier:
                keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:66:45:5c:6e:76:6c:5e:43:f6:1a:d9:eb:58:e9:ee:cc:13:
         ca:d1:ea:80:fa:7e:8c:6b:37:14:10:4c:9e:6d:11:89:66:ce:
         bd:be:c5:9e:cc:0b:83:99:aa:26:c8:67:66:a4:7a:c0:4e:96:
         db:83:0d:47:38:28:6d:2d:87:11:ee:9c:33:27:b7:ef:c7:b3:
         00:8e:de:07:bc:af:7b:d3:84:84:a3:4e:50:39:87:90:1d:df:
         6c:5d:f5:e9:98:5a:68:cc:ad:2a:da:58:b3:cd:f3:df:39:2f:
         07:a7:00:27:f3:d6:fa:76:9e:f9:c5:c2:f7:39:4a:10:5f:e2:
         4f:7a:27:51:41:17:df:3a:d1:d8:28:b0:aa:bb:18:e4:d3:a8:
         08:fc:44:84:89:7d:cd:28:e4:c6:17:61:50:9c:c0:b9:7b:91:
         5f:f3:77:30:a4:cb:f8:4c:c0:a0:8b:bf:3e:3b:5f:9b:fe:f8:
         8b:2b:c6:1e:69:31:d1:6a:5c:9a:83:11:ac:9e:a4:e3:b3:0f:
         2f:ad:a5:b4:b3:ba:38:94:b6:b5:ac:ef:91:f2:c5:fb:9b:5f:
         29:ee:eb:a8:94:f8:68:84:26:69:37:db:31:3f:fd:98:b3:34:
         ed:48:25:09:5d:b8:b5:92:34:ce:d4:be:3f:59:bb:00:0a:cc:
         71:78:a6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 13:00:49 2024 by rpki-client on console-fra.rpki-client.org