Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File:                     1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier:          O96sfmmf4H2TPlERXcXHTLuFkTpBB6QWgqk6mAIf8I8=
Subject key identifier:   75:F4:63:58:7A:29:1C:6E:A3:1F:DB:E6:99:0D:5A:F0:79:F7:47:E8
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer:       /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial:       018F3DE6A97BB4D3FC28EFCCB8C47F401B70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number:          1153
Signing time:             Fri 03 May 2024 10:01:17 +0000
Manifest this update:     Fri 03 May 2024 10:01:17 +0000
Manifest next update:     Sat 04 May 2024 10:01:17 +0000
Files and hashes:         1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: ykRwNn5/EDybn/wljTZRJdvznytj2uCSLnJVrie/LBw=)
                          2: k-XVfAlleT2iMhLddurPJyKhuU0.roa (hash: 0An9BW3lKYYiKr1aU80qjL4kXkNkSmmykx3azbA/L8c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e6:a9:7b:b4:d3:fc:28:ef:cc:b8:c4:7f:40:1b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
        Validity
            Not Before: May  3 10:01:17 2024 GMT
            Not After : May  4 10:01:17 2024 GMT
        Subject: CN=75f463587a291c6ea31fdbe6990d5af079f747e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:6c:75:37:bf:8b:f7:26:16:9f:92:be:b2:
                    ff:c6:c7:cb:67:b9:57:a9:0c:e5:42:3e:08:9a:38:
                    7f:15:05:bd:b3:22:e5:f7:48:81:3b:6a:b7:e0:e8:
                    b7:ee:22:5f:1c:a8:7b:bb:1d:c7:aa:14:47:85:d5:
                    6c:ca:24:4d:77:e7:9a:c8:5e:3b:50:b7:23:4d:c0:
                    36:ff:c0:33:a3:ad:c3:8f:92:b2:d7:82:5f:f4:b3:
                    23:4c:15:00:ee:63:da:e3:b0:43:a4:69:75:7a:70:
                    96:67:ef:cc:5b:bf:06:af:e2:80:ba:ef:ea:15:11:
                    51:4d:0b:67:f6:3a:66:d1:cc:5e:4c:c8:43:c0:4e:
                    bf:07:22:4d:10:ba:c9:19:41:08:4a:45:0c:f0:03:
                    73:00:83:15:07:8d:b8:1a:40:42:56:d1:a5:b0:27:
                    06:34:0a:ad:a1:02:77:93:7a:5b:0a:28:da:1d:5d:
                    da:4b:67:44:24:1d:8a:5b:3a:58:2c:1a:cd:50:e1:
                    82:e4:25:eb:ea:a4:b1:86:4c:74:22:4e:01:a2:88:
                    4a:4c:c4:31:39:46:ed:97:c3:0a:22:e5:49:12:69:
                    c0:8c:ae:40:ce:54:70:de:9a:54:30:79:8e:45:ab:
                    4d:80:3a:76:2f:78:6f:47:78:cb:46:4e:48:d9:15:
                    4a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F4:63:58:7A:29:1C:6E:A3:1F:DB:E6:99:0D:5A:F0:79:F7:47:E8
            X509v3 Authority Key Identifier:
                keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9a:3c:74:3d:66:a1:c3:b2:22:bb:a1:80:15:2a:f1:1a:37:
         c1:3a:bb:4d:68:aa:c2:37:80:6f:c0:0d:01:16:e0:d5:92:c9:
         4e:15:5a:73:81:cf:43:85:2c:7e:07:dd:7b:28:df:65:0a:9a:
         c2:8c:f2:bc:77:97:50:b3:c8:a3:d9:a8:f9:de:b2:af:bc:75:
         2d:6b:75:75:20:fd:31:1c:9d:8c:a8:b0:04:79:98:0c:bd:15:
         5f:f8:5d:54:1c:b9:ba:d8:78:64:43:c3:f4:02:93:71:08:8b:
         c6:6e:48:26:d6:1d:f1:1e:48:ba:94:0b:bd:52:06:2c:af:6c:
         ba:d7:46:f3:1b:5e:d6:36:c2:fa:16:73:58:27:58:3f:35:24:
         23:49:4b:72:b9:41:b8:85:01:d9:a3:a5:7f:80:f2:f4:ea:4f:
         01:13:65:cb:28:ad:9c:21:12:cd:15:b7:c1:4c:0a:b0:23:36:
         ba:72:7c:1b:7f:f5:07:de:27:26:86:42:cc:1b:3c:49:95:80:
         88:51:c8:3b:8b:e8:4e:1d:b3:2b:1a:eb:8a:b0:f1:34:f4:e2:
         49:27:d1:ab:59:ca:39:b9:9c:f4:d5:e9:67:9b:70:64:cc:f9:
         cb:5a:75:24:f5:da:e5:63:25:99:e0:2d:14:fa:29:2a:59:6a:
         18:1b:9e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:19:48 2024 by rpki-client on console-ams.rpki-client.org