Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File:                     1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier:          uj09i/xvtWOqGpdH8f10KHoWMvxp7egeasWIi7e1grQ=
Subject key identifier:   3F:2D:11:C0:1C:91:28:AC:B4:05:CA:97:15:1F:51:20:51:8E:27:83
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer:       /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial:       018F57028CAEBF8E27F73450DBAD8C67792D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number:          115C
Signing time:             Wed 08 May 2024 07:02:15 +0000
Manifest this update:     Wed 08 May 2024 07:02:15 +0000
Manifest next update:     Thu 09 May 2024 07:02:15 +0000
Files and hashes:         1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: A9iywe9TlbUO7ecn7jApn52+e8o1SXy2rofRl85vLN4=)
                          2: qMk1C2p9-YX8wh0CTkeq1QYo4JA.roa (hash: fz6hT/tqd9dW26kca9sZU7zvv63r2YdCkmDEnRp9Bm8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:02:8c:ae:bf:8e:27:f7:34:50:db:ad:8c:67:79:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
        Validity
            Not Before: May  8 07:02:15 2024 GMT
            Not After : May  9 07:02:15 2024 GMT
        Subject: CN=3f2d11c01c9128acb405ca97151f5120518e2783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:93:ec:75:56:05:2f:15:6e:23:97:17:a1:69:
                    82:7d:d0:44:59:2c:30:ea:30:60:82:95:62:ff:16:
                    98:aa:2a:ae:39:35:3e:8a:a1:d5:72:f6:0e:d0:db:
                    0c:f3:f5:c1:78:1b:55:31:b7:d7:da:dd:51:dc:c5:
                    51:d1:12:f2:59:9a:3f:2d:23:4a:54:e2:e9:91:31:
                    65:a8:48:79:81:a4:d4:95:91:ff:85:40:8b:11:df:
                    36:ef:9e:63:de:db:49:ac:82:32:25:11:ad:cd:26:
                    88:92:ac:f1:17:79:97:d4:91:bb:8c:be:2d:93:a0:
                    3c:24:22:64:d8:e4:d8:ee:a2:39:f4:c4:c3:43:61:
                    b3:13:1d:6b:3d:8c:9a:5a:d1:9b:37:5b:48:2d:cf:
                    50:f0:b4:3d:3c:75:fd:cc:72:b3:88:62:b4:b3:6a:
                    5f:da:af:b9:b5:b8:61:1d:0d:02:2d:78:0f:49:27:
                    0b:87:60:56:0c:b2:4e:1b:df:da:78:49:fe:0f:53:
                    60:44:3d:43:34:62:c5:c9:59:d2:a8:3d:de:b3:18:
                    fa:de:52:0b:7c:93:47:e2:5a:30:f2:af:7f:5c:ea:
                    2d:42:12:59:ce:fd:d6:e2:df:9e:77:14:e7:e9:90:
                    ef:14:c2:fa:7c:1a:1e:b2:b3:59:10:a4:de:0c:19:
                    3e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2D:11:C0:1C:91:28:AC:B4:05:CA:97:15:1F:51:20:51:8E:27:83
            X509v3 Authority Key Identifier:
                keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:91:f8:f5:1b:89:c4:ff:4c:eb:dd:87:86:83:d6:c6:25:52:
         24:38:e7:de:04:ca:b7:65:77:07:52:62:6e:e4:fc:0a:49:92:
         59:1e:70:a9:1b:36:32:ce:75:4c:66:39:ef:0f:39:2d:6f:8d:
         93:32:7e:18:06:78:91:22:b0:36:16:05:a0:07:4d:a0:70:12:
         0c:e0:ec:63:96:4d:8e:0a:0a:09:89:c2:bf:8c:6e:94:96:d2:
         69:f7:7a:e4:c1:2a:c8:10:f8:b9:30:e2:f0:bf:f2:17:62:4f:
         c8:c9:3d:e5:15:8a:23:62:62:82:70:7f:01:39:77:ec:20:c2:
         19:da:8c:fb:4d:1e:17:64:eb:27:18:01:7b:83:c9:6f:d1:e5:
         a9:9a:04:7e:3d:1c:bb:79:70:a1:9a:f6:a0:1a:91:42:85:df:
         28:b6:5f:3e:88:a9:94:10:a9:3c:d2:54:4b:6f:c9:1b:c0:09:
         fd:82:10:4f:18:38:42:4d:7e:6c:b4:e0:5f:2c:d3:a5:66:08:
         d9:e8:c8:9b:38:4c:55:b0:96:39:00:8d:31:14:14:6b:b9:7b:
         90:f2:b4:5b:c8:94:82:2a:52:d1:24:fb:a7:ee:84:e4:05:c9:
         70:66:dc:89:d7:c4:3f:23:6a:cb:64:c3:16:c9:5e:ca:ea:18:
         01:0b:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:25:21 2024 by rpki-client on console-fra.rpki-client.org