Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
File:                     FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json)
Hash identifier:          aX/MJ9eF6dDsgp+KUgP5LR9K9GrONXiCh6qH5jEvXi0=
Subject key identifier:   19:E0:FA:B6:04:B0:B1:37:D1:72:49:C2:6C:68:C4:D6:E6:81:9A:CE
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Certificate issuer:       /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial:       018F399BC63634EBADCBB921B6524418A95B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
Manifest number:          1159
Signing time:             Thu 02 May 2024 14:01:01 +0000
Manifest this update:     Thu 02 May 2024 14:01:01 +0000
Manifest next update:     Fri 03 May 2024 14:01:01 +0000
Files and hashes:         1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: Gmrc1BpPcBoXL2uD5nlxWSblpV81cVu0R7m3cz8+mUA=)
                          2: I7mgYA0uQBmIg_hyCKkDqBaXuEg.roa (hash: n+9oObaHGsHsvTmUEfYetda5cKl6xlieisHFdNk7oqI=)
                          3: r6X-ifmR5YXE0JUaYEgFSSt4aIU.roa (hash: 4poFI6DWMzi4copibLpPuk2Oyrlw9UMkJwQXyfhmB/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:9b:c6:36:34:eb:ad:cb:b9:21:b6:52:44:18:a9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
        Validity
            Not Before: May  2 14:01:01 2024 GMT
            Not After : May  3 14:01:01 2024 GMT
        Subject: CN=19e0fab604b0b137d17249c26c68c4d6e6819ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:3b:35:c5:dd:d1:42:16:34:10:ee:13:22:
                    e6:6b:58:89:e2:3f:35:39:9a:4e:6a:3c:e6:a0:56:
                    9e:46:41:27:36:78:14:65:5f:4f:99:a1:d0:e5:17:
                    f4:62:91:95:bc:ab:07:24:1c:f4:39:a6:2f:ed:be:
                    97:2c:6f:01:a1:b9:f6:bb:cd:a1:5c:7a:2a:5a:a0:
                    fa:cc:a9:5f:c7:99:0d:d9:44:e8:5a:c6:32:5a:88:
                    21:f4:d9:2f:59:a9:1c:9f:9a:9c:ae:42:ed:70:dc:
                    b1:28:ec:04:be:ee:d9:11:99:a3:65:47:9a:e1:28:
                    c0:4a:b0:5e:f6:61:e2:ff:af:9f:17:c3:4d:15:37:
                    0e:95:9d:1a:f3:0d:24:d5:87:a9:c1:6f:f6:95:69:
                    12:b9:16:c1:20:ea:14:f4:d3:03:54:51:9f:ba:37:
                    f6:de:bc:60:a4:4e:eb:1f:39:35:ab:fc:64:9d:30:
                    ac:09:8a:75:68:09:26:4c:14:52:92:88:0e:53:6d:
                    e9:a5:65:28:cf:16:29:8f:ee:d1:77:f9:9f:ef:89:
                    c4:e5:f7:54:b0:27:94:44:8d:5d:41:0f:21:27:44:
                    49:0d:ea:12:b8:91:95:e5:60:8b:14:b5:8c:b6:17:
                    65:ef:80:d3:65:9d:33:e3:4a:ab:19:44:4e:ec:20:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E0:FA:B6:04:B0:B1:37:D1:72:49:C2:6C:68:C4:D6:E6:81:9A:CE
            X509v3 Authority Key Identifier:
                keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:16:78:42:3c:1b:02:78:2e:1a:7b:82:41:e3:1b:ac:91:19:
         a5:4b:05:66:04:ac:fa:d4:4f:26:89:d0:49:6f:fc:3d:fc:1a:
         fd:1c:5a:db:6b:e4:f9:1a:1c:5b:f4:36:0c:e6:b6:b6:54:55:
         36:aa:27:78:1d:ff:7b:95:b6:d9:fe:53:8f:ad:5d:94:1a:32:
         f0:b5:7b:a9:95:e4:90:ad:5b:c4:ed:32:e3:46:78:8d:d0:43:
         8d:a4:b1:82:30:49:f6:84:e5:14:47:fd:6f:30:ca:37:c9:52:
         86:61:17:db:49:7e:fb:28:5f:e8:9f:38:d0:e9:8c:21:bc:22:
         f7:0a:6b:26:fa:c6:ed:93:13:5f:df:57:51:e3:41:12:64:60:
         19:e3:4c:2b:6b:dd:16:fd:2c:d6:cb:90:25:95:39:22:06:c3:
         a1:1a:97:87:06:6c:67:6d:29:66:17:78:48:18:8d:78:1e:df:
         79:a7:8d:7c:56:b0:c0:88:5e:bf:68:76:11:08:0d:ce:bf:3c:
         45:76:fa:97:d3:2a:69:ba:73:a5:27:fb:fa:51:21:2a:b3:f7:
         d6:76:9e:8c:7f:ec:a2:05:41:e9:a3:6c:19:a5:8e:39:fc:92:
         f5:18:e0:a7:ef:60:14:f8:94:38:55:2e:f8:4c:46:f4:4b:06:
         c9:ee:13:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:22:22 2024 by rpki-client on console-ams.rpki-client.org