Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
File:                     4UYAGfiAaeNhThUQkhzH5E0cq-I.mft (raw, json)
Hash identifier:          LzBEy0FmH2qew/joz/xbYoy1QR4+ceNT6ELZslOJPbk=
Subject key identifier:   B6:D7:52:8B:D2:DD:D2:69:E8:6A:AC:9B:75:30:C0:E4:F8:1F:D3:09
Authority key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Certificate issuer:       /CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Certificate serial:       018F4DFE3BA82C9A326023C333E03D93F710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
Manifest number:          1158
Signing time:             Mon 06 May 2024 13:00:57 +0000
Manifest this update:     Mon 06 May 2024 13:00:57 +0000
Manifest next update:     Tue 07 May 2024 13:00:57 +0000
Files and hashes:         1: 4UYAGfiAaeNhThUQkhzH5E0cq-I.crl (hash: jHExCoh8XW0OmWG+e92ECMwb2vNtXAYlvGJom1/e5Nw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:fe:3b:a8:2c:9a:32:60:23:c3:33:e0:3d:93:f7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
        Validity
            Not Before: May  6 13:00:57 2024 GMT
            Not After : May  7 13:00:57 2024 GMT
        Subject: CN=b6d7528bd2ddd269e86aac9b7530c0e4f81fd309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:60:ac:99:8c:9e:3f:2e:ca:a4:3d:4a:38:
                    31:65:52:0a:78:27:ce:1e:bf:a6:4f:d7:71:b5:fe:
                    78:c6:7b:b9:27:2b:20:b5:2f:8d:7a:67:73:9c:ec:
                    ef:cc:a7:70:b5:ff:e0:3d:4b:b9:e6:ac:2b:ce:b7:
                    9a:c8:4f:be:b8:73:6e:8b:2f:0a:c1:1d:56:9c:6c:
                    23:e0:20:33:88:1c:37:1c:fd:95:f2:ce:2e:6d:fd:
                    f3:11:74:b5:ae:08:28:33:d5:51:34:f5:40:81:86:
                    b5:af:61:cf:2b:25:bf:2e:5b:ac:1f:c2:43:de:f9:
                    75:e2:c6:3a:b2:12:13:96:b2:c9:1d:46:fa:3f:c2:
                    29:be:4d:99:41:9c:c4:ad:c0:ef:69:13:66:e3:1d:
                    40:6f:f6:29:eb:57:2b:34:81:19:43:65:9a:14:ab:
                    35:4b:96:ef:ac:d0:cc:48:d4:9d:04:fa:b7:f4:63:
                    03:fc:dd:85:1e:2d:4b:00:f0:9e:96:a8:76:66:f7:
                    ec:ad:75:30:d8:06:49:cb:a8:6a:db:61:2e:d2:3f:
                    dc:fc:bb:fd:5a:de:85:d6:61:04:10:2d:8f:f6:23:
                    52:ed:e1:9f:f3:40:6a:22:cd:8e:da:c7:b9:1c:e5:
                    0e:4f:9c:8c:cf:2e:d1:46:17:3c:bc:24:1e:6c:b9:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D7:52:8B:D2:DD:D2:69:E8:6A:AC:9B:75:30:C0:E4:F8:1F:D3:09
            X509v3 Authority Key Identifier:
                keyid:E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c6:4f:c6:07:67:84:57:b1:f9:98:6c:0b:dc:82:e9:da:84:
         75:3c:df:8d:c5:a9:35:35:f8:c6:d2:cd:05:0b:b3:29:33:0b:
         80:d2:be:d5:f2:48:e0:11:39:77:a6:95:63:fd:98:74:0c:29:
         62:17:22:fa:f6:27:23:07:37:8a:15:b5:5c:c7:da:be:04:36:
         f1:1d:2d:c3:b7:04:28:c7:18:66:5f:1e:5e:b0:f5:10:fa:54:
         63:7f:ed:8f:2c:88:2c:4a:d3:a4:af:d5:89:a3:44:08:d2:d4:
         1d:0f:42:3e:44:68:cf:36:fd:59:22:97:0b:90:8a:1e:bf:55:
         df:79:11:65:cd:00:cb:fd:64:37:40:52:6b:79:1d:53:c3:3a:
         af:db:8e:7f:05:7b:de:29:9f:3b:fc:da:62:ea:90:0b:5b:71:
         1f:4d:61:fc:f7:35:d2:ba:cb:d4:77:db:fa:d4:e3:18:b6:88:
         6a:fe:b3:03:c4:5a:56:fc:56:36:2e:9f:31:c7:ab:a6:74:80:
         c4:a0:57:85:a7:7e:bc:2b:74:82:f8:a7:2c:7e:c5:a5:6f:cf:
         80:ad:5b:c2:af:18:59:de:c3:fe:ea:c4:07:01:a8:33:2d:45:
         20:ca:16:32:c4:94:5b:d1:4a:c9:4a:72:b4:d2:8d:4d:d5:1c:
         6e:7f:d7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:12:30 2024 by rpki-client on console-fra.rpki-client.org