Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File:                     1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier:          h9P37kSVxQS0vmKcpox/fjkqPvaJVHnQJ4ayt9keSNs=
Subject key identifier:   35:A3:5E:8A:68:25:5C:66:5D:CA:01:2D:19:85:15:7A:A8:16:10:70
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer:       /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial:       018F5515449814E5C4BB9F88E8AB606A849E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number:          05AD
Signing time:             Tue 07 May 2024 22:03:28 +0000
Manifest this update:     Tue 07 May 2024 22:03:28 +0000
Manifest next update:     Wed 08 May 2024 22:03:28 +0000
Files and hashes:         1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: ElsNdlD6oGG0ycjKWbKEM4vBFH53GvbN8FeoVFQGnl0=)
                          2: j2OIUl12VaV7xSp6IrsFriNKYVU.roa (hash: XV/2R5TKoYlrkyqc453jFONl5dam6l/J4kRfr4bU9fc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:15:44:98:14:e5:c4:bb:9f:88:e8:ab:60:6a:84:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
        Validity
            Not Before: May  7 22:03:28 2024 GMT
            Not After : May  8 22:03:28 2024 GMT
        Subject: CN=35a35e8a68255c665dca012d1985157aa8161070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:b8:3e:ec:a5:9b:5e:86:5e:35:75:58:8a:
                    a7:20:f0:45:e0:cd:94:fc:76:a1:8d:8d:67:89:77:
                    52:81:e4:23:83:5e:d4:65:53:dd:0a:99:87:41:2e:
                    00:1f:dd:f2:72:95:7f:02:c0:7c:2f:a2:f1:83:ef:
                    ff:be:e7:d5:31:7f:3d:b2:a2:77:0d:d2:19:4e:dd:
                    ad:0a:1f:5f:6f:0d:ea:d3:9f:f2:0d:40:f4:ff:9f:
                    00:8f:54:b1:63:f8:46:ec:75:27:49:43:b7:e4:bf:
                    84:68:00:60:0f:70:fa:26:a3:34:77:a3:a7:c8:17:
                    a0:20:f9:a4:fa:f0:ba:5b:03:71:09:eb:de:6a:9b:
                    82:e7:e7:2b:04:0c:4d:c1:47:eb:06:f4:fc:c7:e0:
                    ab:b0:0e:b8:73:fb:7a:98:9f:0b:bc:94:fc:ce:f6:
                    0d:0b:ea:7e:32:ce:0d:68:90:53:0f:b9:c1:a6:43:
                    a2:f6:a5:f2:3e:3a:4f:bb:ec:ed:3c:19:a9:44:e9:
                    c1:62:61:a1:d2:13:8a:95:a3:44:c2:c6:ff:02:b8:
                    b7:e7:03:75:f6:af:cb:86:24:5f:8f:79:31:ae:fe:
                    d0:89:4c:a2:4a:0b:b8:ee:59:24:97:66:0e:4a:11:
                    91:52:6a:50:46:47:52:81:05:33:cd:15:0b:d1:71:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A3:5E:8A:68:25:5C:66:5D:CA:01:2D:19:85:15:7A:A8:16:10:70
            X509v3 Authority Key Identifier:
                keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:92:82:09:6b:73:3c:01:34:25:f5:cb:51:35:87:73:ef:e9:
         de:a0:94:60:ee:e8:4f:c8:b1:07:4a:6b:08:76:45:6c:b9:79:
         68:04:59:ce:07:87:94:da:09:e7:7f:f0:76:27:64:aa:cc:54:
         90:b6:cc:4e:28:63:41:dd:00:a4:24:27:33:e2:93:6c:34:79:
         b1:a1:d6:01:51:bc:a2:4b:67:9a:88:a8:83:67:bb:99:c9:4e:
         f9:a7:0b:ab:fb:25:be:d5:d2:be:65:6a:e0:34:d0:34:3d:4b:
         9d:c3:c0:50:ad:30:38:a8:a0:dd:8b:9e:97:2a:7b:a4:4a:55:
         c9:67:26:5c:0a:5b:3e:ca:ef:56:d2:91:a3:70:7a:22:9c:f4:
         ac:b8:fe:18:45:71:38:7b:53:f9:fb:00:bb:d7:11:9f:44:0b:
         2c:e0:ff:17:0f:d3:03:c9:9f:d6:a8:11:1d:8a:2e:12:59:c3:
         73:5f:9b:ba:af:56:66:01:04:d7:24:09:c4:2a:38:25:66:c4:
         6e:19:d9:d8:c9:55:ed:ee:9a:ab:74:e6:d8:47:b4:44:5d:fb:
         4c:82:3c:bf:ae:5f:dd:a7:c7:b7:49:9a:f0:2d:a9:7c:03:9e:
         30:8a:40:42:aa:07:4c:a2:fb:08:c3:37:2a:3a:0a:6b:6e:ac:
         13:25:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:46:08 2024 by rpki-client on console-ams.rpki-client.org