Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
File:                     4MijkN3l4VGaS9PadUqT6YhJLWc.mft (raw, json)
Hash identifier:          OelnuE9/1wd1vQ1PEzKK6laSXVlfnLlnIOxAqpHr35o=
Subject key identifier:   31:61:BA:6B:12:90:F1:39:40:08:E2:13:73:4C:43:42:79:82:F7:46
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Certificate issuer:       /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial:       018F392DEF42FDA131B5ADA5D30C6F0725A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
Manifest number:          1159
Signing time:             Thu 02 May 2024 12:01:02 +0000
Manifest this update:     Thu 02 May 2024 12:01:02 +0000
Manifest next update:     Fri 03 May 2024 12:01:02 +0000
Files and hashes:         1: 4MijkN3l4VGaS9PadUqT6YhJLWc.crl (hash: 4y8PJZzyHqlMrvlMtWgcAu9AXH4E4OtJrxXBeF+cddI=)
                          2: eRQq7xdAF71WNxYwFEqj0VQq7OI.roa (hash: TI4SCrAwR2nfidiEalk8VtvkciAJLMg2lfIRktNOCB0=)
                          3: u1FkzvMrnDDsYV9YzWwvjccKIRY.roa (hash: 29v2bkMd5dO+k+fy1SprmZ0A/LMc1B9Ub43CbyFToW4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:2d:ef:42:fd:a1:31:b5:ad:a5:d3:0c:6f:07:25:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
        Validity
            Not Before: May  2 12:01:02 2024 GMT
            Not After : May  3 12:01:02 2024 GMT
        Subject: CN=3161ba6b1290f1394008e213734c43427982f746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:34:73:7e:60:f7:0d:07:4f:5f:e0:be:f9:
                    70:c2:b1:cb:30:87:65:f3:83:ec:f0:c7:6d:e5:7b:
                    a2:f4:df:27:d1:86:dd:2a:13:99:01:77:a7:81:a7:
                    96:93:01:23:5f:8b:d1:27:30:cb:5d:9e:61:78:3b:
                    7e:c7:73:6b:b5:19:2c:71:8d:98:91:11:1e:32:9f:
                    2b:48:d9:00:d8:88:bc:e8:4d:98:2e:36:90:68:c7:
                    16:16:e1:24:7f:2c:6b:c7:d6:26:62:06:9a:22:28:
                    f3:88:8c:bf:1c:26:9b:cc:7b:d1:0d:cc:91:d5:19:
                    98:d1:f7:e7:3d:97:cc:50:35:b4:84:7d:21:d0:55:
                    8a:97:fc:25:1d:b9:35:8d:09:09:71:ef:f3:73:a7:
                    08:b0:e2:01:00:01:6f:77:84:10:60:d9:89:c1:03:
                    ad:da:c6:a1:98:9a:83:b3:8c:dc:10:b3:a9:f6:d3:
                    0a:b6:fb:58:7a:3d:6d:91:d4:3a:58:3d:b5:54:36:
                    fa:c9:a1:94:ca:8a:3b:f7:95:a9:35:2f:c6:af:93:
                    a8:03:36:0f:ad:08:8f:a5:b3:1c:d1:5b:53:d0:f8:
                    b2:cb:83:c2:cb:55:c5:79:dc:1b:20:4e:2e:da:e6:
                    3e:a7:b5:83:96:2d:b8:29:53:79:b7:7f:62:13:31:
                    20:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:61:BA:6B:12:90:F1:39:40:08:E2:13:73:4C:43:42:79:82:F7:46
            X509v3 Authority Key Identifier:
                keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:d0:9a:95:89:e7:91:e1:48:c2:6b:27:5c:ec:7a:f8:d5:
         cd:02:f3:29:1d:16:91:8e:44:0a:c7:01:71:14:5a:c2:c9:fc:
         3a:32:0f:97:0f:02:f2:7e:85:a7:95:c6:36:42:06:51:2d:d5:
         2a:d4:44:00:0f:87:97:b3:38:55:d6:e7:bf:95:b7:e3:5a:c9:
         b2:ae:9f:cf:74:b7:bb:c1:80:d1:cb:71:1c:27:f4:d4:df:9e:
         dc:c2:30:eb:71:75:d2:6c:d4:d0:0f:43:6c:85:c7:52:d8:a4:
         25:3f:f4:a0:35:9f:09:85:6d:c7:8a:8b:41:9f:39:65:a0:c9:
         bb:4b:bd:92:82:20:94:77:6c:99:b2:af:4c:15:d9:cd:8c:41:
         43:f5:29:88:4e:70:7e:49:f5:d8:f0:5c:8e:f8:ed:13:f4:8f:
         f9:57:aa:62:fd:ef:4c:6c:89:a1:53:c7:37:20:16:b2:66:01:
         a6:55:82:74:84:87:59:b9:b5:a3:d3:86:e4:23:67:18:90:4c:
         cc:38:3a:3d:7e:33:b6:bb:81:de:56:d4:0b:70:1f:05:7c:f9:
         11:d0:80:86:3c:53:4a:ff:74:15:ff:eb:a9:90:7a:e1:09:61:
         61:c1:d9:61:7e:d1:c1:df:6f:f1:d9:df:20:85:d4:6b:77:97:
         c2:6d:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:33:38 2024 by rpki-client on console-fra.rpki-client.org