Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File:                     C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier:          DdvRsmUsThF3JjKVDkx2QZPVVRD3yKE+JebOd31l+Eg=
Subject key identifier:   1C:97:AC:4E:84:65:70:91:0B:D8:6D:63:09:FC:1F:59:89:33:46:5D
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer:       /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial:       018F2237EF1AECE14C9FB1F4107688A23508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number:          1144
Signing time:             Sun 28 Apr 2024 01:00:42 +0000
Manifest this update:     Sun 28 Apr 2024 01:00:42 +0000
Manifest next update:     Mon 29 Apr 2024 01:00:42 +0000
Files and hashes:         1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: 6V/0PjBC1bTWIMekbozBzIJSLFcC6pYnSuUsmN/Pe4Q=)
                          2: YIkX5nDUyyTC1C-nlS-KcF49pKA.roa (hash: AVqk7/lDwFwt1zamRirX7/7r7GuHH38660ETNk5p9CI=)
                          3: qY_XoIH9jF_8uuXilZGcgJXTMq4.roa (hash: EPiJG/vl8FiFLgPIgQq1ernzVWexgBCIHpdYTEjJlEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:37:ef:1a:ec:e1:4c:9f:b1:f4:10:76:88:a2:35:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
        Validity
            Not Before: Apr 28 01:00:42 2024 GMT
            Not After : Apr 29 01:00:42 2024 GMT
        Subject: CN=1c97ac4e846570910bd86d6309fc1f598933465d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:e0:fd:ff:58:84:2b:67:c1:76:90:c5:cd:
                    5f:5e:19:1b:35:18:4c:77:25:2b:43:e5:a9:30:51:
                    dc:4b:64:fd:22:51:d2:11:93:a1:a5:01:1b:cc:4f:
                    41:a8:42:ee:ae:98:05:bb:32:4c:ac:8a:96:e7:bb:
                    cf:13:4b:39:e0:63:4f:28:ce:af:45:87:b3:b8:45:
                    5c:25:99:90:44:3f:8d:83:45:9f:5d:31:66:71:d9:
                    87:4c:8c:fb:45:20:02:3f:76:f8:66:6a:10:e1:13:
                    69:53:78:4a:38:19:36:ed:80:30:39:97:3c:03:55:
                    88:c2:e0:f8:45:b8:5b:49:73:bc:63:32:7a:f2:db:
                    d2:29:37:55:e6:f3:10:44:ea:d2:1d:43:21:53:60:
                    f3:28:3a:f7:1d:18:d8:2f:cc:91:c0:f0:4a:59:5f:
                    bb:73:90:4e:f0:f8:85:92:d0:60:75:9e:7b:1c:d3:
                    c0:48:5a:41:07:08:2a:6e:9f:fc:5c:74:4a:50:1a:
                    5d:5f:5d:49:b8:c5:7f:30:cd:0b:b2:12:53:42:66:
                    ad:e6:0d:ad:67:f8:03:e3:36:7b:5b:a4:5a:fd:0d:
                    82:ee:2e:f4:6f:c2:32:fc:c8:b6:02:74:8a:3b:27:
                    b4:27:5d:c5:96:00:98:b0:96:5f:37:76:7a:9a:95:
                    30:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:97:AC:4E:84:65:70:91:0B:D8:6D:63:09:FC:1F:59:89:33:46:5D
            X509v3 Authority Key Identifier:
                keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:0e:96:f3:5e:03:7a:1c:15:e9:fb:65:1a:63:fb:ee:f6:
         da:82:37:5f:8f:ca:2f:32:c8:3a:0a:97:7c:ed:a2:9d:fb:92:
         d1:35:a3:88:54:54:35:60:d8:b3:fb:40:e5:4c:f3:fd:cb:3d:
         a7:73:3a:52:55:59:f8:ec:8f:e7:9a:1e:97:95:c0:5b:a0:84:
         e7:55:af:4c:c2:74:36:5e:9c:98:df:90:f0:84:af:0a:36:87:
         02:7a:43:2f:79:4d:e8:40:c9:ef:13:5b:20:61:07:95:a3:02:
         55:4d:a1:a0:0e:35:42:2b:c1:4c:9c:30:2c:30:5d:76:d9:d2:
         c3:3b:a1:0d:fb:91:df:67:8d:30:84:7c:84:5c:3a:df:0a:cb:
         1e:c9:cb:99:84:1b:0b:4e:61:b7:ef:9c:50:be:96:8b:0d:47:
         75:d5:e3:61:35:b1:0d:16:30:ea:35:60:74:98:75:50:18:ab:
         06:c5:c8:a5:97:f3:93:59:23:6b:39:d1:f8:a9:70:09:26:d7:
         f6:c2:b8:d2:30:0a:03:03:ba:ff:94:6a:d3:ad:8c:8a:48:2f:
         2e:0f:e1:75:80:4b:0b:ed:9e:5c:9b:a2:d4:c5:a1:59:c7:13:
         6c:83:9c:e6:ae:6c:34:f0:42:0b:7f:58:b5:83:b1:fa:bf:03:
         4c:07:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:49:37 2024 by rpki-client on console-ams.rpki-client.org