Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
File:                     5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft (raw, json)
Hash identifier:          L8xm+0QNiIMT5qUql7DYtko5cFdmUePfhQrpF7yi9Es=
Subject key identifier:   A9:1F:31:D2:6D:CF:50:7E:0C:D9:E0:32:B4:E9:51:6E:4B:9B:1A:98
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Certificate issuer:       /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial:       018F3A0A3E4FEBBC3BFC2060C95CFD78D063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
Manifest number:          1155
Signing time:             Thu 02 May 2024 16:01:40 +0000
Manifest this update:     Thu 02 May 2024 16:01:40 +0000
Manifest next update:     Fri 03 May 2024 16:01:40 +0000
Files and hashes:         1: 4FckcTTEYGutVsY6vJzSvWea_Ww.roa (hash: s6yB5XnI0obLAqUHFCL444PLW3YSvL2sVLQsLSlbrZU=)
                          2: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl (hash: WS1844tGEkKl+wpaMdHjb/CHR/PWFKy7cZclpjUWzsc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0a:3e:4f:eb:bc:3b:fc:20:60:c9:5c:fd:78:d0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
        Validity
            Not Before: May  2 16:01:40 2024 GMT
            Not After : May  3 16:01:40 2024 GMT
        Subject: CN=a91f31d26dcf507e0cd9e032b4e9516e4b9b1a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:cb:c3:93:91:ee:31:e0:ae:27:e8:04:0e:
                    f3:c3:0c:19:4c:ba:b2:4d:d7:ad:77:61:41:be:86:
                    a6:63:6d:d7:90:40:e5:02:e2:2b:7f:89:e6:7f:97:
                    53:f7:3a:a9:12:3b:81:bc:02:30:cf:72:54:8f:88:
                    c0:00:9a:b2:cd:72:cd:7c:31:39:48:6b:06:3f:2c:
                    42:b1:8a:03:dc:44:8c:2c:ea:e7:6a:fd:46:f1:6a:
                    d9:ce:ee:c0:19:8e:71:0b:44:d8:44:75:83:ca:39:
                    a5:ed:6a:6c:53:ab:e3:e0:01:28:3e:f0:9d:79:39:
                    e9:94:9a:e0:e2:a9:53:d6:89:22:bb:b4:c8:9b:cb:
                    4b:8b:21:68:46:19:15:95:0d:c4:59:01:c7:d3:27:
                    6f:ce:7e:fd:9f:55:23:a7:7b:d9:12:4b:b0:87:82:
                    86:06:14:81:84:24:f1:c0:07:7a:d3:cf:d6:15:2e:
                    41:b8:7b:1b:eb:e6:83:de:8d:41:8f:c5:40:32:bd:
                    59:3b:54:87:a8:2e:7f:0c:14:3d:df:97:34:60:70:
                    0d:8b:82:75:73:e6:67:2f:9b:6b:65:b2:b7:b5:78:
                    75:9d:35:b2:57:31:cd:d8:7e:19:23:cb:27:98:e7:
                    da:86:24:cd:06:29:eb:3f:18:f2:d0:bd:de:0d:6d:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1F:31:D2:6D:CF:50:7E:0C:D9:E0:32:B4:E9:51:6E:4B:9B:1A:98
            X509v3 Authority Key Identifier:
                keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:68:cf:9c:16:11:44:a1:a6:59:36:72:8e:02:b6:1e:97:e0:
         e3:f9:6d:2e:58:68:1b:7d:1e:62:93:cb:a7:19:12:da:19:0a:
         12:e1:14:09:e1:9e:d2:00:06:ec:8f:e6:e3:16:3c:eb:f2:86:
         68:eb:7b:69:4e:5b:e8:98:af:c3:41:94:b7:68:a5:6d:93:14:
         92:8b:e9:04:47:a1:cb:6b:59:f9:c1:8b:a3:56:c5:a6:65:eb:
         6f:98:57:de:71:78:eb:4b:60:7c:88:08:50:5a:a3:4b:48:95:
         d8:7f:a3:e5:5d:29:dd:52:25:54:1a:fa:6c:72:60:d8:b9:bd:
         b7:67:60:f8:82:d8:28:04:27:51:33:e5:1d:61:bb:b4:2b:38:
         35:17:72:13:83:49:c2:53:0f:1a:ca:1d:7d:28:77:37:cc:18:
         e8:15:00:06:9b:44:68:63:b1:0c:53:3c:16:6b:7b:29:e5:00:
         34:36:ee:31:95:b9:3d:f2:a9:39:c1:9b:82:d1:55:06:0b:ec:
         fa:85:bf:c5:71:01:f9:ed:08:d5:ac:c2:47:20:d6:e5:6b:57:
         22:59:15:cd:b9:6b:fc:41:33:00:d4:b5:49:f7:f9:ad:50:b2:
         e3:b5:62:33:dd:d3:a7:5b:ac:18:0d:50:9b:a6:c3:7f:47:63:
         25:d2:0b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:58:59 2024 by rpki-client on console-ams.rpki-client.org