Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File:                     IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier:          G93VJWfy3UsLEyeq5ln+GHTR5bmUNRpIYVJ8GD65FMA=
Subject key identifier:   51:B6:9A:07:8C:F5:D5:56:20:11:B7:BE:73:EF:A5:C4:DD:AC:58:A3
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer:       /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial:       018F5248E87C5BC9A40B5953196E485B8920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number:          115A
Signing time:             Tue 07 May 2024 09:01:00 +0000
Manifest this update:     Tue 07 May 2024 09:01:00 +0000
Manifest next update:     Wed 08 May 2024 09:01:00 +0000
Files and hashes:         1: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: wCegg+XJ6oqyhZ6sYqXx0LneAJDPGMLDqMO3tSJxQMk=)
                          2: Z0YBTdG-ACym8dED58qgVY8QuAY.roa (hash: Gb032JReU0qd5WJ0Wqo6+R4CmrlqcLcHKbctHx8kuJ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:48:e8:7c:5b:c9:a4:0b:59:53:19:6e:48:5b:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
        Validity
            Not Before: May  7 09:01:00 2024 GMT
            Not After : May  8 09:01:00 2024 GMT
        Subject: CN=51b69a078cf5d5562011b7be73efa5c4ddac58a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:ca:3a:ed:81:0e:46:f4:e2:8b:07:6c:b4:
                    32:cf:82:59:8f:c2:69:85:8d:e0:af:de:dd:e0:e2:
                    bb:11:7f:b6:32:7c:b6:80:74:16:c3:55:46:23:54:
                    31:d9:55:2b:a3:7e:35:ae:17:7a:7a:b1:20:ee:91:
                    ed:1f:36:6b:54:10:56:4b:d0:42:e0:20:0a:2e:fa:
                    02:ae:90:9a:53:a6:b0:29:9b:f9:35:6f:0d:3b:d2:
                    34:96:20:64:23:01:2b:0e:a9:09:38:c6:fe:47:f1:
                    00:e6:57:1d:ef:b0:be:10:fc:1d:3e:be:9b:a3:7a:
                    9e:71:a1:4f:95:ce:72:9a:05:f1:d6:71:ab:7b:ad:
                    9d:67:57:84:81:55:ce:0a:df:06:98:d4:4f:c7:bc:
                    63:c0:4b:7d:c1:d8:f5:fa:bb:b1:4f:bb:70:a8:dd:
                    cb:af:02:d6:11:16:78:08:1e:2a:91:d0:78:a2:36:
                    86:84:78:5f:5a:9a:53:53:56:78:6c:d0:00:f9:20:
                    b1:5e:c5:30:b2:31:75:37:27:3f:5e:f4:59:ae:90:
                    ef:27:99:07:3e:92:b1:e5:61:df:f7:cc:fb:db:34:
                    8b:0f:22:43:c8:23:51:a6:64:d8:0d:4c:4f:e3:8b:
                    fe:95:71:6e:0b:f3:c4:48:e1:31:51:df:f2:d0:39:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B6:9A:07:8C:F5:D5:56:20:11:B7:BE:73:EF:A5:C4:DD:AC:58:A3
            X509v3 Authority Key Identifier:
                keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:1b:c5:bc:24:77:03:40:67:a9:0e:42:f8:f3:48:17:a4:55:
         82:ea:e3:9e:6d:cf:39:ef:a7:e6:d8:04:e1:b6:87:16:d1:05:
         12:04:17:22:42:fc:f1:b4:cf:63:75:14:df:e8:15:e9:82:ac:
         ce:64:d3:66:b4:b6:72:2a:8e:76:53:d9:bf:8d:b4:ad:71:23:
         1a:ca:c6:23:6c:39:53:97:16:07:9c:89:1f:62:9b:0f:72:43:
         87:5f:b8:94:6e:e0:11:96:6f:93:1c:99:49:34:07:cc:77:51:
         5c:07:3f:97:23:25:18:8e:c3:26:c6:9e:8f:58:94:65:fb:cc:
         74:9c:73:9d:1d:13:79:a4:09:45:8c:ee:a6:49:2a:da:a4:7b:
         2a:22:b9:08:90:fb:48:2b:87:3b:3c:e1:4e:0c:0c:73:dc:d7:
         10:c1:fa:2c:95:28:1f:d4:f4:d9:7c:2c:99:8f:f6:da:7f:70:
         93:05:cb:03:e5:01:34:5e:63:b3:fb:00:9c:a1:f6:b0:c4:6c:
         e5:6a:7f:5b:98:37:12:71:e3:70:28:19:5d:de:79:c5:82:03:
         bf:74:f3:c1:64:0f:27:7e:dc:9f:d5:6c:21:9f:0b:a6:60:b9:
         bd:b6:e3:01:f9:a5:54:6c:2c:d8:c8:8d:5b:ca:db:5e:e0:bc:
         73:70:7f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:47:55 2024 by rpki-client on console-fra.rpki-client.org