Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File:                     2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier:          8FroCntqgxvmsd//OcoT3SJfoRvBzddXxjuWZisElT0=
Subject key identifier:   C2:4E:53:4B:BA:81:89:EF:27:BA:61:1D:8B:EE:A8:2D:F4:77:CD:BA
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer:       /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial:       018F43B3B9A98E292F090AC2A8A0DE439D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number:          1157
Signing time:             Sat 04 May 2024 13:03:22 +0000
Manifest this update:     Sat 04 May 2024 13:03:22 +0000
Manifest next update:     Sun 05 May 2024 13:03:22 +0000
Files and hashes:         1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: g6u6e1i+HBnP+3nqPBiFlIjlS4djI67ueWQ2zbEkrU4=)
                          2: N4GCRMBxgcgjmOFagbW6SL3DML0.roa (hash: n3PsRSnzHXTDXcfbplvBJ8vScEwSGsuTqHIhyWvZl/g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:b9:a9:8e:29:2f:09:0a:c2:a8:a0:de:43:9d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
        Validity
            Not Before: May  4 13:03:22 2024 GMT
            Not After : May  5 13:03:22 2024 GMT
        Subject: CN=c24e534bba8189ef27ba611d8beea82df477cdba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:80:f5:f2:49:1c:6e:ed:ad:23:90:8a:b3:95:
                    9c:fc:c7:b7:a2:03:db:de:2d:99:5f:56:22:7c:00:
                    17:2b:52:06:a0:2e:40:1f:a5:72:5b:c2:05:8d:3c:
                    58:84:52:12:95:4a:b0:48:f2:da:24:b8:d4:a9:8c:
                    a8:b6:93:92:15:4f:3c:39:3b:64:b0:29:5c:e6:34:
                    ed:72:83:b5:60:b7:19:1a:c3:4a:c0:81:96:c4:7d:
                    d0:72:61:e4:aa:c7:ab:98:0e:a0:64:b2:95:ee:09:
                    fc:d9:90:33:37:27:83:04:0a:7f:ad:da:39:a3:c9:
                    f2:95:32:33:15:9a:af:66:5d:7a:2c:9f:bc:86:8b:
                    b9:8b:13:f0:43:96:c6:20:01:da:9f:f2:1c:f6:8d:
                    59:4a:cd:2d:d9:a6:0c:26:33:83:25:a0:49:05:f9:
                    20:89:5c:4c:91:cb:0f:1b:b6:0a:bf:2c:78:3e:c5:
                    3e:7e:41:c6:48:dd:18:34:2b:3f:83:6f:e0:40:d6:
                    fe:c1:42:b4:8f:c0:65:3d:99:bb:ae:6b:8b:75:e0:
                    51:48:3c:b0:7a:67:dc:43:03:27:e7:34:60:1c:4a:
                    b1:ef:87:fd:1b:de:45:06:ea:c5:c1:5a:93:1f:3d:
                    f5:6b:91:21:04:7e:d6:18:6b:2b:d7:f2:85:bc:f5:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4E:53:4B:BA:81:89:EF:27:BA:61:1D:8B:EE:A8:2D:F4:77:CD:BA
            X509v3 Authority Key Identifier:
                keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:16:f5:a3:e8:09:d4:a7:4b:6f:ee:5e:0a:24:7a:6c:93:dd:
         c4:7b:ae:e0:7b:e9:0b:f7:5a:4b:5c:5e:d7:3e:ad:f7:e5:ce:
         25:f3:54:8c:56:60:59:61:26:6e:3e:47:f3:04:f0:c4:12:da:
         48:01:f6:05:37:cf:76:88:81:f1:b9:87:d8:d6:5a:db:35:89:
         2e:bb:02:ab:fe:ce:8c:8c:a9:67:90:27:c6:99:9d:20:9f:e9:
         eb:22:c2:6e:86:89:cc:10:8b:c4:3b:cf:41:3e:ca:a0:1a:97:
         63:ef:fa:d5:90:42:33:4f:94:9f:e8:d1:26:17:3a:0c:38:90:
         f1:3c:71:17:b4:c9:d3:29:e7:ad:7c:fa:f2:03:69:a4:23:20:
         17:a9:93:e9:6f:59:ee:d0:12:84:e3:4e:bb:9f:71:ac:fa:56:
         68:fd:13:71:86:db:76:e6:d2:43:61:02:c0:2a:da:29:bb:9e:
         59:d0:13:ac:80:97:ab:aa:3e:30:8f:7f:11:b9:fc:50:e5:c7:
         32:fd:44:9c:ad:2d:50:50:e9:ac:f7:5a:92:93:21:16:bf:96:
         23:90:a2:01:55:bf:84:88:91:d1:c0:9a:d5:15:65:81:02:d1:
         d7:2c:e2:8c:0f:5d:86:9b:73:44:88:a6:39:45:e0:b0:19:7e:
         f3:0d:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:11:08 2024 by rpki-client on console-fra.rpki-client.org