Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File:                     4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier:          f1WFlbrCEhZAngyXAAdQ5SSdynJDjmB6nJbfTXc1ebQ=
Subject key identifier:   D0:72:A0:AA:B2:05:64:68:A7:2D:C4:95:D4:4D:F9:3F:DF:09:75:97
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer:       /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial:       018F4DC79E76B9F21A3FFFF00DB5298614C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number:          1159
Signing time:             Mon 06 May 2024 12:01:18 +0000
Manifest this update:     Mon 06 May 2024 12:01:18 +0000
Manifest next update:     Tue 07 May 2024 12:01:18 +0000
Files and hashes:         1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: LX+sHm5c0arbA8bhMssq3/Bi7Os9Qj68ftLXYCpibIo=)
                          2: GSvn5SuhMzwhcfo8MXNXa-7xFVc.roa (hash: wb4fVuqwsrs25yEZHnWcYNunokRVIgS0os/Ar9FnbaY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c7:9e:76:b9:f2:1a:3f:ff:f0:0d:b5:29:86:14:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
        Validity
            Not Before: May  6 12:01:18 2024 GMT
            Not After : May  7 12:01:18 2024 GMT
        Subject: CN=d072a0aab2056468a72dc495d44df93fdf097597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:15:b1:f0:67:5e:cb:4d:d7:c9:a6:13:e7:
                    56:45:a7:c6:90:bd:bc:31:d4:da:b4:c8:f6:ad:ee:
                    8b:b5:dd:f0:29:03:96:f8:ee:04:d5:f0:67:fb:a1:
                    ba:de:f2:5d:e8:5e:e3:bf:0a:95:5b:77:a5:90:a7:
                    bd:0e:5b:54:b4:dc:48:b6:f5:d2:1b:63:9d:0d:c3:
                    b2:bc:0f:20:be:f3:ef:31:c1:5b:d4:8c:b0:25:66:
                    81:e4:2d:69:15:c0:2c:e8:06:b6:ce:28:e6:64:a9:
                    3e:5f:e8:51:c1:c2:b3:c8:e3:11:98:e4:b2:fe:41:
                    db:68:6c:95:25:b8:e0:4a:58:c7:d6:34:62:ca:cf:
                    0d:c4:f6:da:dd:f5:9b:fe:2b:41:05:31:7f:72:3f:
                    1e:a8:37:29:64:27:8a:3e:ae:ca:d8:d9:22:e4:ae:
                    8a:47:7a:4b:59:d1:8c:28:5e:f5:97:89:6c:64:09:
                    9f:95:72:9e:74:24:25:71:f5:54:2f:94:dc:0c:f6:
                    0f:a1:74:6c:54:44:96:e0:aa:b6:d0:d0:58:d4:3c:
                    d8:e9:5d:70:d8:18:04:ec:7d:b8:06:17:14:14:94:
                    d7:aa:8d:26:26:d3:fc:d2:80:11:1c:92:cb:cc:db:
                    55:aa:cc:f1:b6:36:ae:b8:d1:fa:d2:9e:45:9f:69:
                    76:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:72:A0:AA:B2:05:64:68:A7:2D:C4:95:D4:4D:F9:3F:DF:09:75:97
            X509v3 Authority Key Identifier:
                keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f9:7c:a2:73:a8:8d:bf:f7:e8:27:d0:0c:9f:2d:e1:5d:61:
         68:ca:9c:93:7e:0e:2b:c8:70:bd:79:b5:fd:66:0e:c6:a8:3d:
         f2:69:03:f0:ac:f5:01:50:4c:85:91:23:eb:d9:b4:c9:8a:c8:
         d9:db:e0:99:5c:b6:72:9d:29:dd:c9:fb:89:f0:08:17:2e:48:
         ac:43:83:f2:8e:35:61:20:54:a1:e6:f7:be:98:cd:64:31:e9:
         bf:4b:dc:5c:04:5c:fb:ef:e0:c2:e5:a5:08:6d:b7:bf:0c:0e:
         57:6b:de:df:e2:3e:71:03:89:d4:9a:8b:b7:09:a5:0f:18:20:
         f2:55:b9:7a:a0:8f:97:9f:28:6f:a7:ad:ed:29:7c:56:d9:40:
         39:b2:03:e4:8e:48:32:eb:ff:9f:04:57:1d:c8:bb:9c:58:b9:
         05:d3:e6:cc:a4:12:81:6b:6c:ee:8a:06:47:4e:01:12:48:c7:
         2c:15:9c:7c:f9:6d:52:bb:a5:04:b4:b2:f7:69:fb:9d:0c:4f:
         7a:8e:47:f2:31:16:3f:1c:ca:3a:73:cb:9e:45:67:69:fb:91:
         20:8c:df:11:2e:2e:8b:c7:22:d0:eb:8d:e6:77:0c:22:1a:61:
         76:e3:f3:71:07:78:a7:6a:22:99:c8:d0:cf:0e:ce:e0:78:2c:
         ff:4d:6d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:13:00 2024 by rpki-client on console-ams.rpki-client.org