Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
File:                     Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft (raw, json)
Hash identifier:          H92fL1hDS0/iVkdRcIeMjY2TSlm3WYmJmAdBhvRj0uc=
Subject key identifier:   58:DF:B3:94:7D:2F:B9:4C:7D:99:0B:7F:97:6E:41:E9:24:81:1B:FF
Authority key identifier: 1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Certificate issuer:       /CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Certificate serial:       018F3A77DB0C47F0CE883D1E37D38F70E65F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
Manifest number:          1151
Signing time:             Thu 02 May 2024 18:01:24 +0000
Manifest this update:     Thu 02 May 2024 18:01:24 +0000
Manifest next update:     Fri 03 May 2024 18:01:24 +0000
Files and hashes:         1: Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl (hash: YOaEzrgTkX7b/O3Ek9/kBby95/r6m8q4q2CGHdFfwks=)
                          2: zPeth8kr-6sq0cvod7M8JqkXh4E.roa (hash: FRt03JJvJvJT7oigfkRucxUNcwt/8YQ440/MEF3u7/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:77:db:0c:47:f0:ce:88:3d:1e:37:d3:8f:70:e6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
        Validity
            Not Before: May  2 18:01:24 2024 GMT
            Not After : May  3 18:01:24 2024 GMT
        Subject: CN=58dfb3947d2fb94c7d990b7f976e41e924811bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:66:59:51:1b:ab:fb:e4:81:1f:73:fe:8e:
                    a6:6f:b2:24:b3:bf:ea:fe:4b:0e:a5:01:7d:f9:24:
                    59:39:12:6e:20:7d:7b:c8:d0:c0:bd:b0:d3:69:e5:
                    c5:17:41:f4:60:f5:ea:9c:9f:e7:2b:40:18:ae:64:
                    8e:59:46:0f:09:a5:42:56:6c:8b:cf:cb:70:4f:9c:
                    68:1e:f3:b9:1b:c7:e6:4e:97:96:6d:8e:74:11:19:
                    7a:57:9f:0d:bc:f0:3b:7c:a6:a5:83:86:35:76:ea:
                    1b:24:e6:6a:02:6f:12:f6:cb:06:d2:47:5e:b3:e7:
                    ac:ee:8c:d9:fc:3a:9a:91:84:73:38:3b:b1:71:30:
                    11:07:6b:77:08:07:57:a0:8c:35:e5:e0:c2:2d:a2:
                    00:22:dc:32:1f:68:78:ba:f2:88:8b:93:eb:06:b8:
                    50:98:fb:54:92:a7:e5:6d:06:d6:dc:9c:4f:00:d5:
                    28:74:7a:3a:8e:52:0d:af:6b:0d:3c:e3:26:5d:2e:
                    f9:6f:6d:92:1c:e5:31:34:6c:6a:40:f1:54:45:52:
                    9b:2f:e4:e1:99:5e:0d:24:45:df:b4:85:02:0e:7d:
                    81:96:36:34:1a:34:68:37:94:76:4d:c4:37:2a:71:
                    91:0b:db:84:57:01:b4:93:fa:a3:f9:c2:0b:16:d4:
                    15:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DF:B3:94:7D:2F:B9:4C:7D:99:0B:7F:97:6E:41:E9:24:81:1B:FF
            X509v3 Authority Key Identifier:
                keyid:1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cf:16:9a:99:11:cd:90:eb:e2:44:0f:67:9b:d3:ac:92:38:
         8e:97:16:a1:5b:d4:42:41:d2:d3:8c:a1:08:07:99:8b:c8:58:
         63:7f:2e:ed:58:d8:85:b2:ff:b4:0e:81:95:64:ef:92:1c:b2:
         6c:3d:66:e7:1c:d5:23:41:8d:2d:d3:21:32:33:93:f6:9f:e9:
         cc:9b:f0:c3:e5:46:2f:b2:3f:5c:47:c1:af:92:68:b9:c4:fc:
         d1:f6:dd:fb:3d:4c:08:6e:23:ae:2b:27:ff:cb:3a:db:bc:81:
         98:c2:fb:b5:da:ff:f2:ad:be:7c:1e:0b:8c:2a:a8:fc:18:49:
         ea:e8:4e:58:46:de:cc:f6:9d:e2:93:42:6b:23:d0:69:c3:ae:
         c8:85:52:21:f3:28:63:b0:95:b6:eb:11:b6:c2:9e:c5:5d:7d:
         49:75:29:a7:9a:ab:3a:62:63:85:2c:00:49:3f:a8:a1:13:21:
         67:20:49:17:af:3d:41:39:b3:1c:d0:d6:c1:ff:d6:ac:f5:47:
         5c:4d:6f:19:60:8e:bf:2b:62:98:c3:eb:d8:82:50:69:b4:0a:
         14:e7:06:b1:65:b2:a9:1c:bc:92:9f:4a:57:19:58:ee:12:60:
         5e:c7:72:79:6e:f3:1e:76:8b:b0:63:69:9c:66:7a:89:59:ae:
         dc:8e:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:22:11 2024 by rpki-client on console-fra.rpki-client.org