Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File:                     1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier:          Q8OPjg7EAkrxsLpiA7hdZ/jKRgLjvb7r+kPabsmn6Kg=
Subject key identifier:   38:C4:D8:FC:7F:38:59:FA:19:18:CF:3A:D9:6B:DD:34:C4:18:8C:E2
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer:       /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial:       018F5437C1900DEC91DFF7FFFBCC80722F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number:          0833
Signing time:             Tue 07 May 2024 18:01:31 +0000
Manifest this update:     Tue 07 May 2024 18:01:31 +0000
Manifest next update:     Wed 08 May 2024 18:01:31 +0000
Files and hashes:         1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: LejXlI2WYYDkF0vO+TAfbciOt4k0sWe4c+Z2gx36TVg=)
                          2: UXXjLOr2K-KqQ5kWAb1F3uKnyrU.roa (hash: hgNSCWzdXkdySn907ezNXGJhvw91Yvt0ZYVXGYcj3ok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:37:c1:90:0d:ec:91:df:f7:ff:fb:cc:80:72:2f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
        Validity
            Not Before: May  7 18:01:31 2024 GMT
            Not After : May  8 18:01:31 2024 GMT
        Subject: CN=38c4d8fc7f3859fa1918cf3ad96bdd34c4188ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:fd:12:d5:90:8e:86:da:f2:50:24:f6:6a:
                    cc:a4:30:84:fd:fe:1d:ad:32:97:e5:13:d1:81:21:
                    21:61:57:51:5c:bb:19:e2:c1:70:fe:61:e6:d3:85:
                    91:5f:52:1b:a6:65:cd:b1:60:b2:29:2d:cd:79:bd:
                    44:1c:9e:47:2c:b9:7e:46:d2:e3:db:65:34:e8:3e:
                    fb:04:f9:89:78:37:7d:e0:34:7a:af:b4:c9:54:91:
                    b2:3d:60:d3:19:32:48:70:5c:50:ee:d2:16:57:52:
                    1c:60:4c:00:20:f9:1f:69:d3:1b:6a:8b:f1:90:95:
                    c2:01:20:70:dd:31:87:43:7f:c8:f0:ea:a1:f5:82:
                    08:f6:92:0e:3a:30:b3:80:d2:0a:54:a8:6a:2e:ee:
                    37:28:30:49:5f:8e:6b:d4:12:4b:33:da:e4:73:73:
                    fe:ba:b6:44:f5:b1:24:1e:84:58:0c:8c:c8:86:8b:
                    77:3e:0b:bf:02:eb:bf:7e:ff:c9:a4:cf:29:bd:b1:
                    81:51:ad:bc:e1:42:32:8c:b8:76:07:21:95:8c:6f:
                    fb:ab:d3:8a:ae:30:3d:0f:f0:ee:39:06:39:59:71:
                    c8:c5:e2:dd:d3:1f:7d:4c:90:25:e5:2d:30:0c:ed:
                    50:39:02:ad:74:47:b3:56:e5:6e:be:d0:90:49:28:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C4:D8:FC:7F:38:59:FA:19:18:CF:3A:D9:6B:DD:34:C4:18:8C:E2
            X509v3 Authority Key Identifier:
                keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:79:8a:98:2f:bd:87:b6:c2:d6:bf:de:89:13:6e:c9:4b:55:
         63:ac:f4:6f:e2:5c:f8:51:47:9e:e4:13:2d:20:d2:48:df:68:
         13:8b:78:f4:fd:ee:df:58:21:54:36:26:6b:26:87:df:42:cb:
         14:26:5b:8b:1f:c9:ed:ab:24:0c:56:56:92:60:4a:c3:39:9c:
         5e:94:7b:4d:65:f5:81:58:a9:24:59:5f:e9:9b:ca:5f:07:c5:
         ba:ee:f7:af:e0:ed:bc:e8:02:dc:4f:52:8d:0d:9f:9a:9b:1d:
         5d:17:c8:ee:02:b4:e7:56:20:b3:31:73:10:03:73:e6:c1:39:
         bb:8d:df:91:f2:3d:c9:8c:7d:46:ff:26:14:0e:d3:34:c6:78:
         e3:7f:8e:fa:5e:a7:00:51:37:eb:7d:c3:ba:d0:92:f8:0d:bf:
         91:fe:cb:20:32:45:84:98:96:2e:51:f8:b1:67:58:63:83:35:
         84:e7:3e:53:96:24:c6:1f:e5:b5:28:1f:8c:5a:a3:8c:d5:81:
         22:cd:60:13:9c:36:10:af:4e:6d:fd:85:bd:2d:97:c1:c5:c9:
         c5:86:b5:e8:5c:1e:12:be:a4:66:1c:6b:89:13:af:07:a3:ae:
         3d:6d:05:98:3b:e3:f2:70:3e:18:53:32:48:a4:96:57:a9:e6:
         1a:79:14:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:56:19 2024 by rpki-client on console-ams.rpki-client.org