Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File:                     A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier:          dPc7+vqwu1xnM8SALKth5LL6KJNPpHpV5eaAItU0nOo=
Subject key identifier:   18:82:01:EE:A1:9B:C3:F0:42:A1:6A:4B:EF:71:CD:C7:3E:EE:2C:59
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer:       /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial:       018FDE9DECB8F7EC014E4E951870E7322A5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number:          11A5
Signing time:             Mon 03 Jun 2024 15:00:42 +0000
Manifest this update:     Mon 03 Jun 2024 15:00:42 +0000
Manifest next update:     Tue 04 Jun 2024 15:00:42 +0000
Files and hashes:         1: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: VkzcPZU/7uBL5wxaz4JPsYiCuXrHhSSTp5MESyU5Dto=)
                          2: rCTDNvSTU6UckdmJTW7MAEO6oMA.roa (hash: Ah36vnfCLKlh9YU8NvNCd2La+XVt6f3crasYjGYP5GI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:de:9d:ec:b8:f7:ec:01:4e:4e:95:18:70:e7:32:2a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
        Validity
            Not Before: Jun  3 15:00:42 2024 GMT
            Not After : Jun  4 15:00:42 2024 GMT
        Subject: CN=188201eea19bc3f042a16a4bef71cdc73eee2c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:35:fe:47:1a:9c:a1:53:cf:b7:eb:ca:60:64:
                    d8:40:99:07:15:7d:c6:7c:95:ba:d1:e6:10:15:3d:
                    55:99:b5:16:82:d1:d1:b9:0f:17:ee:b5:44:cc:8b:
                    d9:ac:72:66:86:55:d5:06:63:e9:1f:bf:db:c4:1f:
                    cb:4e:85:90:11:94:07:d3:47:29:bd:bd:a6:2c:62:
                    73:01:e2:9d:74:c3:e1:eb:61:50:84:e3:02:06:00:
                    79:db:1c:57:57:a3:fa:e5:d8:57:5e:e4:21:e3:f2:
                    8d:ba:e6:16:df:ec:2d:3d:1c:a4:63:e4:fe:26:fd:
                    04:b8:c1:aa:b5:ed:7a:5f:fd:69:72:e1:33:be:51:
                    a0:39:3c:e6:7b:20:b7:04:64:ab:35:5b:27:2e:38:
                    91:8b:f6:b0:fc:db:36:aa:a2:12:d6:46:1b:dd:ba:
                    4a:60:21:f1:b6:53:2a:2a:6e:6c:d1:08:be:a5:4d:
                    6e:9a:0e:66:2b:57:7a:e9:b5:92:be:1d:ff:76:9e:
                    ad:17:9c:1c:16:07:84:67:98:46:14:6a:8c:7e:6e:
                    0e:ea:4f:67:00:f5:5d:6e:db:64:54:4c:57:bd:5f:
                    92:42:1a:ae:16:1f:a4:10:7a:b1:6e:aa:21:2c:f8:
                    5c:3c:71:96:35:90:ad:cc:f2:d4:9b:bf:4a:f8:d5:
                    82:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:82:01:EE:A1:9B:C3:F0:42:A1:6A:4B:EF:71:CD:C7:3E:EE:2C:59
            X509v3 Authority Key Identifier:
                keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:bc:45:24:ec:cf:b1:70:88:d7:3e:f5:be:c7:62:67:f9:86:
         6d:45:c6:1c:ff:3a:26:4b:60:69:cb:af:e1:0d:3a:1c:f8:99:
         4d:ca:f8:83:55:91:d3:cb:fe:f7:2d:c1:e3:c6:aa:f2:19:2e:
         12:fb:a6:d7:63:b6:c0:91:71:8f:14:2c:4f:03:61:39:07:99:
         2a:be:0c:1c:a4:98:f4:18:78:3a:68:99:2a:01:3c:fb:63:7f:
         fa:08:00:12:86:f9:af:92:70:74:ad:cd:f4:d2:17:5c:3f:78:
         54:f9:73:36:28:40:13:cb:6e:2c:b7:96:a5:d9:c0:2e:0e:dc:
         96:b4:4c:f0:19:25:a9:0b:ee:f5:2b:b2:32:3e:ae:6d:98:33:
         07:6a:bb:fa:70:3e:6b:4d:fb:4c:d0:ab:0e:2f:a5:ac:e4:81:
         ce:be:8e:70:d7:f8:8a:92:4b:c3:06:ed:47:5c:f9:8c:11:fe:
         0d:f0:47:6d:b1:6c:ed:e0:93:ed:44:8e:fd:a1:98:06:a7:43:
         7c:57:35:16:55:24:8c:d5:c3:89:cf:9e:f8:27:5f:07:9d:d5:
         ee:55:a5:66:ad:2d:9d:01:84:7a:37:2c:4f:ab:be:c8:d0:c2:
         74:90:92:29:30:7d:e5:38:ed:31:35:e8:1e:b1:a7:b7:a9:1d:
         ad:d0:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 21:48:17 2024 by rpki-client on console-ams.rpki-client.org