Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
File:                     EsMFQE6AtaTXDSHauG_FtrgBqLg.mft (raw, json)
Hash identifier:          ghr3xv0ML3zyjznTN1nXLDIbqMIuvdi6GSLpdFcW0EQ=
Subject key identifier:   30:88:DC:44:84:8F:DF:58:EC:FC:1F:B1:83:CF:30:03:41:12:E4:0B
Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
Certificate issuer:       /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Certificate serial:       018F41C4138E6C0160A316F13593C31486F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
Manifest number:          1154
Signing time:             Sat 04 May 2024 04:01:59 +0000
Manifest this update:     Sat 04 May 2024 04:01:59 +0000
Manifest next update:     Sun 05 May 2024 04:01:59 +0000
Files and hashes:         1: 4umJtXPvpt6ycshDdGMwxEV4_Iw.roa (hash: 172DBbJuLSebP9+Y+HOFsU0Y608KlCZsSjFeX4mDB/M=)
                          2: EsMFQE6AtaTXDSHauG_FtrgBqLg.crl (hash: ziQVQDUGYh8O31s0m1XVPbIinpWAtF77/zmKjzSqMKc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:13:8e:6c:01:60:a3:16:f1:35:93:c3:14:86:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
        Validity
            Not Before: May  4 04:01:59 2024 GMT
            Not After : May  5 04:01:59 2024 GMT
        Subject: CN=3088dc44848fdf58ecfc1fb183cf30034112e40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:3b:e3:ef:28:19:70:99:ef:ca:f6:0c:31:
                    53:8b:0b:1f:10:90:14:a3:0b:cc:53:35:db:24:c2:
                    85:2f:92:0d:9f:38:35:94:b0:32:9e:8b:c5:30:d0:
                    09:69:9c:9d:8d:ec:e9:2a:7a:cc:84:9e:57:09:e0:
                    4e:30:81:55:c9:bf:36:a4:35:fb:c8:45:d5:95:d2:
                    9e:fa:7d:8a:1a:9d:6c:76:42:44:77:37:48:5b:21:
                    d1:5a:6f:7f:62:2c:6e:d2:06:8c:34:49:ef:e4:8a:
                    7c:dc:05:fb:7f:fd:55:df:47:05:7d:80:2e:17:a3:
                    e5:8e:1c:e1:85:ed:99:59:f1:ff:18:94:9b:1c:90:
                    25:be:f2:59:ad:60:59:6a:22:8e:fe:2c:d6:c3:02:
                    82:d1:2b:43:7f:3f:7c:0e:66:67:ba:ac:c3:17:03:
                    34:06:ca:44:67:72:a8:00:94:53:3a:86:11:bc:c6:
                    a2:c9:fa:95:35:c5:8d:fb:6e:3c:7a:5e:d5:74:27:
                    9d:b1:89:0d:f5:fc:a8:b5:59:a7:a9:d2:7c:29:2e:
                    89:dc:89:05:89:e4:38:4e:87:58:cf:18:44:c2:19:
                    6c:e3:50:e5:b9:2e:5f:06:2a:6a:a4:a7:93:3c:2d:
                    1b:95:04:e8:57:f5:5f:7c:10:fb:e3:d5:70:f4:6b:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:88:DC:44:84:8F:DF:58:EC:FC:1F:B1:83:CF:30:03:41:12:E4:0B
            X509v3 Authority Key Identifier:
                keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:df:ed:8e:b6:ba:c8:4e:2c:96:c5:45:fe:9e:60:22:18:
         c0:b1:40:38:01:fa:06:89:e8:69:65:92:00:09:dd:40:d7:ba:
         d6:25:a3:c4:87:ba:a3:c7:1e:eb:47:78:4f:a5:d2:49:0d:74:
         59:96:ec:23:89:a8:49:07:28:d8:f7:61:82:98:34:a6:b7:5b:
         19:34:4b:5f:b5:f7:57:fe:62:02:73:bb:af:1c:72:57:82:a2:
         c9:9e:14:61:03:ad:7a:2c:94:29:ec:28:5b:09:17:0c:9c:5b:
         c8:15:76:94:d8:de:c3:29:49:39:5b:34:96:57:c8:72:c0:b5:
         35:6e:ce:73:0c:11:86:fa:5e:6a:3e:e7:81:a6:dd:ad:2c:85:
         21:ad:0a:7b:dd:dc:49:1e:dd:8d:2b:f3:83:88:ad:fc:e4:e6:
         56:e1:77:2f:15:e8:6e:d6:54:a4:66:73:1f:d9:e6:59:85:48:
         7f:30:dd:f1:c2:d6:e7:a5:4a:f5:2d:9d:61:b0:c0:d5:40:d4:
         8c:71:88:77:ff:e3:6f:da:c4:b9:6f:ea:d5:99:1f:0e:c4:a9:
         c4:68:7a:94:cc:42:41:1b:b5:8a:c8:72:d8:52:58:db:52:d4:
         39:c0:a6:66:0e:23:45:7d:69:cd:84:b0:72:0e:89:1b:40:f9:
         e0:ce:3c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:22:00 2024 by rpki-client on console-ams.rpki-client.org