Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
File:                     Eo8JYL8vv3DExJrhAd_y7MOYde0.mft (raw, json)
Hash identifier:          c70oO/h3vv6k7cegFbF+d/uR5wNhb/LobYlMeNn1zSk=
Subject key identifier:   EB:68:43:8C:D0:C6:C9:BD:47:68:23:12:61:4F:DA:06:D8:F3:66:3F
Authority key identifier: 12:8F:09:60:BF:2F:BF:70:C4:C4:9A:E1:01:DF:F2:EC:C3:98:75:ED
Certificate issuer:       /CN=128f0960bf2fbf70c4c49ae101dff2ecc39875ed
Certificate serial:       018F46B2AD983C7F8E702466C1970C7EE28B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
Manifest number:          1156
Signing time:             Sun 05 May 2024 03:01:05 +0000
Manifest this update:     Sun 05 May 2024 03:01:05 +0000
Manifest next update:     Mon 06 May 2024 03:01:05 +0000
Files and hashes:         1: Eo8JYL8vv3DExJrhAd_y7MOYde0.crl (hash: 44d9hVesdngb+H3H2iWxlX9ULqMf4bdahzuVNT0KH2w=)
                          2: kt1qjTv5x_27VMJKRA9CuwvbLbM.roa (hash: IHiFIN7m9pmzHg/39vNI+0N/0CzGmHOkLWTTwwl6KCY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b2:ad:98:3c:7f:8e:70:24:66:c1:97:0c:7e:e2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128f0960bf2fbf70c4c49ae101dff2ecc39875ed
        Validity
            Not Before: May  5 03:01:05 2024 GMT
            Not After : May  6 03:01:05 2024 GMT
        Subject: CN=eb68438cd0c6c9bd47682312614fda06d8f3663f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:86:37:6b:77:39:cc:77:2a:b6:a6:68:f6:
                    c1:4f:0d:1d:b5:ed:d3:a4:8a:a8:9f:28:0f:d9:49:
                    9d:21:f0:bf:a5:ab:fc:c4:76:92:38:ee:81:2e:ce:
                    e1:59:32:e4:1a:31:f5:cd:a5:de:4e:31:df:93:4e:
                    70:95:dd:e8:e4:b2:64:38:8e:bb:cc:c9:eb:e9:fa:
                    c3:b7:b0:42:5e:87:49:54:c8:e8:f7:ce:b4:b6:c5:
                    78:8f:12:b1:02:a8:9d:01:08:bc:65:ee:98:99:49:
                    70:eb:45:b5:c7:84:91:a3:92:5f:92:a7:b5:b4:eb:
                    75:d6:26:4b:a2:80:5b:0a:f3:28:12:f1:b1:74:d4:
                    b6:27:6d:7c:d4:1d:29:01:46:32:db:e9:df:78:52:
                    f4:55:07:6d:dc:b6:36:96:1e:21:b6:cc:37:ee:5e:
                    c2:69:3f:32:ff:07:fb:29:9d:1f:23:fd:5a:32:f6:
                    4d:12:f0:7a:8a:79:1a:9b:84:89:af:4b:54:1c:24:
                    ef:c7:25:c2:1b:04:c2:c5:88:da:53:cf:7a:4e:f1:
                    ee:55:be:e2:17:dc:57:04:32:72:73:c0:39:67:5e:
                    a9:d6:90:56:7d:6a:3c:e0:0b:01:44:13:3b:2f:4e:
                    38:14:a7:b6:83:6b:2b:f3:38:86:31:89:b2:d9:ff:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:68:43:8C:D0:C6:C9:BD:47:68:23:12:61:4F:DA:06:D8:F3:66:3F
            X509v3 Authority Key Identifier:
                keyid:12:8F:09:60:BF:2F:BF:70:C4:C4:9A:E1:01:DF:F2:EC:C3:98:75:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:12:4f:52:74:09:23:1c:68:68:05:6d:2e:50:63:bb:43:67:
         cd:d3:e4:e5:18:98:72:dd:77:eb:89:a7:7d:70:87:54:e8:f0:
         60:1b:cc:eb:f9:f6:b5:63:b5:8e:1d:b2:5a:7f:0e:2d:cd:8b:
         0b:0e:1f:dd:87:21:37:0d:53:27:52:70:b0:e7:ed:32:63:cf:
         8f:27:f7:c3:c8:79:e2:b1:c3:61:55:09:f3:2e:da:0f:fe:c4:
         45:b9:af:ee:b6:2b:a4:24:3a:6a:e4:3b:be:9e:e3:64:91:b6:
         c0:6a:37:d0:de:62:04:a2:a9:e6:07:3a:78:42:49:d8:1e:94:
         09:e3:6f:4b:79:10:00:57:80:bf:70:3c:32:a6:a3:d0:6c:5f:
         36:e8:c2:21:2f:38:76:eb:aa:b1:1c:e6:2e:2b:64:2e:ed:2f:
         46:1a:7a:ba:03:6f:49:21:54:2c:77:2a:4f:d1:e2:b9:ab:72:
         01:ab:ed:fd:9f:53:cc:81:02:02:f6:75:04:6d:95:e6:33:b4:
         4a:ce:6e:40:fb:77:78:7e:65:67:f9:e8:f9:b5:cc:83:d9:b8:
         f1:53:1d:dd:d6:5f:bb:29:36:58:88:c0:68:86:db:08:d8:ae:
         11:a1:79:8e:8c:51:82:cd:29:59:fe:47:25:40:07:8e:18:c0:
         20:af:d2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:41:00 2024 by rpki-client on console-fra.rpki-client.org