Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
File:                     6p03bVRB9Is91QhRWxb-lcWhF4I.mft (raw, json)
Hash identifier:          4JkphW6nWRjhLSiFU5eg3sp4a0nIwKsihQukq+tfQcE=
Subject key identifier:   A3:96:28:67:D5:1F:5F:E4:EE:3F:38:20:69:D9:C7:F9:D2:D0:F3:5C
Authority key identifier: EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
Certificate issuer:       /CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Certificate serial:       018F467C1504A35BC715922C5EB8B85A859F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 02:01:27 +0000
Manifest this update:     Sun 05 May 2024 02:01:27 +0000
Manifest next update:     Mon 06 May 2024 02:01:27 +0000
Files and hashes:         1: 2_jN3p028Q_r-wmEKlXOZ2vje1U.roa (hash: a+X+AiOLkls8T+1hRkCH+a9kbD5QmcC+ArtCFjS9LR8=)
                          2: 6p03bVRB9Is91QhRWxb-lcWhF4I.crl (hash: 1TOKRqoKGkrmgsxXMazZLq58MwXz68EKA/PFF6h5EGE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7c:15:04:a3:5b:c7:15:92:2c:5e:b8:b8:5a:85:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
        Validity
            Not Before: May  5 02:01:27 2024 GMT
            Not After : May  6 02:01:27 2024 GMT
        Subject: CN=a3962867d51f5fe4ee3f382069d9c7f9d2d0f35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:59:0c:54:9c:98:f5:51:80:ea:31:e4:bd:
                    68:f0:1c:b4:d9:1f:1c:5e:9d:2e:8e:3e:04:d0:8e:
                    05:f2:dc:0e:23:33:96:bc:96:be:14:84:bf:ed:b7:
                    b2:cd:96:11:b2:2e:a8:d0:b2:f6:34:4a:cd:81:59:
                    32:0a:71:71:86:a1:f6:ac:6d:e8:9b:7d:9e:85:16:
                    a5:1c:c3:1d:78:f2:2a:f9:af:53:4e:1b:56:1c:ed:
                    18:2a:1e:cd:3e:55:a1:78:7c:6c:f2:c8:83:89:a8:
                    09:62:26:74:ac:ee:36:fa:33:66:00:e3:99:7b:36:
                    43:98:1a:9e:09:0b:f6:3a:b2:e2:bd:53:25:4a:9b:
                    be:df:ab:a1:ac:86:a3:5e:90:02:9f:f3:ab:54:29:
                    34:fd:13:37:79:40:2e:b7:5d:5b:be:65:de:62:75:
                    cf:14:a8:a6:15:ba:c1:cb:c5:c0:14:21:8e:03:af:
                    53:e9:8e:cd:92:20:9b:38:96:cb:64:be:6f:ec:78:
                    90:10:7c:6f:7d:71:31:e0:82:e9:d8:71:0a:44:49:
                    27:eb:0c:8a:6b:84:aa:d9:f4:0a:f9:15:23:48:1e:
                    66:2b:cb:d3:43:a9:cd:38:69:35:eb:a8:d5:47:0c:
                    8f:4e:21:70:16:c7:31:09:9d:c7:ca:b0:67:2f:fd:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:96:28:67:D5:1F:5F:E4:EE:3F:38:20:69:D9:C7:F9:D2:D0:F3:5C
            X509v3 Authority Key Identifier:
                keyid:EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:09:d2:77:6f:59:de:1a:6e:8b:04:74:17:9f:b0:60:4f:
         a1:d4:9c:c1:30:8b:a0:d5:8f:0b:e9:b9:4d:3c:10:03:65:fe:
         41:3e:34:5f:ee:9f:54:41:ba:95:80:4c:b5:4e:8a:0a:23:a2:
         ce:2d:85:22:df:6b:7a:70:e5:5b:61:9d:94:a6:c3:2f:34:97:
         5f:2e:6d:e7:20:cc:ec:d5:b2:a2:22:90:53:62:ec:81:1e:c8:
         e1:21:ec:f2:a3:4b:9e:68:f2:ea:d7:07:45:19:a4:d9:42:1c:
         d6:e0:01:92:50:a0:db:ad:34:12:44:f2:e7:56:db:21:d2:de:
         ef:7e:52:79:33:c6:41:e9:21:4d:54:56:55:72:ed:50:b5:26:
         22:ed:66:29:66:58:5a:2a:11:3d:24:4a:8b:ee:63:b1:c0:80:
         49:23:1e:13:eb:e8:23:eb:8a:d1:3d:37:41:f8:e5:b9:3d:cc:
         c7:6b:c4:2d:09:87:d9:c3:32:95:93:e1:b0:2d:f7:08:37:96:
         19:73:6b:42:93:e4:12:38:a1:07:b2:87:dd:bb:1d:61:6e:b3:
         c0:ea:01:29:28:f4:16:e5:e1:6a:67:2e:95:16:32:45:e2:7e:
         28:68:0f:1a:b6:53:ae:ff:78:7d:82:18:41:2f:90:a8:8a:d4:
         66:20:1a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:01:17 2024 by rpki-client on console-fra.rpki-client.org