Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File:                     1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier:          vqCosYOTb0B9GJV6ywl7Y2ppoNiO7/dnZlaOqqiWdMk=
Subject key identifier:   AC:75:73:A0:C3:82:66:08:AE:92:AF:5B:2B:9F:44:15:DC:1A:29:34
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer:       /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial:       018F37769872146B375C5FF1182022885979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number:          1025
Signing time:             Thu 02 May 2024 04:01:10 +0000
Manifest this update:     Thu 02 May 2024 04:01:10 +0000
Manifest next update:     Fri 03 May 2024 04:01:10 +0000
Files and hashes:         1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: KA87oXp7uOPMLze8xhQEv3B+ZLVAB5KZKQbgxYzvk+o=)
                          2: aEqLiO7p8BrTYpGK8NCTiZeH0VY.roa (hash: fAOyPzse8dtqVSj9tzWnJZ7X9wBGPE9lFkibBDcZ0X8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:76:98:72:14:6b:37:5c:5f:f1:18:20:22:88:59:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
        Validity
            Not Before: May  2 04:01:10 2024 GMT
            Not After : May  3 04:01:10 2024 GMT
        Subject: CN=ac7573a0c3826608ae92af5b2b9f4415dc1a2934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ab:16:27:da:38:cb:7e:b9:a0:ac:08:b0:9b:
                    16:55:a7:8a:a7:a7:19:a1:1f:38:60:a1:1c:09:da:
                    a5:ae:4c:82:75:53:83:df:89:34:d9:36:c2:d1:41:
                    45:aa:a6:62:3b:32:6c:51:98:2b:7f:41:64:ed:2d:
                    b7:02:be:2a:f5:e1:a6:23:bc:bc:e3:8a:42:91:94:
                    69:03:9e:ed:cd:90:7e:eb:14:fd:24:95:56:26:c6:
                    ea:2c:6c:ae:72:e8:e4:2d:7e:2a:38:57:5c:c1:9f:
                    e3:15:a9:d9:c2:a1:44:75:c0:6e:96:62:71:dc:98:
                    05:d4:76:ab:ac:72:08:46:39:8b:e6:58:90:08:60:
                    f7:ff:0a:9a:0b:34:de:e4:4c:fd:7b:a5:c7:3e:11:
                    0e:e2:c4:4a:c2:74:42:a1:1e:43:53:70:ec:75:d8:
                    d4:61:f9:d7:1f:25:ee:d1:ca:62:f0:ca:01:2f:ef:
                    68:00:ad:f5:6b:ab:45:f9:89:67:f0:8c:68:6f:dc:
                    6a:8d:93:ea:74:96:6d:ca:44:69:17:c8:81:c8:e6:
                    9b:de:63:79:83:77:7d:6c:9d:90:2b:a2:2e:c3:4a:
                    2b:a1:2f:6d:3b:d0:cc:7d:f3:5f:b6:5a:af:81:f6:
                    d1:c0:e8:08:c6:c5:9a:75:46:4d:27:db:58:66:44:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:75:73:A0:C3:82:66:08:AE:92:AF:5B:2B:9F:44:15:DC:1A:29:34
            X509v3 Authority Key Identifier:
                keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:a3:9c:22:04:cc:cd:8f:31:24:c6:fa:d1:eb:c5:be:1b:be:
         ec:5b:3e:b2:30:95:f7:36:ca:9b:83:2e:5f:89:32:77:fb:d7:
         26:dd:10:73:86:a8:77:a1:41:67:f6:18:29:dd:52:27:0b:b8:
         d5:14:78:81:70:8a:bb:92:df:3e:23:a7:8a:d0:ac:6f:14:43:
         ae:9b:02:bc:70:ff:82:ff:68:36:bb:b6:3a:5a:2f:b9:79:09:
         af:c4:55:64:08:7b:3e:82:f5:bc:12:7a:11:8c:f4:a4:81:e3:
         ca:ab:35:cd:b0:8c:38:47:bf:cd:12:ca:61:d2:75:11:63:9b:
         04:a4:e9:32:ef:68:54:c9:1a:3c:0f:9f:11:69:5b:31:d0:67:
         eb:e4:f4:99:fd:77:06:06:c2:5a:93:ac:2e:95:16:f3:94:f1:
         62:1a:1c:2a:8f:35:9c:33:59:8e:e0:8d:40:d2:08:1b:5d:11:
         02:02:2a:9d:60:b5:bc:91:3c:88:22:4e:3d:0f:2c:a7:b6:09:
         55:6c:e8:81:49:ff:61:c6:b0:ca:a1:e2:e4:d2:a0:57:79:ca:
         d2:8e:75:24:2b:92:b9:3f:d3:c1:d3:ea:1e:19:fb:4b:02:69:
         07:d2:06:c0:f9:86:93:d6:4e:0b:be:c0:2f:f1:a8:f6:97:2e:
         c5:e2:98:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:36:03 2024 by rpki-client on console-fra.rpki-client.org