Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
File:                     4fLKlRgjMUpfTRCmangiOY-4iWs.mft (raw, json)
Hash identifier:          iQxwGAFimcxlMuW/uXJtNMZfpsHcS3afIYfIKsxqDFg=
Subject key identifier:   BC:16:2D:51:54:D8:F2:12:55:DC:F1:85:98:4B:B8:2B:7E:AF:6D:4E
Authority key identifier: E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
Certificate issuer:       /CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Certificate serial:       018F497E23C2D4E7E522874BAA971B650F64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
Manifest number:          1155
Signing time:             Sun 05 May 2024 16:02:34 +0000
Manifest this update:     Sun 05 May 2024 16:02:34 +0000
Manifest next update:     Mon 06 May 2024 16:02:34 +0000
Files and hashes:         1: 4fLKlRgjMUpfTRCmangiOY-4iWs.crl (hash: navVn/2gNecPNZNxUZQzIWpVA6WcprU1LhhslNe3CCI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7e:23:c2:d4:e7:e5:22:87:4b:aa:97:1b:65:0f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
        Validity
            Not Before: May  5 16:02:34 2024 GMT
            Not After : May  6 16:02:34 2024 GMT
        Subject: CN=bc162d5154d8f21255dcf185984bb82b7eaf6d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3b:d1:79:49:3c:f8:d3:cd:4c:c9:7b:8b:fc:
                    a7:28:5e:09:42:23:b4:ed:66:09:e2:0d:e4:1d:08:
                    56:7c:66:24:5a:a4:20:28:6d:26:51:e7:21:f3:91:
                    af:81:bd:89:e6:a4:a0:23:83:d3:87:ee:c0:3f:56:
                    fa:fa:1e:fd:68:ec:5e:6b:8d:8e:26:e7:d9:87:ef:
                    b4:89:aa:47:35:59:7e:3f:2d:70:df:b2:02:40:79:
                    54:46:de:d6:15:ba:1e:be:29:ca:1c:c9:f0:f9:7a:
                    b8:1d:31:53:ce:2a:99:b0:11:8e:ab:6d:7d:fc:01:
                    69:12:0c:7e:8c:6f:83:7f:34:10:8c:bc:c4:c7:07:
                    ce:48:e5:e4:89:8c:1d:d1:99:de:03:de:d3:f8:dd:
                    f9:89:74:85:0b:d3:b6:6e:bc:68:be:9e:05:23:99:
                    5a:91:35:65:7f:47:ee:8e:f5:7d:f6:33:14:ad:09:
                    b3:5c:f5:33:b3:1b:20:15:86:81:94:db:e6:3c:da:
                    8e:27:06:1c:74:93:20:56:f0:51:4b:96:d3:74:07:
                    2b:13:13:71:d9:90:a7:8e:ca:9b:ff:31:e8:80:53:
                    4f:f0:1a:69:8d:50:8b:c7:98:af:9e:49:3c:39:ef:
                    63:d3:66:14:1e:45:72:bd:3f:91:dd:40:57:84:9b:
                    15:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:16:2D:51:54:D8:F2:12:55:DC:F1:85:98:4B:B8:2B:7E:AF:6D:4E
            X509v3 Authority Key Identifier:
                keyid:E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e9:61:3c:bc:9c:81:f3:ef:dd:3b:32:28:bc:cc:b1:5f:c1:
         b5:e5:75:8c:6f:70:29:7b:0c:f7:e1:f3:64:83:e5:48:10:41:
         17:bb:f9:dc:9b:22:02:6f:1c:83:e4:8e:6c:65:12:9f:22:8a:
         3f:1f:e5:0f:fc:58:e6:0e:07:54:44:59:33:9a:68:e4:5a:68:
         e4:9b:c5:2e:ad:f9:08:15:69:68:fd:13:14:61:bd:e9:0d:e9:
         cd:92:ac:96:83:33:e9:80:0d:d4:2d:54:6f:d5:c4:7c:26:e7:
         68:6e:e8:f0:74:5b:5f:41:7a:9c:91:7b:df:f7:05:a2:a5:bf:
         53:2f:49:70:28:b0:11:ae:05:75:2d:da:75:47:ef:01:8e:53:
         45:f2:8b:fe:a5:86:98:ad:fd:d7:f4:8f:c4:ec:ef:72:0f:9b:
         36:3d:67:cf:ce:3c:e8:28:1b:d4:a4:bd:d4:c1:01:38:4d:d3:
         63:c2:13:5c:6c:13:04:56:cc:51:c4:19:a1:5d:39:05:e8:3a:
         b7:5a:19:97:3f:b1:66:d7:bb:b6:d2:91:47:da:e1:7b:49:39:
         aa:37:bb:74:35:b0:88:0d:0e:cc:e3:c0:c1:16:b3:85:64:80:
         77:61:7e:e4:1c:99:1a:04:07:32:0f:8b:98:de:0d:2d:02:ab:
         62:46:0e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:39:03 2024 by rpki-client on console-ams.rpki-client.org