Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
File:                     79kZGXhjH8lVrA9RBi1c6YROrgM.mft (raw, json)
Hash identifier:          N8fiwI3oYEenacUn8rFYzCDXiiXQaE/kfOBpKRnGh4Q=
Subject key identifier:   30:79:E6:66:19:25:2D:42:ED:4C:F1:73:FB:83:89:44:7A:A0:D7:C9
Authority key identifier: EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
Certificate issuer:       /CN=efd9191978631fc955ac0f51062d5ce9844eae03
Certificate serial:       018F43B2958C616F18D4287A843F359BF9FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
Manifest number:          1152
Signing time:             Sat 04 May 2024 13:02:07 +0000
Manifest this update:     Sat 04 May 2024 13:02:07 +0000
Manifest next update:     Sun 05 May 2024 13:02:07 +0000
Files and hashes:         1: 79kZGXhjH8lVrA9RBi1c6YROrgM.crl (hash: 62kQ0AQG0/PCzuMGkrxKS0ixQ4Pve95/JWl7Dz76ELw=)
                          2: GkGTKHETtAkitTVR34uyJJ74gmo.roa (hash: Ty7s2tNNTXLRTuCWpjqvjalI2xZiuYxx7r3PSuN8wVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:95:8c:61:6f:18:d4:28:7a:84:3f:35:9b:f9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd9191978631fc955ac0f51062d5ce9844eae03
        Validity
            Not Before: May  4 13:02:07 2024 GMT
            Not After : May  5 13:02:07 2024 GMT
        Subject: CN=3079e66619252d42ed4cf173fb8389447aa0d7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a6:af:3b:f8:1d:14:97:c0:5d:b1:2d:dc:00:
                    ca:e6:0b:fe:fa:c9:98:91:51:5d:92:9e:05:4f:13:
                    18:19:26:fc:3d:7e:de:d9:58:3b:1f:62:1d:de:c4:
                    89:9d:97:8f:27:e1:ba:2d:7d:d7:d2:81:12:c9:12:
                    95:d1:2a:70:bc:bd:78:af:5c:12:4a:89:b0:4a:1b:
                    be:e2:43:3e:b0:39:75:6b:1e:58:13:98:72:9c:c1:
                    97:89:10:2d:20:f0:8a:50:eb:d6:08:5b:cf:03:d6:
                    a2:48:bf:8a:de:1e:e3:27:04:37:4c:8d:5c:39:37:
                    03:72:ac:65:f3:aa:f2:5f:ff:cc:8b:40:df:41:ba:
                    fc:62:8e:85:5d:c8:59:01:de:a0:b4:f0:f0:5a:ab:
                    e9:f2:f7:63:d3:a4:92:98:35:72:6f:79:b3:9c:0b:
                    20:a3:96:c5:1e:14:3c:a6:d8:7b:0c:90:c5:a4:f6:
                    64:96:2d:06:b1:f9:ed:28:84:6c:db:b3:d2:d3:9d:
                    7b:42:a5:99:eb:cd:12:55:72:54:87:cc:c0:eb:1f:
                    7f:26:5a:9e:3a:8f:a5:7f:8d:db:d6:68:ee:1f:18:
                    42:11:a5:09:97:18:83:3d:aa:b3:24:f7:bc:64:6c:
                    e8:b8:1c:98:8e:55:02:86:44:5b:3f:82:2d:5d:95:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:79:E6:66:19:25:2D:42:ED:4C:F1:73:FB:83:89:44:7A:A0:D7:C9
            X509v3 Authority Key Identifier:
                keyid:EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3a:2d:3d:1f:68:68:e9:e9:51:ca:9b:39:41:d3:18:ed:c1:
         d3:ec:cd:ff:97:06:31:d6:7f:79:15:6e:e7:33:cb:7d:e1:4c:
         0a:2b:e3:ce:ac:cc:9e:0a:57:9d:d6:22:ed:68:8f:13:a2:bb:
         fe:37:78:2a:fd:5b:24:89:4e:6e:8c:76:d8:22:76:af:38:fc:
         92:33:5c:c0:43:de:fb:20:fd:d7:8e:75:21:02:ac:08:fe:ca:
         ca:69:5a:15:c2:a1:e1:8f:61:4c:13:3e:7b:d6:01:3b:9f:9d:
         1f:82:64:85:26:fc:5b:8f:4f:8e:b4:67:85:b5:95:64:c1:86:
         22:a0:b9:d3:a3:b7:d9:61:04:19:e3:34:bd:ea:7a:48:9d:fe:
         37:f7:88:fc:97:7e:9a:59:48:b4:a3:57:a7:e5:0c:b5:52:37:
         88:54:4c:e9:b7:1d:45:b4:59:f2:60:7d:0b:b8:dc:9a:75:4b:
         70:12:e7:ed:3f:9b:c6:16:b1:88:5b:f1:5c:98:72:fd:2a:43:
         43:d1:10:39:a5:27:f9:d1:93:74:88:06:10:51:b9:d7:50:11:
         7e:e0:f1:22:b1:23:0a:43:7d:41:d8:d5:f3:bb:5b:e7:5b:be:
         6b:4c:ed:5b:88:f1:0d:fe:3e:d9:ee:bc:49:57:87:81:43:b5:
         3b:1c:16:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:37:02 2024 by rpki-client on console-ams.rpki-client.org