Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File:                     A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier:          4q2MDyL5Rty3/8xMxloOUL4GWpa9U/fK6ABTrs9jpsQ=
Subject key identifier:   02:9D:39:3E:8D:5F:22:EC:39:F1:EA:7A:AA:EF:34:E3:52:8D:CE:3D
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer:       /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial:       018F42D61F3C28BF56AFF75CFE92420D578F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 09:01:19 +0000
Manifest this update:     Sat 04 May 2024 09:01:19 +0000
Manifest next update:     Sun 05 May 2024 09:01:19 +0000
Files and hashes:         1: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: zauZAO0Vrevd37pGilXQVOV95hnF33DrCLqB/g6mBWM=)
                          2: ZSj87iV3hi_E1eRk5vDWG03jrro.roa (hash: oZmVNnO0QDPRhDUzRjOkxi/hZXFTws8ohyMcgwRjEKU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:d6:1f:3c:28:bf:56:af:f7:5c:fe:92:42:0d:57:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
        Validity
            Not Before: May  4 09:01:19 2024 GMT
            Not After : May  5 09:01:19 2024 GMT
        Subject: CN=029d393e8d5f22ec39f1ea7aaaef34e3528dce3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c4:0a:34:01:c7:df:cb:3f:f9:8a:b7:dd:79:
                    c4:64:65:ff:53:c3:79:0d:d9:a1:15:2f:e7:81:7c:
                    8a:98:a2:a4:72:bf:0a:20:a2:26:cd:5f:76:97:95:
                    03:a0:6d:cb:02:42:e6:52:6a:26:de:0d:e9:45:fe:
                    d6:35:f0:28:6f:48:9a:63:69:25:7f:f2:3c:68:15:
                    90:47:3f:3b:29:8a:2f:03:18:62:34:b3:ee:13:69:
                    bf:06:2d:ec:7a:a5:92:84:18:77:84:f9:e0:13:46:
                    1c:13:a3:0e:5d:96:60:99:18:95:50:0c:43:5d:57:
                    38:9b:dd:e3:2c:41:35:08:80:8e:56:d3:65:41:c1:
                    9b:76:f2:bb:c7:2b:74:f0:0f:6e:41:b8:ff:27:fb:
                    86:f7:7f:ee:33:40:b6:ef:83:55:0d:0e:e9:ee:8f:
                    14:ec:0a:bb:04:67:ab:4d:15:84:2c:73:cd:ef:70:
                    98:09:33:23:69:6b:13:8d:dc:72:b2:91:0f:8d:60:
                    94:22:ba:74:ec:cf:31:0f:fe:8e:d8:e9:df:2c:1e:
                    f6:55:75:2c:30:72:c6:77:3a:6b:01:2c:9c:ab:c9:
                    0e:9c:82:dd:fe:90:15:3a:cd:1b:8f:79:57:90:44:
                    1d:a1:36:f8:92:37:6f:2b:81:25:28:53:bc:44:98:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9D:39:3E:8D:5F:22:EC:39:F1:EA:7A:AA:EF:34:E3:52:8D:CE:3D
            X509v3 Authority Key Identifier:
                keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:49:c5:ff:58:55:ef:b6:da:e2:8a:e8:6f:6a:b0:76:3e:7c:
         24:5a:88:2c:4d:89:78:f3:2d:94:12:78:92:01:2f:05:e5:c2:
         58:8d:a2:9d:9e:37:72:b6:eb:41:12:2a:1c:36:c0:c8:a7:27:
         4d:92:8b:05:97:ac:be:24:e0:25:d3:10:8e:0a:6b:e0:e7:df:
         48:ff:4b:cf:a1:93:70:df:39:31:66:f2:56:62:7e:fe:f3:12:
         22:a6:9c:10:f2:be:d7:08:63:bc:11:c8:cb:49:af:fc:3a:b6:
         ff:c8:f1:99:1e:2e:a9:bf:6f:f2:f5:8f:85:81:06:5e:8b:af:
         fa:5e:85:a5:b6:89:47:10:97:01:a9:96:40:34:de:0a:9c:42:
         5f:0d:5a:59:f1:f7:e9:84:e9:cf:d9:46:01:8b:dc:b3:fc:55:
         5e:2d:e3:0b:d5:ab:06:4d:fe:f3:61:35:13:6c:34:8e:36:f7:
         9b:f1:37:a4:00:2f:96:c4:16:4e:95:c6:62:be:81:fb:85:96:
         9c:8e:b9:4d:82:c8:7e:41:03:f8:29:4c:50:aa:0b:c0:90:62:
         6d:e1:19:0c:3b:e8:dc:92:c5:3e:a3:a3:ff:5d:9e:34:26:5b:
         02:b3:bd:ee:77:b1:cf:3c:11:0d:c4:d1:a1:78:06:55:25:d7:
         d3:16:4f:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9C1h88KL9Wr/dc/pJCDVePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzODIwZTk2NGRmZDNkMjgxNDIwYWZkYTIwY2U5NDllNjBk
NGNjNDQwHhcNMjQwNTA0MDkwMTE5WhcNMjQwNTA1MDkwMTE5WjAzMTEwLwYDVQQD
EygwMjlkMzkzZThkNWYyMmVjMzlmMWVhN2FhYWVmMzRlMzUyOGRjZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8QKNAHH38s/+Yq33XnEZGX/U8N5
DdmhFS/ngXyKmKKkcr8KIKImzV92l5UDoG3LAkLmUmom3g3pRf7WNfAob0iaY2kl
f/I8aBWQRz87KYovAxhiNLPuE2m/Bi3seqWShBh3hPngE0YcE6MOXZZgmRiVUAxD
XVc4m93jLEE1CICOVtNlQcGbdvK7xyt08A9uQbj/J/uG93/uM0C274NVDQ7p7o8U
7Aq7BGerTRWELHPN73CYCTMjaWsTjdxyspEPjWCUIrp07M8xD/6O2OnfLB72VXUs
MHLGdzprASycq8kOnILd/pAVOs0bj3lXkEQdoTb4kjdvK4ElKFO8RJiEbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKdOT6NXyLsOfHqeqrvNONSjc49MB8GA1UdIwQY
MBaAFAOCDpZN/T0oFCCv2iDOlJ5g1MxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yZWQ1ZGEtODVjZi00NDlmLWJkODUt
NjI4YjBmYmNkMGI2LzEvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yZWQ1ZGEtODVjZi00NDlmLWJkODUtNjI4YjBmYmNkMGI2
LzEvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEnF/1hV
77ba4orob2qwdj58JFqILE2JePMtlBJ4kgEvBeXCWI2inZ43crbrQRIqHDbAyKcn
TZKLBZesviTgJdMQjgpr4OffSP9Lz6GTcN85MWbyVmJ+/vMSIqacEPK+1whjvBHI
y0mv/Dq2/8jxmR4uqb9v8vWPhYEGXouv+l6FpbaJRxCXAamWQDTeCpxCXw1aWfH3
6YTpz9lGAYvcs/xVXi3jC9WrBk3+82E1E2w0jjb3m/E3pAAvlsQWTpXGYr6B+4WW
nI65TYLIfkED+ClMUKoLwJBibeEZDDvo3JLFPqOj/12eNCZbArO97nexzzwRDcTR
oXgGVSXX0xZP7g==
-----END CERTIFICATE-----
Generated at Sat May 4 11:25:34 2024 by rpki-client on console-ams.rpki-client.org