Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
File:                     D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft (raw, json)
Hash identifier:          1smD50mgAJjC8UHBkSROKSMj4Mk1tTnUx3iKzTsr2YM=
Subject key identifier:   FE:62:6F:D5:59:9C:AA:C7:4B:E4:16:E0:D2:D5:E6:73:7E:B2:D2:99
Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
Certificate issuer:       /CN=0f657093f326547bf25a9985c81cf1403140a3a8
Certificate serial:       018F43B2091366614836EE492B010F9255AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
Manifest number:          1158
Signing time:             Sat 04 May 2024 13:01:32 +0000
Manifest this update:     Sat 04 May 2024 13:01:32 +0000
Manifest next update:     Sun 05 May 2024 13:01:32 +0000
Files and hashes:         1: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl (hash: yQ/tFvk4d54Rx/fR4Pr9OBKt35vUEeZkzLYMDj3VXd4=)
                          2: RimdIbMS0BjmlfMFLU1UqdSz0ps.roa (hash: U9ssFrJq4FYHS/LtBg4125BTRBxQEMwZId1x2lPSLUY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:09:13:66:61:48:36:ee:49:2b:01:0f:92:55:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8
        Validity
            Not Before: May  4 13:01:32 2024 GMT
            Not After : May  5 13:01:32 2024 GMT
        Subject: CN=fe626fd5599caac74be416e0d2d5e6737eb2d299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3c:c2:72:da:54:2e:51:c7:fc:64:6b:57:c8:
                    5e:2b:9d:d6:1b:f8:e3:87:ca:c4:eb:b8:b6:28:08:
                    59:c7:6f:fc:c4:37:f5:cd:93:6e:9d:a8:d2:49:b1:
                    74:f6:78:ad:b5:c2:c8:d3:01:b2:76:02:fa:c2:8c:
                    c1:af:8f:55:b9:7e:d0:b9:1f:a6:7c:5f:8e:9a:68:
                    8b:0d:84:fd:34:b3:50:68:29:7b:1f:0d:1b:ca:8f:
                    0c:6f:8c:c9:8b:cf:0e:b1:93:13:54:22:26:62:c3:
                    72:fc:89:14:61:89:e0:43:72:8d:8e:7c:80:03:fd:
                    f6:d6:a7:53:0a:9c:36:ae:98:84:63:26:cc:6d:04:
                    cc:85:73:24:39:a0:53:fe:d7:fe:c1:27:2e:9d:9d:
                    9a:b0:04:3b:90:b7:c5:8e:d7:44:d6:83:c1:ea:66:
                    86:c1:96:c9:9d:24:1f:13:3c:e2:12:f7:eb:12:ac:
                    12:fb:3f:ed:3f:f0:19:8e:a8:3b:ad:5b:0d:6f:5d:
                    00:6e:fb:76:b0:8e:2c:09:f7:4e:10:49:a4:e8:2e:
                    3a:67:46:05:6a:29:89:70:8d:39:85:e2:ac:88:46:
                    c8:1f:14:bd:d4:cc:96:f6:05:5d:23:41:ec:ae:a9:
                    fc:8f:b2:b3:e1:de:77:89:c0:a9:f5:c6:e8:d1:6a:
                    f1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:62:6F:D5:59:9C:AA:C7:4B:E4:16:E0:D2:D5:E6:73:7E:B2:D2:99
            X509v3 Authority Key Identifier:
                keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:29:23:0a:2d:85:9c:29:ef:b3:e3:c4:07:0c:df:20:14:
         1c:59:92:d5:38:96:ba:0a:f9:ac:ce:61:4d:ac:15:24:c4:41:
         97:ac:15:16:d6:e7:e9:5b:f8:12:03:e6:07:43:90:0b:a7:96:
         59:01:47:d7:b6:80:e4:9c:ea:0e:b2:b6:1c:3a:3d:bd:c7:6d:
         a7:88:10:2f:95:1b:10:69:c3:fe:2b:57:24:84:f1:d8:13:34:
         0f:c2:4f:76:ef:e5:7d:f8:a7:f8:23:c8:86:e0:1c:8a:11:c3:
         df:17:57:1d:d5:d7:fb:53:db:de:79:2d:bb:a6:e0:65:80:8c:
         2f:c4:f0:60:90:61:f4:68:58:1d:9d:58:63:6d:c3:ec:1f:18:
         53:56:05:a1:ac:6b:8a:ec:bb:ed:35:a3:e6:20:8b:05:11:60:
         cb:af:3d:23:b1:7b:0b:34:44:0d:7f:45:e3:13:3f:7c:2b:be:
         c8:07:f2:92:37:56:29:01:0c:b1:67:7f:48:ba:7f:a8:e9:84:
         4e:4a:5b:0c:42:20:53:f7:93:7d:c4:fd:f8:b4:e0:0c:ee:7e:
         f3:e7:11:e9:04:ed:65:e6:c5:fb:49:ec:6b:fc:20:ab:f3:8b:
         08:4e:4c:c6:cb:ee:2e:19:2c:dc:d7:a3:c8:e5:a5:d0:78:b8:
         dc:57:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:46:28 2024 by rpki-client on console-fra.rpki-client.org