Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
File:                     1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft (raw, json)
Hash identifier:          ryymMR8uV4Zu9UQGxHNCW2xHxzO7iuPMOnCpVn3SzPY=
Subject key identifier:   59:BA:9D:44:97:49:71:17:3C:7C:5C:00:D3:15:BD:FC:39:42:16:76
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Certificate issuer:       /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial:       018F5515E4DF8EA8DBE1D94A65433EE8C404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
Manifest number:          115E
Signing time:             Tue 07 May 2024 22:04:09 +0000
Manifest this update:     Tue 07 May 2024 22:04:09 +0000
Manifest next update:     Wed 08 May 2024 22:04:09 +0000
Files and hashes:         1: 1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl (hash: xBjYAQ3ypbnDB9SgHWpLVAcwM6iXjh1cQddyJqhnOK0=)
                          2: NGfRsK-Ra-vvv1XcKfCZVRNMM_A.roa (hash: E1SpF7qOykWuv3rP2Bj4DWWNlUPNFJlGazw4ZrlsepY=)
                          3: NdNL82fA4Es4qV579CzAL1Xs72s.roa (hash: MSFi1XxXOOo3UIty+wbv9EEUGTlyCsPrjv/FDEkIsTg=)
                          4: crAuW_809aXsrKI5IpTFiw2UxO8.roa (hash: Bfm6nLdOeMF+ymm9UyshIDTLad6eyjzcFE8Prd1uyvI=)
                          5: oz5-Kz14wd2B5z1u7EpdNZcRcdY.roa (hash: MnQzB/6k4845N3POmH4cDQFRvAaBRWCuChq6CA7xzgs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:15:e4:df:8e:a8:db:e1:d9:4a:65:43:3e:e8:c4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
        Validity
            Not Before: May  7 22:04:09 2024 GMT
            Not After : May  8 22:04:09 2024 GMT
        Subject: CN=59ba9d44974971173c7c5c00d315bdfc39421676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:95:88:a3:70:29:d9:41:7d:6d:68:24:4f:61:
                    52:b7:5c:21:e4:f2:20:87:78:bd:b4:43:27:c5:bd:
                    a1:99:de:30:88:38:c1:4f:3b:68:15:3a:af:30:74:
                    da:af:7e:96:d4:a8:2b:75:ed:95:c2:6a:ea:4e:50:
                    2d:66:3a:d0:24:38:91:eb:c1:65:6f:fe:ba:28:00:
                    b6:ed:77:3a:3f:01:6a:d7:87:2e:d9:60:e4:06:d7:
                    24:81:64:0d:7e:99:07:81:15:f9:6f:30:86:82:7c:
                    4d:ae:95:55:15:41:8f:ef:a8:fa:6c:71:50:b4:eb:
                    fd:d2:20:c8:f4:b4:0d:35:81:04:0e:b2:23:46:1a:
                    56:26:7f:3f:9f:36:b7:87:a1:2b:d7:5e:3d:64:8e:
                    92:59:98:57:1b:e5:21:62:d7:80:0a:b5:fa:b8:0d:
                    c9:6a:9d:62:a4:8c:3b:e1:08:94:2d:e2:a7:7f:be:
                    2b:1a:7e:88:b1:4c:38:e3:1e:e6:86:cc:ee:11:1f:
                    97:9c:2a:5a:d1:cb:9e:79:2d:c3:2d:4b:96:01:65:
                    2c:06:3d:c7:7f:1f:ae:f1:a1:00:41:50:74:4c:fb:
                    3c:0a:85:a4:81:ff:d1:a9:83:98:e6:40:d9:2d:25:
                    5a:8e:56:09:25:da:e2:1c:92:91:3d:00:a4:f1:7d:
                    5f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BA:9D:44:97:49:71:17:3C:7C:5C:00:D3:15:BD:FC:39:42:16:76
            X509v3 Authority Key Identifier:
                keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:de:c9:f8:ec:28:f9:46:b0:66:af:c7:8e:ba:1f:2c:9c:27:
         92:90:d2:7c:9c:5e:e3:6a:2e:83:24:9e:eb:02:3b:3d:9c:c1:
         15:df:ff:c1:93:28:76:46:7d:e0:47:42:0c:df:1e:10:f4:b1:
         fa:6e:78:d1:db:b4:bb:bf:4d:5e:a0:61:db:69:54:b5:12:d1:
         37:10:c6:54:6c:fa:99:95:a5:a2:cf:47:c5:75:e9:b0:83:33:
         fe:30:26:3f:1d:ef:b5:42:9f:c1:76:b0:14:54:4b:04:25:4c:
         fb:44:00:63:47:d0:8a:2d:08:b3:ac:dd:2f:f8:3c:ca:9f:05:
         b6:d9:1a:76:d1:b9:17:0b:69:8c:c9:98:85:4f:40:44:4a:5e:
         63:c2:d2:cb:bb:2d:00:9f:d3:8e:df:bf:c5:b7:21:dd:e6:75:
         bf:0c:49:ed:3d:b7:52:85:c3:94:a8:ce:48:5f:0e:89:95:7e:
         59:4c:8a:84:6c:8d:0a:86:40:0f:23:ce:fd:b8:08:ec:da:ec:
         86:d8:71:65:a5:57:35:87:d2:d8:c4:22:f5:2d:c9:6c:63:72:
         d3:a4:fd:62:7e:0c:54:4a:c0:8f:73:2a:68:5a:6f:76:f2:23:
         ea:53:9e:74:76:b1:b7:02:88:c7:d0:ba:72:a0:0f:c2:3f:85:
         61:2a:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:55:50 2024 by rpki-client on console-ams.rpki-client.org