Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
File:                     AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft (raw, json)
Hash identifier:          PV2v25aOg4iTzZFGBsEhXXq+a4LrWEZEeg8iuja4Kpg=
Subject key identifier:   A4:0C:F6:E8:E6:40:22:64:C6:71:CC:9A:E4:4F:E4:EF:A1:22:E8:B7
Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
Certificate issuer:       /CN=01538851167b4e3d6f64d53797b08cb41371870f
Certificate serial:       018F45A2BBDC1E744DFEE252D8F6F072F44C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 22:04:03 +0000
Manifest this update:     Sat 04 May 2024 22:04:03 +0000
Manifest next update:     Sun 05 May 2024 22:04:03 +0000
Files and hashes:         1: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl (hash: dSIt3mJAuvQOO0TZ176EHlKmYelstn3VpQjEHwLxpvk=)
                          2: udY2sbJt-uRqMVg-0S1_W1YwP3A.roa (hash: TutDCwnsEl0pUQ6XDxvpjMnfDS+Vt48gzzvIA4uZ5Wo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a2:bb:dc:1e:74:4d:fe:e2:52:d8:f6:f0:72:f4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f
        Validity
            Not Before: May  4 22:04:03 2024 GMT
            Not After : May  5 22:04:03 2024 GMT
        Subject: CN=a40cf6e8e6402264c671cc9ae44fe4efa122e8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:07:48:74:90:45:d3:57:e2:04:11:63:fe:d4:
                    8f:8d:70:88:df:84:ce:46:48:37:1f:75:2f:d1:7b:
                    c6:01:32:c8:b9:16:97:96:58:d0:1e:c7:65:7d:3e:
                    9f:53:6d:67:1a:b9:65:1d:9e:b3:77:e0:0f:a9:a9:
                    d2:b4:6f:64:ce:2d:04:df:5a:48:22:1b:8d:35:20:
                    ea:5a:b2:a6:81:16:e8:ad:8f:55:aa:5d:32:2a:60:
                    dd:a0:a4:66:82:94:87:4b:24:6a:f3:7c:5f:2e:28:
                    35:50:8b:11:0e:b5:19:73:29:2a:a8:fa:fe:9a:d9:
                    2b:b0:48:52:39:65:98:b2:21:c7:12:ce:d9:35:9b:
                    6d:f6:02:f2:74:2f:16:54:0d:27:cb:08:b4:51:0c:
                    61:33:29:9e:a1:b2:d0:eb:b0:ca:5a:4b:75:e1:f1:
                    c1:50:19:9b:fe:20:d6:c5:76:4e:48:70:fb:70:f6:
                    7a:be:9d:ea:cf:25:1f:7a:1d:e3:ed:ae:47:14:a7:
                    21:a6:c5:70:d3:c8:89:b7:15:de:84:e2:0d:ba:43:
                    cb:50:54:8a:88:19:29:de:9a:3a:a7:a5:a8:ac:92:
                    02:18:b5:79:6c:55:b9:0d:3e:14:74:b9:37:2e:f9:
                    f1:28:76:7c:c7:9d:61:da:af:36:4e:f7:eb:ed:c3:
                    08:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0C:F6:E8:E6:40:22:64:C6:71:CC:9A:E4:4F:E4:EF:A1:22:E8:B7
            X509v3 Authority Key Identifier:
                keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:63:a7:f9:48:20:a0:36:3f:17:fd:b9:7c:61:62:c0:5b:9b:
         f0:39:f1:32:00:66:18:61:57:12:10:fb:2e:d9:64:53:a1:43:
         1d:23:7c:25:b3:91:86:0f:6a:75:6f:2f:22:f7:d7:6b:81:48:
         e3:d4:da:9c:66:f8:12:30:83:03:04:73:7f:fa:c3:a0:b1:04:
         51:0e:56:eb:60:54:3a:1a:44:29:d4:3f:81:08:32:a3:41:23:
         8f:47:9c:11:61:8e:ce:23:c2:82:1d:99:37:ee:50:66:ba:a2:
         a4:ba:d0:8a:ee:6f:8e:7e:45:ce:ee:e5:69:dc:63:08:aa:63:
         5e:ec:3c:3b:6f:ae:ec:bd:60:f2:de:6e:c1:10:4a:49:2a:61:
         f9:1d:d2:97:88:dd:45:05:49:9e:6a:e2:8c:2b:c2:1f:b5:a5:
         09:8d:3f:00:d6:b3:a7:77:00:90:8a:95:49:e5:7b:e0:dd:6a:
         4f:b3:3b:4c:98:c4:34:15:ae:4a:39:4a:86:57:58:f8:42:57:
         a0:98:89:31:22:ef:c1:b2:8b:61:be:4c:ed:5f:c7:18:5a:5e:
         6f:e7:aa:ad:0e:ab:87:0b:42:3f:23:a4:ca:12:a8:90:d1:f6:
         4e:77:23:34:96:fa:84:dd:ce:a6:bf:59:10:3b:76:9b:c3:8c:
         87:bd:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:25:52 2024 by rpki-client on console-ams.rpki-client.org