Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File:                     1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier:          tCSwvTUyP1BW8j2Yjzo/WUg/PNKGSaNRFJIVeYmsY4Q=
Subject key identifier:   19:25:8A:2D:A3:EB:CA:50:1A:A6:47:5E:EF:67:A9:1F:5E:21:59:84
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer:       /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial:       018F4BD9C493988BED4A99199DB4781FBC65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number:          05B1
Signing time:             Mon 06 May 2024 03:01:53 +0000
Manifest this update:     Mon 06 May 2024 03:01:53 +0000
Manifest next update:     Tue 07 May 2024 03:01:53 +0000
Files and hashes:         1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: IbtYN9YpVc5S4n3VynAuWB9VhjK6kkABTFRv939Nz+U=)
                          2: y9g29olg0rXKpPfu-ugn4W-buRY.roa (hash: 53QMx2XMEn2A6OHJ3kl9Qu3AJqoydkKXzYYpvQUV+Ic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:d9:c4:93:98:8b:ed:4a:99:19:9d:b4:78:1f:bc:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
        Validity
            Not Before: May  6 03:01:53 2024 GMT
            Not After : May  7 03:01:53 2024 GMT
        Subject: CN=19258a2da3ebca501aa6475eef67a91f5e215984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:87:04:5e:d2:f4:67:f3:8c:a3:4d:c3:8e:
                    6f:5f:cc:e1:4c:1d:5e:81:8c:ac:7f:27:0a:48:d4:
                    21:1f:41:0f:70:56:ae:f5:7f:42:d9:82:70:2a:c0:
                    52:f7:5f:14:8b:f1:c7:e3:4e:00:fb:c1:e3:4d:1e:
                    2e:8d:bc:fc:60:3a:da:0a:a4:87:b3:84:1b:e6:19:
                    d7:1a:c8:9b:b2:fc:61:9a:6f:72:99:12:1c:4a:b7:
                    d3:17:3b:74:81:b2:6b:68:08:82:05:ee:6c:73:77:
                    6a:94:ba:79:e8:5a:46:6f:cb:eb:18:85:98:01:3d:
                    5c:db:b4:10:a1:09:be:ef:72:df:3f:06:75:12:c5:
                    a0:0d:bd:92:e7:37:7b:cf:a2:61:2a:20:7c:27:8d:
                    8a:98:97:05:91:a5:5e:7f:6f:ff:fd:f9:1d:f2:71:
                    6c:74:1a:ac:13:1f:ca:5d:2e:84:7f:80:97:73:4a:
                    1a:7b:39:ca:59:e2:9c:3e:c2:ea:9a:81:68:8d:41:
                    e3:03:65:a6:ca:cd:cf:6c:98:f4:ab:d7:6e:50:8d:
                    dd:ab:7c:24:18:7b:4c:24:9e:ac:d0:5c:b6:ac:2c:
                    ff:22:55:0f:3e:ab:5a:71:36:45:c0:66:05:e6:d1:
                    7e:8e:d5:b6:df:06:2e:c4:c1:cb:9c:5b:1a:f2:61:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:25:8A:2D:A3:EB:CA:50:1A:A6:47:5E:EF:67:A9:1F:5E:21:59:84
            X509v3 Authority Key Identifier:
                keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b9:68:bc:02:9a:ed:cc:01:10:9b:57:b9:e7:a6:22:00:0d:
         68:0b:75:7f:9d:f7:7e:73:dd:12:1a:12:aa:24:c3:93:e7:3c:
         ad:2a:11:7e:3b:e6:e9:1f:d6:b7:58:d7:88:aa:77:6b:27:38:
         19:25:2c:1c:eb:8a:02:b7:4e:05:f6:98:82:b8:3a:db:51:d8:
         db:15:f3:e8:c7:74:28:e7:2c:83:28:e4:6a:54:71:56:12:74:
         c9:bb:f9:eb:a8:c8:0b:81:4e:1d:3c:15:ff:8e:ce:7b:c3:2f:
         68:85:9e:81:ed:9f:4e:36:cb:9d:58:fe:ee:d8:83:c1:cd:5b:
         42:f0:da:a0:f1:90:1b:bf:16:ff:ed:b8:e0:2a:02:fc:ba:8b:
         04:4a:9d:ad:e9:04:ec:fa:55:b8:d1:13:95:97:2f:85:bf:37:
         03:77:b8:48:3b:8e:3e:4b:53:d5:ad:3f:ca:e7:51:0a:7a:49:
         9d:47:42:25:e7:09:23:ac:50:63:be:27:96:55:ab:a9:14:7a:
         7d:d6:58:98:b2:8e:2c:76:e2:b7:07:a7:e2:9d:37:96:9a:49:
         07:e1:df:76:f1:32:71:b9:0f:14:cf:fb:a7:90:1a:05:fd:3f:
         4b:13:23:32:09:26:d2:94:d7:53:0e:1f:e0:5b:6e:c7:e4:1a:
         da:9f:d4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:01:07 2024 by rpki-client on console-fra.rpki-client.org