Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File:                     201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier:          pac/XDaBFjVw1ZR+pKcTzL0FjDfjAEzDP1AzP/O9oro=
Subject key identifier:   50:30:8F:66:84:28:35:35:C2:67:0D:C4:D6:6E:7E:F4:7D:8F:62:FE
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer:       /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial:       018F5137C42D8D00BC223F201AB64F5D7D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number:          115E
Signing time:             Tue 07 May 2024 04:02:40 +0000
Manifest this update:     Tue 07 May 2024 04:02:40 +0000
Manifest next update:     Wed 08 May 2024 04:02:40 +0000
Files and hashes:         1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: StxRNRx/3iNAGjwqYqJqlscqIOsSADR0mzNs1vQ8wAs=)
                          2: H4ouBEYWLRgHDShrEZqA7Qr0IP8.roa (hash: 7Vq4a6J+4AjNXALiCkOIJMJWZAEERpbOe2LJTLmBHbc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:37:c4:2d:8d:00:bc:22:3f:20:1a:b6:4f:5d:7d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
        Validity
            Not Before: May  7 04:02:40 2024 GMT
            Not After : May  8 04:02:40 2024 GMT
        Subject: CN=50308f6684283535c2670dc4d66e7ef47d8f62fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:e3:3d:6f:1d:e1:18:b5:6e:d0:6f:93:c5:
                    95:98:85:e6:21:ca:16:20:26:c6:b4:99:dc:1b:20:
                    bb:9f:ed:7b:9d:71:a4:a8:88:f4:3c:08:1e:da:26:
                    51:63:6f:02:ca:95:4a:e2:d3:61:ee:19:91:7a:76:
                    b6:0e:48:30:a3:d5:cb:b2:e7:7f:e2:43:0f:4f:2a:
                    ce:40:df:bf:38:50:cf:9c:8b:6e:12:9f:8a:a3:b3:
                    f8:81:d2:c0:e0:bc:09:e3:1e:61:4c:7a:8e:7e:46:
                    0f:68:76:8c:3f:8c:95:a0:d5:7d:e1:39:c9:1d:84:
                    24:21:4e:60:bb:4f:8a:48:ae:64:00:9f:62:d7:5f:
                    84:c2:38:04:2b:51:b7:7b:75:53:63:9e:16:b2:8f:
                    cd:1b:67:fb:8e:96:1c:89:70:95:9b:89:1d:0d:1e:
                    ba:a3:07:9a:39:4b:5b:74:c1:c0:6b:0f:55:89:73:
                    5a:2a:a1:aa:bc:b6:01:1b:1e:e0:bc:7d:14:74:7d:
                    59:f4:0c:03:c2:cc:ab:23:67:40:21:51:ea:1f:8f:
                    f4:db:ad:24:77:d6:58:35:44:3f:cd:39:73:49:55:
                    73:60:b8:60:c6:ee:7c:25:17:16:05:f6:86:e0:f4:
                    67:f7:d1:68:4a:a5:f8:4c:d9:47:18:c3:f0:e3:fc:
                    42:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:30:8F:66:84:28:35:35:C2:67:0D:C4:D6:6E:7E:F4:7D:8F:62:FE
            X509v3 Authority Key Identifier:
                keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ea:a4:bb:70:00:ff:b9:f5:f2:53:4b:3a:74:74:fb:da:c9:
         99:af:6c:65:ab:f5:d4:48:92:f3:f9:43:b9:d6:fa:87:30:21:
         7d:f1:64:a4:fc:81:ff:9f:82:85:30:97:4e:5b:92:f2:d6:8b:
         df:88:7c:a1:2f:fa:70:91:69:ce:e6:86:49:b7:4f:06:aa:ca:
         c7:61:64:f7:ea:ae:0e:65:93:67:d0:85:6c:e5:1c:e6:32:ed:
         46:21:7a:ba:04:14:66:af:f2:dc:93:71:19:d3:3e:1f:8b:a5:
         2e:f7:52:1a:23:5c:90:17:db:ca:7d:2d:01:15:98:76:e4:a2:
         9a:e6:df:cf:ba:5b:f4:f0:b5:f8:e9:70:78:06:b1:b4:55:e3:
         ee:02:25:69:43:f1:94:fd:55:3a:cf:25:24:e4:7d:4f:fc:c0:
         11:1d:60:53:67:95:bd:84:e2:24:d6:1e:24:24:75:ad:b6:9a:
         1f:93:4d:f5:40:43:73:71:43:56:2a:6f:7f:47:c0:14:a8:b7:
         c1:b1:43:7d:0a:13:1a:b3:16:fa:f6:3a:1a:3f:59:37:57:85:
         bc:02:66:fa:5c:12:b0:cd:0f:35:56:8b:4e:c6:43:8e:8a:76:
         49:9b:67:5f:b0:7f:09:89:5a:33:3a:8f:af:f9:b7:5a:c7:3b:
         13:c1:fe:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:52:48 2024 by rpki-client on console-fra.rpki-client.org