Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
File:                     4Uk5uDWV4u-2lFa83yOGalB59vU.mft (raw, json)
Hash identifier:          OoIkZrwioHXOQrjwcbLCQLzsrEmwe5RLd2s5/fy+UWM=
Subject key identifier:   BE:B4:EA:07:A3:79:8F:44:1E:B7:39:9B:38:FB:09:DE:2F:EE:FC:63
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Certificate issuer:       /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial:       018F3EC25C04DFF4FAF029BE0C93040FB43F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
Manifest number:          1155
Signing time:             Fri 03 May 2024 14:01:15 +0000
Manifest this update:     Fri 03 May 2024 14:01:15 +0000
Manifest next update:     Sat 04 May 2024 14:01:15 +0000
Files and hashes:         1: 4Uk5uDWV4u-2lFa83yOGalB59vU.crl (hash: SvFLAyu1L2V47Xe4uOeLaBDlsuBL+oEC7MKJIkG+PNc=)
                          2: Hb1Dq0GWuCsDbCi9yzVtD2qReSQ.roa (hash: /lDBikgy51SO5TJiFnhYMRCjG3ci9zvqedRWLLH+HrM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:c2:5c:04:df:f4:fa:f0:29:be:0c:93:04:0f:b4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
        Validity
            Not Before: May  3 14:01:15 2024 GMT
            Not After : May  4 14:01:15 2024 GMT
        Subject: CN=beb4ea07a3798f441eb7399b38fb09de2feefc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:da:80:7e:74:4f:b4:44:50:5a:fd:73:1e:
                    13:64:bf:a2:cb:05:b4:f6:c4:2c:7c:0e:cc:4e:6d:
                    d0:14:26:27:56:cb:5f:e8:95:c2:cf:e9:97:85:11:
                    b9:03:d0:d3:da:a5:14:20:c7:7b:82:84:af:43:78:
                    53:b1:24:5a:86:74:09:9d:5a:55:3b:64:1b:78:19:
                    37:d4:63:18:8c:1a:6c:8e:7d:53:b5:8d:ff:a2:10:
                    11:b6:1d:45:c6:55:51:00:9a:1a:6c:9c:85:51:7f:
                    71:d6:38:9d:33:47:c6:a1:2b:2c:04:14:0d:b8:31:
                    42:b1:b4:ac:d7:35:a6:59:68:64:3f:b8:91:12:44:
                    2d:6e:15:06:0c:a0:23:e9:47:b7:73:ce:b2:88:3b:
                    9a:d0:7d:e7:01:11:ba:d6:5e:0e:fe:bf:dd:e9:83:
                    e2:2d:5b:09:d8:83:d5:c7:52:96:7d:b3:b5:b2:5f:
                    25:96:25:04:39:c8:28:f3:65:20:ec:76:5c:83:e8:
                    b9:a6:53:7d:9b:65:3a:64:9c:77:70:d1:96:60:d0:
                    11:a3:1f:dd:56:5b:d8:93:8c:82:c7:64:51:94:9b:
                    d3:95:9b:fe:4a:cb:57:95:a2:56:96:ab:46:06:ca:
                    d7:76:a7:22:c0:00:41:cb:ff:6c:7f:b8:78:6d:bd:
                    cb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B4:EA:07:A3:79:8F:44:1E:B7:39:9B:38:FB:09:DE:2F:EE:FC:63
            X509v3 Authority Key Identifier:
                keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:62:90:d8:d6:c7:d6:44:31:8e:48:96:1a:a2:d3:83:91:2b:
         50:af:4e:e6:68:da:48:29:3e:40:92:4d:05:43:07:6c:36:57:
         0d:14:e8:9b:16:73:94:2d:4e:6b:57:5b:4b:5d:ac:e2:e1:25:
         62:e0:15:d1:25:8c:80:f4:7f:8d:99:13:82:48:45:98:59:94:
         b3:00:c9:ee:94:8e:99:7f:ce:61:d5:ba:db:b5:d6:47:71:ee:
         f4:e9:74:b7:b6:7c:42:0c:54:65:e0:cd:88:3d:81:9f:02:f3:
         9f:b3:c9:e7:25:79:c7:ed:14:fa:af:38:31:55:0d:a4:63:7a:
         b5:ae:e0:64:ec:e5:8a:10:60:2c:60:22:17:fc:3f:ea:29:fb:
         07:c2:4c:fe:e0:8c:cb:16:c8:47:f9:52:97:c0:c3:ab:69:c6:
         d9:82:a0:ed:97:d5:ee:cf:1a:4a:67:8b:3e:ae:e0:ee:14:a5:
         2d:3a:49:86:68:3e:a5:a3:cd:a9:e9:bb:c8:3e:ee:27:f5:f3:
         51:e3:27:41:bb:28:be:48:8f:16:b2:41:f2:5d:e8:1e:f1:3b:
         77:ed:e4:86:4e:f6:b7:08:f1:e2:84:f0:28:af:a8:8c:d9:d4:
         2c:65:0e:d2:18:a0:22:9e:5b:fd:3c:4c:d5:3f:23:55:7b:92:
         c7:8b:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 16:30:31 2024 by rpki-client on console-fra.rpki-client.org