Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File:                     0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier:          Vb/R4ch7uN59eyUgSejhtfvIs5LkMrKV0BGoDD53b5w=
Subject key identifier:   4E:15:79:54:57:B6:FE:41:1C:34:13:4D:7E:26:C5:A3:2C:19:DB:55
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer:       /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial:       018F46B317E5307C45F089DD75ABF74EED62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number:          1156
Signing time:             Sun 05 May 2024 03:01:33 +0000
Manifest this update:     Sun 05 May 2024 03:01:33 +0000
Manifest next update:     Mon 06 May 2024 03:01:33 +0000
Files and hashes:         1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: kK6czv41+1G5LT2fe6rgyON4I6KxHSSg9c/2zMuPP/g=)
                          2: G-5B3UjPGcgfcPNC_o-9K8M82yg.roa (hash: kgTz0yveLRWpEIynxk+2XNovqCyxvAk9otjdX1mPDR8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b3:17:e5:30:7c:45:f0:89:dd:75:ab:f7:4e:ed:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
        Validity
            Not Before: May  5 03:01:33 2024 GMT
            Not After : May  6 03:01:33 2024 GMT
        Subject: CN=4e15795457b6fe411c34134d7e26c5a32c19db55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:fc:aa:b6:fb:9d:69:6f:a6:66:ad:c0:bc:
                    15:72:60:25:38:a4:38:30:81:6a:a8:1a:e0:8f:77:
                    a3:bb:1e:12:76:e8:48:d4:7f:cf:a1:a0:34:c2:7a:
                    55:d8:67:38:39:a7:17:d9:ae:05:2f:72:c5:4e:c2:
                    ba:17:76:93:a0:07:a4:eb:e5:1c:6a:ef:7e:76:35:
                    82:e1:a4:0f:8e:63:a2:35:02:94:51:39:e1:6a:c8:
                    cd:c6:eb:de:c0:44:e4:1d:69:24:8c:0f:ba:66:b0:
                    9d:65:dc:35:55:f3:49:7a:62:5d:b8:66:90:30:8a:
                    51:31:d4:75:eb:02:e5:28:3b:35:54:cd:ba:a9:74:
                    86:ad:cd:7a:dd:9f:df:a9:3e:f1:93:3a:4b:25:10:
                    2a:27:74:af:70:e8:be:9e:af:ee:59:14:6a:11:f3:
                    a5:3c:85:e4:2a:b2:63:2a:f2:ae:b2:7d:e0:bb:48:
                    e8:18:96:84:66:1f:39:11:0f:8b:7d:8e:e3:43:93:
                    05:c3:da:3e:49:7b:91:60:a5:a6:00:60:bb:de:7b:
                    03:ef:91:78:0c:ab:18:30:a2:3b:97:d7:ab:0f:58:
                    73:2c:94:fc:14:82:c9:61:ee:8c:92:70:b5:5c:82:
                    7b:71:dc:25:75:4a:ce:a2:e5:6f:92:a2:8f:6b:93:
                    a7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:15:79:54:57:B6:FE:41:1C:34:13:4D:7E:26:C5:A3:2C:19:DB:55
            X509v3 Authority Key Identifier:
                keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c9:09:81:46:62:eb:5f:64:2b:83:ab:c3:ba:94:a0:25:fb:
         78:89:07:09:55:b7:e6:35:b5:98:1d:08:3a:dd:ab:d5:ae:8a:
         4a:ce:48:5f:43:15:46:e6:b1:7c:f8:f6:b5:36:8a:6a:50:21:
         00:68:b8:f7:70:01:c2:5b:25:83:ac:1b:34:51:bc:a4:34:c1:
         2d:17:0f:c2:76:41:b1:d7:19:17:6f:db:1b:25:08:72:07:1d:
         e7:f2:48:3c:e6:f7:6d:39:60:9b:19:d8:ee:52:44:9e:95:64:
         bb:eb:21:5b:65:c4:22:18:1a:da:e7:02:b9:06:e4:f4:02:3c:
         b7:3a:e2:cd:84:45:b8:0f:77:12:c3:90:75:0f:62:0c:f0:37:
         bf:8c:09:68:87:59:a9:c7:46:a6:c1:44:b1:57:7b:66:1f:11:
         8e:dc:e4:6d:2f:da:96:9f:80:53:d7:4d:20:82:81:8b:d7:4b:
         9c:2c:d6:60:c7:b4:e1:a5:0d:93:40:01:08:a9:f2:db:5e:a4:
         b1:14:23:0c:60:52:f8:f4:a8:c3:da:0c:2b:ad:9a:80:04:5d:
         de:b1:bb:48:64:49:f7:23:ab:d2:48:b6:0d:20:80:4b:32:71:
         29:d5:32:0b:f2:f7:2e:b2:f9:4c:32:06:3d:75:4d:e9:a3:b9:
         ca:94:4b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:52:36 2024 by rpki-client on console-fra.rpki-client.org