Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File:                     4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier:          zsTMsBNjFRio19ZWSCNsq2n78j6Wwup7Sb8OISo6gQA=
Subject key identifier:   04:70:BE:C0:1A:80:A4:F1:87:1C:D1:8E:19:35:4D:8F:A5:4A:5D:16
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer:       /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial:       018F4B6D60D3A8F7C880962D1A6D5108A834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number:          1157
Signing time:             Mon 06 May 2024 01:03:30 +0000
Manifest this update:     Mon 06 May 2024 01:03:30 +0000
Manifest next update:     Tue 07 May 2024 01:03:30 +0000
Files and hashes:         1: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: lzjclHv7foIqVxXGCcELmrdqh0dD21yX8PXMm7mbfkY=)
                          2: 9M75nPNP2utYS_dlJWR2yGIP7Jk.roa (hash: oSlGqk2lYc/SHvXF35AlUFEFY8DfHOjUW0AO1ApFGRc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:60:d3:a8:f7:c8:80:96:2d:1a:6d:51:08:a8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
        Validity
            Not Before: May  6 01:03:30 2024 GMT
            Not After : May  7 01:03:30 2024 GMT
        Subject: CN=0470bec01a80a4f1871cd18e19354d8fa54a5d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:37:b9:d3:fe:74:4c:d2:98:76:98:6a:53:38:
                    2b:93:d3:ec:72:ab:40:bc:fd:15:db:a4:32:67:d1:
                    9d:f8:68:5b:2d:7b:a3:54:9d:38:c8:32:3d:44:7b:
                    8d:89:49:77:f3:ed:66:59:62:a4:04:7b:be:7c:99:
                    3d:33:f1:e4:22:39:12:20:eb:06:38:29:57:eb:fc:
                    db:d2:43:d7:ee:4a:f7:d1:e5:74:ff:41:72:f0:6d:
                    bc:67:06:22:25:66:be:b1:f6:aa:dc:80:52:71:77:
                    35:b6:07:13:f0:71:f4:47:fb:76:5f:8f:ec:2c:20:
                    cc:21:21:57:79:6e:8b:19:85:f2:de:82:36:99:5f:
                    a6:0b:0d:ef:65:ec:7c:bc:50:aa:01:4b:98:e5:c3:
                    d3:ae:14:50:76:92:71:50:c2:b0:90:f7:f5:9c:f4:
                    46:f1:da:78:a1:a5:cf:38:95:7b:6e:d8:36:2f:da:
                    1e:13:eb:26:07:70:d5:0d:17:d0:86:68:b0:95:b9:
                    af:13:5a:71:81:4c:65:59:2d:49:1e:53:8a:45:95:
                    02:86:e5:ab:4f:3f:21:86:08:30:e6:3f:87:db:60:
                    f9:ac:94:65:9b:9b:e2:64:f4:62:8f:81:0a:a9:4d:
                    aa:b0:c6:d6:c9:cb:54:31:66:e3:8e:0c:5c:41:37:
                    1b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:70:BE:C0:1A:80:A4:F1:87:1C:D1:8E:19:35:4D:8F:A5:4A:5D:16
            X509v3 Authority Key Identifier:
                keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2f:50:b1:bd:64:6a:1c:1c:2b:b1:fc:57:f0:a2:1e:9a:57:
         89:35:0d:7f:ac:61:46:11:df:94:6b:45:3d:42:b8:88:bf:15:
         c3:01:ae:ff:c2:89:9f:b8:52:3f:6a:ce:f7:57:d3:57:22:b3:
         98:77:a0:ff:1d:da:23:5f:26:f8:be:76:cf:4f:14:f5:67:e7:
         41:08:0a:52:26:1d:1f:7e:34:03:e7:2b:af:23:1d:50:f4:e5:
         67:7b:11:1d:4d:e0:a0:1e:b4:15:25:17:4d:26:a5:40:b9:85:
         13:0f:0c:3f:8d:8a:fa:ec:8c:55:b6:8c:ad:fe:61:99:73:67:
         e7:19:2f:b5:e0:50:2a:53:08:74:18:09:26:e6:c0:06:a4:2d:
         a3:b0:49:36:55:fd:cb:b4:d1:77:e5:dd:b3:0a:15:7c:00:ec:
         6b:c1:8b:99:f5:7f:1c:5c:49:2d:34:f0:fe:ae:31:2e:19:1e:
         56:da:24:e3:17:0e:1c:db:46:b7:1a:1b:87:a0:ce:85:c8:ac:
         fc:16:83:ce:39:65:34:72:ab:e5:ce:2a:25:20:2d:75:ee:ce:
         d4:32:5b:b9:e2:1a:65:ea:5a:b0:bf:99:e1:a8:6b:2f:62:3d:
         f9:f1:c0:86:d7:f6:ec:3b:b2:d8:6f:ff:4c:b1:86:86:1c:5c:
         b5:5a:f2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:07:42 2024 by rpki-client on console-fra.rpki-client.org