Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File:                     CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier:          ugnk0OWllTS4lMobU4m27KC278eacJOV5mi4R77QvSU=
Subject key identifier:   14:A2:7B:44:63:AE:C9:B0:AC:85:6B:7A:27:45:95:C2:E6:B9:8C:36
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer:       /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial:       018F441F6AD0D90AF3FB8654E3BEEA36B979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 15:01:00 +0000
Manifest this update:     Sat 04 May 2024 15:01:00 +0000
Manifest next update:     Sun 05 May 2024 15:01:00 +0000
Files and hashes:         1: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: Y5ACXEYj6daasUxFCkfzaTVApT2qrfkIHQbAB9QejUA=)
                          2: l7K1-X2CKNqiD-SZrijBuoCOX60.roa (hash: xUjgT1s8rqPJmAfRkW4+x3s7tmGeUo8qmyMj66Hua6I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:6a:d0:d9:0a:f3:fb:86:54:e3:be:ea:36:b9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
        Validity
            Not Before: May  4 15:01:00 2024 GMT
            Not After : May  5 15:01:00 2024 GMT
        Subject: CN=14a27b4463aec9b0ac856b7a274595c2e6b98c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:3c:98:16:2e:20:e6:ce:b9:85:cc:28:d2:
                    01:a6:92:e9:35:4e:2e:3b:de:20:5f:b7:91:b2:47:
                    80:3e:b2:33:d3:a6:8e:9c:9b:c5:89:b0:b5:9e:e5:
                    8a:56:7e:31:f0:9b:95:6e:46:a0:47:c0:01:58:38:
                    a9:ec:03:7c:4d:ee:c6:9b:2b:54:40:6d:84:90:9e:
                    e3:ec:a1:bf:58:41:fb:14:27:32:39:2f:e8:ac:a6:
                    4c:48:bc:2a:32:5b:42:f2:82:9e:b1:b8:7e:91:c7:
                    ea:4b:7e:6d:40:f4:d0:fd:f1:16:d6:3b:36:df:f6:
                    e7:5e:67:3c:39:63:3c:17:dd:01:18:9e:bf:45:b2:
                    a0:ff:bb:a0:ab:f6:ec:26:2e:f6:bc:3d:38:d9:d7:
                    3d:3f:6a:5b:1e:69:dd:92:01:62:ac:ec:01:80:a6:
                    11:02:44:77:84:34:67:0e:43:97:0d:54:55:0b:fb:
                    a8:87:b9:23:30:10:0b:44:e2:0c:71:89:9b:cf:b0:
                    e4:78:30:1c:a0:ad:c3:67:1f:59:06:ce:41:c1:51:
                    f9:dd:61:86:31:25:46:b2:c8:3c:cc:c3:9d:30:af:
                    b3:ba:52:ed:57:73:bc:4a:85:ca:d1:19:fe:b1:e2:
                    41:d7:7e:ea:b4:2c:f5:31:61:16:c2:5e:b2:b1:d6:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A2:7B:44:63:AE:C9:B0:AC:85:6B:7A:27:45:95:C2:E6:B9:8C:36
            X509v3 Authority Key Identifier:
                keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:83:97:8d:2e:65:99:87:1e:28:75:24:b0:d9:3e:a0:69:a7:
         73:1a:b9:4f:c1:f7:47:ea:8f:0f:e7:8a:e3:28:77:3e:5a:71:
         e7:ba:98:04:78:da:8c:f9:0a:0f:6d:0c:29:6a:51:32:86:84:
         0c:b0:fc:8e:1c:7c:ae:ac:dd:7c:b0:7e:e7:67:55:5d:ef:80:
         b6:b5:c6:0f:6e:d1:78:4f:f7:d7:5d:0e:55:9d:52:e4:b9:8a:
         1b:d5:1b:7f:a7:bb:41:be:82:96:cd:e2:0e:7d:ed:f0:e5:4b:
         f1:16:57:f4:b3:b9:02:bb:96:b9:dd:9f:d8:39:4a:39:54:29:
         59:46:93:a8:4c:8e:cb:1a:f4:38:a5:bb:bc:62:43:56:a7:ed:
         f8:17:a3:83:f1:59:e1:f4:f6:a6:fd:09:8c:5e:01:f6:22:6d:
         ad:2b:fb:1f:01:f7:81:80:46:ab:cf:f7:9c:a5:15:50:e7:f3:
         a9:9a:cc:67:8a:f0:bb:dc:9a:14:11:5a:c2:24:11:e8:cf:bd:
         b5:e8:74:50:d7:38:60:b4:72:1c:9c:11:12:4c:4a:cc:b9:50:
         bb:62:8a:50:08:b0:38:52:b4:a5:14:d5:52:93:b2:1e:a7:1d:
         95:60:9f:73:35:20:7b:37:ff:41:6e:35:88:c4:21:70:87:c8:
         60:67:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:18:52 2024 by rpki-client on console-fra.rpki-client.org