Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File:                     E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier:          AeErXWseWJiFp/gQhnVkFsxjP6EppQCRCCiONvpQSdg=
Subject key identifier:   17:83:1E:E3:00:17:C3:2C:08:40:BA:22:BB:B3:80:5D:7D:09:ED:1E
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer:       /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial:       018F46E9BAB30519E28ECEAFD01B6FE24102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 04:01:13 +0000
Manifest this update:     Sun 05 May 2024 04:01:13 +0000
Manifest next update:     Mon 06 May 2024 04:01:13 +0000
Files and hashes:         1: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: mXOlQ7qfeL8FG4FJHfGtxh6kqRMkuEEDAlqID5fWLuA=)
                          2: QFKTkLJZa2QR8f_NXd4xCmOerd0.roa (hash: 8Yu7DyWs3CG3h9skfL4FT5MWHm81NOhqkuRHjoj4+GE=)
                          3: Tjod77QWp3ftnQpTVpVwqbn-cjk.roa (hash: cfD41bZC18h7RfrEoPD7EeBXyIewaT9o07CO11wqE24=)
                          4: iIJJPC8kG_pPGvQ-7G6gzyN8sXg.roa (hash: 8hRrWX9G4swjN1faSHy6uvbf91Xy4ANfXfCXnojux8c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:e9:ba:b3:05:19:e2:8e:ce:af:d0:1b:6f:e2:41:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
        Validity
            Not Before: May  5 04:01:13 2024 GMT
            Not After : May  6 04:01:13 2024 GMT
        Subject: CN=17831ee30017c32c0840ba22bbb3805d7d09ed1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:39:4d:98:49:07:86:36:d0:7c:04:4c:60:1b:
                    59:ed:14:85:95:90:ef:c5:c8:49:4d:19:d1:c2:aa:
                    99:e5:49:8c:91:5e:3e:6e:31:82:08:45:ba:32:91:
                    58:18:a3:31:50:b4:0f:fa:bf:b0:d6:ed:d8:ef:1d:
                    65:5a:ae:71:d6:cb:be:c5:08:fb:c7:31:5b:39:42:
                    6f:6d:03:ed:b8:15:27:7f:d4:6a:68:f3:c8:96:01:
                    27:a0:22:38:16:cf:84:9c:c2:fb:af:df:1b:8c:b7:
                    a8:97:1d:e3:42:13:52:8c:ee:fe:5b:9a:2d:55:9d:
                    95:00:b8:70:76:bf:61:aa:b7:81:11:35:f5:86:ba:
                    0e:03:5c:20:6c:16:7b:47:ce:c1:5f:59:08:c8:65:
                    e8:01:65:14:30:ff:68:a5:13:36:e5:2a:31:fa:20:
                    a5:f4:db:70:3d:60:90:c0:57:ca:21:cb:a9:e6:f5:
                    a3:5f:09:bc:87:c2:c9:7f:3b:5d:e0:72:c9:00:98:
                    03:bc:f7:c6:1d:56:21:d4:25:a7:cf:ae:01:3d:0a:
                    62:23:f5:37:e2:d4:95:f6:e6:c8:ac:0a:3e:84:15:
                    bc:54:ca:e8:f3:d9:45:0f:68:0d:ce:1d:22:d1:eb:
                    29:55:19:60:55:4e:0e:1d:20:47:b4:4a:4f:95:f5:
                    01:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:83:1E:E3:00:17:C3:2C:08:40:BA:22:BB:B3:80:5D:7D:09:ED:1E
            X509v3 Authority Key Identifier:
                keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b4:17:5b:18:b9:fd:51:29:fb:23:38:9a:0d:bb:3e:18:23:
         78:ef:db:79:c0:cd:ae:a4:b2:a7:8d:be:41:0e:bf:ae:b8:1a:
         1b:dc:2a:e0:17:13:1e:d1:a3:f4:82:64:c3:5b:ff:00:c7:6d:
         3c:a9:52:7e:08:0a:df:64:8e:59:b6:0f:43:51:9b:4d:e3:83:
         0a:fb:81:3e:05:5f:f6:a7:9b:16:93:1e:a3:c4:a3:04:70:49:
         e0:6d:41:71:51:aa:e6:c3:2f:b8:f3:83:d6:db:cd:f8:f1:3e:
         2b:58:bb:0e:97:06:e3:5e:ac:41:f8:60:5f:55:31:02:ff:2d:
         2f:ac:54:90:98:a1:00:9d:dc:f3:fb:16:0b:5b:4e:a3:f0:05:
         9d:a4:0b:f5:52:7d:09:60:4e:bf:a5:10:9a:86:58:67:d9:a0:
         0f:1c:95:16:db:8a:ac:02:8d:5e:02:d7:93:92:f9:8f:d0:96:
         7e:43:f3:34:01:0e:f5:71:74:76:d5:82:17:83:5b:ba:e7:a4:
         94:d2:af:6f:a8:7c:7d:d0:74:75:66:cc:5d:51:28:15:43:99:
         88:3c:74:a3:8e:d7:fd:0d:5b:e9:7b:f1:84:0d:cf:28:1b:0e:
         04:37:0f:7f:b2:62:7f:58:7a:7c:f6:6b:c5:e9:3c:23:da:86:
         eb:c9:09:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:22:24 2024 by rpki-client on console-fra.rpki-client.org