Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File:                     1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier:          1FkOpCnseSfMosG3Bk5d5Ccpdb1fStDbCIK9/N0Uwcc=
Subject key identifier:   74:11:0F:37:AA:43:57:FF:F8:8F:5D:30:62:CA:EA:2C:26:01:BD:01
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer:       /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial:       018F3362727727D6924D5F68E3D77430A323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number:          114C
Signing time:             Wed 01 May 2024 09:00:40 +0000
Manifest this update:     Wed 01 May 2024 09:00:40 +0000
Manifest next update:     Thu 02 May 2024 09:00:40 +0000
Files and hashes:         1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: 12oI/ncURQz4Ife1+nUvkiYQuz6vWPA5tqpTjdE70Jk=)
                          2: F_SN_5FdC9P9kaPAihiL5sECKGk.roa (hash: Vyoli3nJcjtW9m0HrRp2BHJwo62vYJz9Wpg1w1C7faw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:33:62:72:77:27:d6:92:4d:5f:68:e3:d7:74:30:a3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
        Validity
            Not Before: May  1 09:00:40 2024 GMT
            Not After : May  2 09:00:40 2024 GMT
        Subject: CN=74110f37aa4357fff88f5d3062caea2c2601bd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:5e:92:39:c0:47:ac:11:40:41:6d:d3:a7:
                    3c:bc:49:0e:f0:c1:83:44:63:57:f2:34:17:63:c4:
                    18:63:1a:3d:e0:d9:26:40:3c:a9:1e:ea:58:03:99:
                    10:12:3b:05:a4:ba:a0:83:ca:b0:25:60:1a:66:39:
                    cf:93:bc:d2:83:3c:d7:6a:98:96:ed:66:d9:f1:8f:
                    7f:39:8e:e3:a7:2b:13:0d:50:78:db:a4:f1:0f:38:
                    be:80:99:5c:97:39:29:9d:91:66:90:e4:e7:cd:1b:
                    eb:4f:ba:a9:eb:65:5d:6f:68:82:44:d2:96:7d:7a:
                    5b:65:0a:d3:82:b7:2b:5b:d7:8e:7c:b4:5f:ac:ba:
                    8c:83:4c:3c:e6:c8:6e:12:54:8f:fc:b5:c9:e3:f2:
                    26:56:eb:b6:1e:a5:14:2a:64:b7:ea:a1:7e:be:56:
                    ba:4b:2c:d9:77:4b:b3:9f:38:ad:74:dd:18:b8:26:
                    5d:03:13:56:ea:49:da:ed:53:00:64:09:4d:ac:8f:
                    53:e6:fb:26:8b:a1:14:38:ae:9a:6f:5a:62:0f:f6:
                    de:b5:b5:f1:9e:8d:70:a7:6a:84:6e:f1:87:fe:10:
                    29:1c:4d:54:76:6a:5f:23:c5:c8:2e:b0:28:31:a8:
                    8c:39:6b:58:b7:b5:d7:48:17:eb:a2:a2:da:6d:96:
                    18:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:11:0F:37:AA:43:57:FF:F8:8F:5D:30:62:CA:EA:2C:26:01:BD:01
            X509v3 Authority Key Identifier:
                keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:a2:56:09:b3:45:5a:fe:c6:04:42:e3:62:93:a9:e5:88:
         17:28:8e:e0:c1:24:1e:c3:43:01:61:4a:58:fc:ca:ff:dd:f5:
         ba:64:5d:c9:69:62:42:5f:1e:25:a0:d8:9e:24:8f:e8:96:f0:
         06:8a:c0:09:2f:f8:ef:5c:05:3f:25:50:2e:58:61:17:21:07:
         7a:c5:9a:c2:c5:7e:2d:bb:15:c0:ec:91:bc:e1:f4:d2:84:12:
         63:33:67:b2:d4:ab:81:16:00:d0:48:5b:a3:90:94:aa:96:4a:
         61:4e:d2:1b:d1:51:a7:8c:94:3b:26:b2:d9:a9:50:0a:2c:7e:
         9b:38:eb:56:0d:f5:40:d5:9d:41:45:83:31:25:17:7d:0d:79:
         3d:8e:26:2d:cf:da:d8:f6:bc:6c:1c:1b:ee:c5:47:d2:8b:d0:
         8f:76:e3:0d:df:6d:b3:b4:1e:4f:dd:03:06:00:22:f4:c6:f6:
         16:df:6b:5c:e1:43:a2:4a:b9:96:17:cb:76:26:4a:8b:86:51:
         43:56:b8:13:74:e8:2d:0b:1e:d8:45:7b:d0:c8:99:e0:a8:6f:
         4d:1f:29:63:a8:93:11:b2:3c:77:ab:05:b7:01:a4:5f:b0:94:
         41:40:80:75:83:de:02:62:0a:45:64:74:16:e2:e9:8d:da:22:
         23:b4:d1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 17:57:00 2024 by rpki-client on console-fra.rpki-client.org