Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File:                     1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier:          o2DxVzhlpmX1GS/Hu1WZIntqTivJwnpDvF0SL3brGWo=
Subject key identifier:   25:FF:B9:79:F3:A7:56:C1:4B:91:C3:2E:4B:97:32:B3:57:64:FB:BE
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer:       /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial:       018F448E121948ED7E7BAA7E4A07E08718E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number:          1113
Signing time:             Sat 04 May 2024 17:01:52 +0000
Manifest this update:     Sat 04 May 2024 17:01:52 +0000
Manifest next update:     Sun 05 May 2024 17:01:52 +0000
Files and hashes:         1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: NwsnMPepKldjH7b8qtRIJpBWoYVKvmtf2h8HzhnR25I=)
                          2: XsLMgFhH6aIjmRPUYwcy8SA2mM8.roa (hash: LlD5nY0I8JDzIffH9n3rG6LInjdphBh7nqXgX4J8iaM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:8e:12:19:48:ed:7e:7b:aa:7e:4a:07:e0:87:18:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
        Validity
            Not Before: May  4 17:01:52 2024 GMT
            Not After : May  5 17:01:52 2024 GMT
        Subject: CN=25ffb979f3a756c14b91c32e4b9732b35764fbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a8:e3:5f:89:cc:58:d0:98:a2:7a:40:65:a4:
                    d8:1d:ec:ad:f9:50:74:de:9a:1c:24:64:45:c4:5e:
                    cd:f1:13:fe:0f:ee:d8:fe:4b:70:58:11:86:42:a2:
                    fe:b1:6d:b9:3a:ca:67:1f:bd:85:e3:57:7b:af:06:
                    5a:4e:fe:3f:58:66:16:12:42:8a:a3:a2:aa:e6:13:
                    2d:d6:45:5d:67:4c:1d:f6:0c:fd:0d:40:2d:5a:c4:
                    0e:0c:24:ad:c9:06:9c:2e:db:17:75:8c:62:46:68:
                    5f:aa:15:ba:b4:14:75:e8:0f:ea:1a:db:0d:39:cc:
                    db:b0:01:34:97:66:bc:11:74:42:bd:01:d0:3a:8e:
                    37:3d:7f:0c:5a:a9:e2:94:0a:4e:96:92:da:ce:0d:
                    7f:2e:8a:00:98:ae:4c:ca:34:7b:2d:38:30:e3:13:
                    d9:a9:3c:d3:9e:8d:47:86:47:f5:68:65:af:e0:3b:
                    09:45:30:12:68:20:24:a6:0c:1f:c4:05:46:9b:01:
                    ba:9c:12:2f:a5:b9:11:5b:b3:d5:5d:84:86:32:2b:
                    97:10:30:3d:5a:ce:8e:97:54:43:7f:a0:08:7e:16:
                    d9:3b:c3:92:22:2d:2f:c6:87:34:15:27:5e:05:0e:
                    91:d3:b4:02:fa:7a:0f:11:07:25:36:6b:47:21:f8:
                    42:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FF:B9:79:F3:A7:56:C1:4B:91:C3:2E:4B:97:32:B3:57:64:FB:BE
            X509v3 Authority Key Identifier:
                keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:55:56:9f:e5:4c:71:65:da:f1:fd:72:e0:80:22:e3:01:8c:
         79:e1:85:03:7d:44:ff:99:53:6b:5c:5d:c0:0b:2c:67:60:50:
         f3:d9:6b:ac:08:ed:1b:08:4c:f7:eb:48:ff:7a:51:39:8c:54:
         31:78:40:9e:34:46:a2:25:28:66:b9:56:55:5d:a7:8c:b1:41:
         8b:69:c3:8d:0c:49:a9:27:99:0a:a7:30:81:d9:3e:eb:f5:28:
         e3:63:63:a8:0a:df:8b:50:b4:2a:b3:0a:07:9f:c9:ca:0c:bd:
         e1:61:de:b9:cf:da:29:f8:19:4c:d6:4e:a2:c0:25:1b:6d:71:
         af:17:0a:1c:bc:e7:89:89:61:e9:52:09:83:24:5e:54:d7:30:
         29:1e:af:02:a1:57:39:1e:b6:0b:ba:af:3f:92:5b:7b:f7:d9:
         a4:9e:5d:18:45:9a:29:64:dc:40:fb:18:01:c6:b7:70:5b:34:
         0e:3a:cf:ae:9e:a3:4c:85:d3:a5:78:7a:39:ff:e1:9f:5c:48:
         ec:e5:0d:92:da:54:e4:0e:88:71:af:e8:09:e5:81:c0:46:0b:
         c0:81:a5:47:5a:69:a9:e3:08:d3:21:be:01:a7:52:5a:85:b3:
         c6:b7:60:39:07:8d:ac:44:81:d4:08:4a:ff:fc:96:43:84:b4:
         9f:46:f7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:44:41 2024 by rpki-client on console-ams.rpki-client.org