Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File:                     1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier:          GBHoE2FeyhP1AW1kan+X1gAzG4zAbz6mImXMu1be48Y=
Subject key identifier:   0A:D1:53:91:FF:09:73:9A:89:5C:8F:3B:A0:1B:ED:17:AE:FE:4A:7F
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer:       /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial:       018F429F702217FA5DF263D2DFDB59BD9F11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number:          09D1
Signing time:             Sat 04 May 2024 08:01:36 +0000
Manifest this update:     Sat 04 May 2024 08:01:36 +0000
Manifest next update:     Sun 05 May 2024 08:01:36 +0000
Files and hashes:         1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: 0v6Rc0YqDIr5ndalJ/fntOLWPHvrRrrKPdPs0ozGlXw=)
                          2: Q9ih0WskFGMz4yotb7q3zv_2M0g.roa (hash: ih6RhXZl42TnrfV7Dug8pXt0UYLfpD11gKqbkh8qwaA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:9f:70:22:17:fa:5d:f2:63:d2:df:db:59:bd:9f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
        Validity
            Not Before: May  4 08:01:36 2024 GMT
            Not After : May  5 08:01:36 2024 GMT
        Subject: CN=0ad15391ff09739a895c8f3ba01bed17aefe4a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:26:70:4f:03:c6:0e:b1:75:99:4b:5b:8e:
                    f9:00:7e:b5:90:88:27:6e:9d:0d:fb:73:d7:25:32:
                    97:89:cb:cf:f3:ee:b6:a1:ee:de:37:01:d1:1c:81:
                    5b:8d:b1:ea:ab:b5:30:17:27:3f:14:ad:2f:df:c7:
                    a6:05:af:ba:38:49:59:92:42:44:fa:9d:6a:65:6c:
                    27:ea:39:cf:d1:5f:7f:67:f0:a6:4e:0f:7b:35:31:
                    54:8b:9e:14:a0:70:86:36:5d:12:ac:58:45:70:5b:
                    d3:41:93:43:31:a4:f7:82:03:eb:f5:21:38:36:a4:
                    39:bf:aa:02:24:5d:c5:07:53:43:10:87:ec:66:10:
                    c1:28:82:d0:22:26:ab:63:bf:33:a2:40:e4:cd:8d:
                    be:38:5b:9c:10:1d:24:49:1b:fc:25:cc:48:36:36:
                    c5:da:45:4a:c2:c2:03:a6:f3:17:c9:5a:a1:03:05:
                    4e:a6:ae:74:66:92:b1:be:6c:d0:ab:29:b7:bc:1c:
                    fb:9c:e6:c5:94:fb:c4:ff:e7:5a:59:f8:42:aa:80:
                    e6:32:e8:a0:73:26:dd:fb:cb:f6:b4:6f:0f:5c:37:
                    0d:1d:b7:9c:24:c3:9c:49:81:8b:68:8d:e4:fe:9e:
                    d1:22:7f:37:84:8a:d4:be:96:94:b2:03:19:48:77:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D1:53:91:FF:09:73:9A:89:5C:8F:3B:A0:1B:ED:17:AE:FE:4A:7F
            X509v3 Authority Key Identifier:
                keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c7:31:12:a1:21:0e:96:c4:de:64:ed:ff:46:4c:27:6e:c9:
         93:db:b9:60:b1:b8:fb:0d:b9:33:d6:2a:b0:06:d8:e1:5a:73:
         7b:9c:07:f3:30:31:3e:4b:4a:cf:b8:87:b0:f3:30:e7:dd:a0:
         53:99:3c:61:94:06:fe:4e:86:42:0c:80:22:ca:d8:0b:43:11:
         02:e4:ba:f5:c8:1f:48:07:5c:08:09:1f:59:0f:64:4a:82:37:
         7e:84:e7:f4:da:76:d9:e0:1f:4a:7c:bd:cf:e5:85:14:2d:2b:
         f1:1a:60:a9:4a:d9:01:13:3e:49:e7:75:57:4e:39:f0:9c:86:
         b1:45:f8:d6:aa:f0:a6:6f:bb:5c:22:5f:9e:65:df:e7:c0:42:
         b8:9c:c8:5b:c3:4f:61:3c:3e:80:ed:b9:33:b0:62:82:9b:2a:
         12:3b:0c:70:8e:e3:b6:64:00:70:11:4f:ba:32:2e:70:3a:82:
         b3:a4:be:fd:40:9d:30:89:28:0b:d9:47:ea:5e:f7:73:71:9f:
         da:fe:23:bd:32:90:38:97:86:87:16:c3:59:ea:9a:4b:e8:cd:
         9c:94:ba:a2:03:4f:e2:12:64:87:c9:e3:9f:4c:9d:7c:ad:45:
         e6:59:14:57:5e:8a:96:82:70:a3:1d:49:ff:95:4c:ff:18:24:
         f9:db:e5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 10:00:15 2024 by rpki-client on console-fra.rpki-client.org