Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
File:                     494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft (raw, json)
Hash identifier:          XV+JRm2VYLGPmeNmzCl0H7JeelvgUs1NCTNrDI6oAIg=
Subject key identifier:   D0:CF:44:05:E5:26:90:79:1A:1B:D4:92:50:66:19:9E:3C:E7:9F:7C
Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
Certificate issuer:       /CN=e3de21b0636c614ebf43664798012afd56c5ee86
Certificate serial:       018F4B6C2319F25BF9CE15FE378481D2ED45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
Manifest number:          1157
Signing time:             Mon 06 May 2024 01:02:09 +0000
Manifest this update:     Mon 06 May 2024 01:02:09 +0000
Manifest next update:     Tue 07 May 2024 01:02:09 +0000
Files and hashes:         1: 0lOKYm7qKbzB2f1lvqrxg_ymWMA.roa (hash: BEKXX6A0Hkez8DnaqAKB2xI1MdgHWuhz09uJClaLhLw=)
                          2: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl (hash: x5pCRy6ui7P4ATVErZVzoNvmuas60VAdgJ/4M9/Hd3w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:23:19:f2:5b:f9:ce:15:fe:37:84:81:d2:ed:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86
        Validity
            Not Before: May  6 01:02:09 2024 GMT
            Not After : May  7 01:02:09 2024 GMT
        Subject: CN=d0cf4405e52690791a1bd4925066199e3ce79f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:61:a2:30:ac:14:3d:79:35:60:cb:b6:d2:
                    c4:3a:dc:f7:8d:93:17:41:b5:fe:fa:80:5f:c1:7e:
                    99:41:2c:c4:f9:8f:16:99:e0:7c:32:68:d9:af:ea:
                    07:38:35:e6:1c:ab:86:13:df:35:bd:e8:59:f5:5f:
                    61:e8:44:4c:91:5d:3f:71:2d:ec:9a:76:c4:ec:50:
                    e9:25:54:67:50:6a:d5:96:a0:9e:d4:7f:bd:dc:8d:
                    60:ca:ef:77:a3:f5:99:d1:24:1a:99:3d:37:7b:0c:
                    f9:f8:9a:d2:11:73:6c:a2:27:5b:5d:3c:a5:58:78:
                    03:c7:a4:7e:53:fc:07:4d:a2:e2:c6:f7:e9:3d:5a:
                    27:a4:e5:bc:4c:a3:66:32:bc:99:1a:cc:54:a7:2a:
                    8a:c6:eb:5c:ed:ed:a1:32:0d:6d:dd:0a:4c:b8:13:
                    f2:3c:0b:b1:e8:fa:cd:99:47:69:76:48:da:9c:0d:
                    8b:75:b2:58:f8:fe:27:b8:50:6c:ae:5e:90:c7:b6:
                    c6:33:ab:31:f4:44:a1:8b:fd:d3:9c:21:a3:ae:ac:
                    f1:ed:25:71:cc:4a:59:24:1d:d3:0a:10:93:fc:80:
                    99:44:f3:78:7c:2a:6c:b7:34:f0:96:9d:df:15:a7:
                    b6:e3:ab:b3:f1:1a:82:7b:9f:65:ed:ba:f3:7c:4c:
                    5e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CF:44:05:E5:26:90:79:1A:1B:D4:92:50:66:19:9E:3C:E7:9F:7C
            X509v3 Authority Key Identifier:
                keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:14:70:a9:b0:fd:6c:70:bf:ba:9a:cb:f8:7a:4a:65:65:
         ee:3d:16:93:8c:85:00:7f:16:6b:6d:86:59:1f:25:99:84:8e:
         fb:ed:54:e1:d6:32:7d:22:d7:91:2f:45:8b:f2:d6:bf:64:6d:
         7c:6e:07:84:9b:a7:9d:11:de:04:93:25:cd:fc:0d:c1:28:14:
         22:42:b9:40:7b:d3:2e:59:6c:c4:dc:4f:fa:ca:05:ff:3e:f4:
         73:be:1b:25:02:69:41:de:77:09:61:a3:db:09:92:3a:e6:42:
         b7:6c:87:e5:b3:84:5e:ce:27:df:9f:48:3f:0b:fa:b7:18:08:
         c8:11:fb:b3:2d:09:18:57:ca:a1:ab:9e:ea:c9:22:ab:6c:1d:
         31:25:e7:0c:2d:45:5a:91:a8:14:db:86:00:41:54:65:bc:67:
         f0:37:f3:fd:9a:e1:f1:5f:db:76:19:ff:7c:84:d6:28:85:00:
         e4:89:6f:44:ec:00:4a:1f:14:7c:75:9b:9a:dc:22:87:31:ca:
         db:55:02:ef:1f:3a:c0:76:2f:55:a4:0d:65:8b:e8:78:f8:a2:
         e3:f1:d6:01:42:f6:9d:7d:8c:2c:fe:56:f6:33:11:d3:a3:e2:
         e0:f1:9e:d8:08:61:55:9c:85:26:74:93:55:dc:66:b5:28:3e:
         16:77:9b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:15:43 2024 by rpki-client on console-ams.rpki-client.org