Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File:                     Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier:          NyOy2i+0UaGgqIHZYxOGfr1AXCu2Xj49FvAaYquwrjM=
Subject key identifier:   02:74:4F:6F:84:10:92:3E:58:9B:AC:98:DA:F7:C4:5C:88:A0:22:23
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer:       /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial:       018F44C4506D5B4D0198F00BCE8BA09F1FBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number:          1161
Signing time:             Sat 04 May 2024 18:01:07 +0000
Manifest this update:     Sat 04 May 2024 18:01:07 +0000
Manifest next update:     Sun 05 May 2024 18:01:07 +0000
Files and hashes:         1: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: 6Uo4q2cN8VUxd3LeHVQGwnHSG7zcB8xdcChmxzsWE4Q=)
                          2: EsWVd7DRmcRfkmdao-OP0BQJ230.roa (hash: YT0hbDxa1+sApWFNr49giE0xb+WsdTBzAY04fwexavg=)
                          3: aOweO0p-oIXhAksX2z8xIBPhiQ4.roa (hash: cGtDiKAz+dOMJ1GCLSA/vW1gQ9r/LVUBAl7YVIplnoY=)
                          4: o9Bl7yfDfxYTftzBosuwFgPklfE.roa (hash: SuPUmTG9zHs4WYAd2wo2GHLlmSyTvC2NE6NDoNPqyi0=)
                          5: tPMiCFIaeO5eEaWuiPEl9jb_-4w.roa (hash: IQTGMguaC3VBm/QbofJ/Ldrx26xSitHSnQHw4I2OdwU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:c4:50:6d:5b:4d:01:98:f0:0b:ce:8b:a0:9f:1f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
        Validity
            Not Before: May  4 18:01:07 2024 GMT
            Not After : May  5 18:01:07 2024 GMT
        Subject: CN=02744f6f8410923e589bac98daf7c45c88a02223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:32:ef:e9:8b:d2:2e:f3:75:4c:fe:e2:07:
                    27:70:64:46:af:ca:69:fb:02:e1:1b:f5:2e:03:54:
                    1d:52:fd:8d:a3:cf:98:ed:ac:31:55:a4:08:15:ed:
                    5c:e4:2d:e4:20:f7:f0:12:17:cd:c3:e5:97:68:4e:
                    88:e0:64:42:5a:7e:cb:fc:2e:43:cf:43:2d:94:15:
                    8e:fc:51:77:dd:72:c6:54:b5:3c:29:7c:38:84:17:
                    7b:68:85:39:cf:17:18:05:b1:21:f3:f6:b3:78:f3:
                    39:68:de:2a:33:87:90:ab:55:30:21:81:e6:5b:50:
                    81:27:94:30:66:03:bc:df:6d:fc:8c:4c:d6:be:33:
                    26:ce:f8:c8:6f:be:12:25:7e:42:05:71:2a:09:41:
                    45:91:4d:04:9b:d9:bf:6a:1a:6a:ac:a3:fd:22:c2:
                    54:4d:31:ef:81:b1:3b:75:4f:fa:3b:d2:cc:00:10:
                    e1:9a:b7:3d:89:e4:5e:18:5a:4e:b6:36:d7:b3:e2:
                    59:cd:63:4d:1c:f0:c2:79:ef:f5:09:c3:84:61:d7:
                    d7:40:46:2a:33:24:26:d5:6b:be:53:a7:97:c0:91:
                    01:59:ec:57:12:c5:10:0c:59:4f:2c:5c:e2:45:37:
                    9f:f7:8c:3a:17:ba:fc:d8:c3:e2:b4:c8:78:d6:0b:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:4F:6F:84:10:92:3E:58:9B:AC:98:DA:F7:C4:5C:88:A0:22:23
            X509v3 Authority Key Identifier:
                keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:84:fc:64:81:32:ca:cb:b0:5b:6f:4d:eb:7b:b1:22:b1:15:
         df:de:3f:60:d7:da:2f:a4:98:01:b3:eb:83:8b:a4:83:d6:db:
         2a:d0:cf:15:c0:92:fa:49:f8:87:ce:41:8c:93:da:be:47:b7:
         59:c1:48:7f:e0:e7:64:f9:93:37:8b:f5:32:91:ca:df:dd:af:
         0d:bf:51:0c:34:e5:f8:c3:33:e5:24:2d:bc:34:a5:95:28:15:
         49:5a:51:10:00:cd:e5:6d:c8:dd:d3:42:c5:16:89:15:b1:77:
         71:7c:57:e7:48:06:77:93:ff:8f:e6:29:62:91:57:5e:41:da:
         27:09:1a:a8:ad:03:54:33:e5:75:c4:f9:ad:b8:5c:b4:7d:07:
         46:c2:53:e0:42:c7:61:fc:ae:68:e9:11:e4:df:cb:c4:d6:d5:
         be:d3:a5:0a:d6:3f:8f:41:70:14:73:32:a7:6c:96:59:fd:81:
         59:3d:fc:25:34:ad:49:46:5d:3c:10:8b:c6:04:0c:07:1a:93:
         34:ab:19:d2:de:f5:b8:17:24:8a:c8:e3:3b:da:b1:39:40:04:
         71:d4:31:2f:a3:30:25:fb:25:9b:12:17:d2:2b:4d:a3:5d:a4:
         53:fa:2d:6a:12:26:63:c3:5d:d1:df:19:28:2a:cc:e0:46:5d:
         57:bb:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 23:04:16 2024 by rpki-client on console-fra.rpki-client.org