Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
File:                     1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json)
Hash identifier:          HCa3auAaiAXnbt3YMvL0JqXtDRlYAOnEgckAuulsAIA=
Subject key identifier:   60:5E:04:9A:27:15:1C:56:D0:72:BC:E2:74:21:49:3A:C4:D2:9E:A4
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Certificate issuer:       /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial:       018F302A56399FCFFA662505C67128FB16D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
Manifest number:          1150
Signing time:             Tue 30 Apr 2024 18:00:31 +0000
Manifest this update:     Tue 30 Apr 2024 18:00:31 +0000
Manifest next update:     Wed 01 May 2024 18:00:31 +0000
Files and hashes:         1: 0b0YQwrD11iHjt_xYRXTd5jCD3I.roa (hash: UvKGsob5S/eBLcT3jIDDkJ0ljSXxSZDNMU5hs/b8XRU=)
                          2: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: YPKLsN52zPP+1l4ii02JEIY2XYPfXZ4QDpLKlHHmspc=)
                          3: 3_8yBMLxMmniO_9_ozJWnfHTjrw.roa (hash: vxd5zANMstJn1573YjWcmRPMpvn8Mz4+Lec0d2UTcVA=)
                          4: 9idU_VLb1TUhnXi4Kl3nYAghP8U.roa (hash: ALn3b13rn46Xcv6Vhs1kZ7+uLeq8RneX7+lRkz0goMY=)
                          5: ebLW16FJJmVaP1xB6PsTDucQTS4.roa (hash: NhuRJvG3nv9DTmqFrZoEtCt39xBZ5AjjSpxVeIj9GS8=)
                          6: l80JW1MefK5Tu_nMPS2-t4sf17I.roa (hash: BHI/gwXcxDtLJ0EVVPxZOj7di99uq1+h9k0miPG2NP8=)
                          7: qvXVyPN38UgT4P1tkzWPfIxW96Y.roa (hash: M2KN/z1iDYPb5hej6J4xSqnve9ZfGX/HqlriaPxUFWE=)
                          8: veH7GmEgAoaDKG1BlOosMAZJsNM.roa (hash: GVwI3Op4vSDGzI1fDb9BLXkPxL50JFnR6avRvF27fZA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:30:2a:56:39:9f:cf:fa:66:25:05:c6:71:28:fb:16:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
        Validity
            Not Before: Apr 30 18:00:31 2024 GMT
            Not After : May  1 18:00:31 2024 GMT
        Subject: CN=605e049a27151c56d072bce27421493ac4d29ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:95:73:ad:b0:a8:c9:b7:7e:b1:a9:92:f8:
                    ed:ac:33:ad:99:32:dd:c6:e6:c8:f7:2c:fb:1b:91:
                    81:c4:f3:65:ed:7e:95:34:5b:98:65:85:f8:81:e7:
                    66:d8:de:64:bb:83:c0:8b:e9:97:02:29:cf:d7:c3:
                    8f:a4:44:90:a4:7a:94:84:19:fe:ef:b6:40:1a:68:
                    fd:1c:50:c8:72:49:77:86:79:e5:0d:3a:c0:fc:42:
                    7a:81:76:89:d3:db:32:43:83:5f:6f:18:88:74:45:
                    5f:e6:e5:f7:77:f3:96:79:74:3c:d5:e0:b4:3f:de:
                    6e:d3:f1:dc:d3:bc:d0:d9:8e:fa:a8:d2:b7:00:53:
                    05:66:4b:9d:6b:8a:00:de:d3:eb:34:21:d9:63:bf:
                    2c:c7:43:f8:65:3e:ca:3a:23:0c:dd:42:22:84:5d:
                    9a:aa:b8:a4:fa:09:a3:66:4f:b6:7f:46:ed:de:c2:
                    16:fc:81:e4:c7:58:d0:31:b7:95:ad:59:2f:f5:73:
                    9a:36:87:72:50:93:38:87:69:03:86:72:51:9f:88:
                    70:9a:01:23:d9:6f:57:78:fa:1f:22:a7:c0:36:57:
                    26:6b:14:72:46:a2:db:47:12:c5:7d:93:bd:99:c3:
                    e4:74:bb:f2:79:73:6e:8f:8f:32:58:28:1b:a8:e2:
                    4c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5E:04:9A:27:15:1C:56:D0:72:BC:E2:74:21:49:3A:C4:D2:9E:A4
            X509v3 Authority Key Identifier:
                keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a0:33:c6:52:87:1e:08:65:ca:0f:5b:48:8a:32:ba:52:bf:
         cf:03:7f:2f:93:f4:bd:ad:38:66:58:4b:47:8f:37:85:a1:0a:
         85:28:20:57:76:44:b7:0f:ad:98:7a:4c:58:12:25:87:10:c0:
         24:23:66:53:0e:77:ea:9b:c7:d3:b1:0a:a7:7a:ab:31:c9:b6:
         aa:ff:91:14:a6:00:29:de:ca:aa:67:de:ee:7c:a7:03:a8:a8:
         9d:78:39:7e:06:64:30:8d:62:e7:0a:3c:56:32:a9:8e:17:47:
         22:9e:6b:e2:68:e2:fe:cf:11:6f:ff:0f:51:ef:58:52:df:87:
         ea:38:34:90:16:60:4f:21:04:9e:35:9b:fb:a3:10:c0:6a:78:
         8d:9c:c7:8a:96:65:45:72:01:c7:a1:39:50:7e:7c:b3:cc:36:
         67:3b:a0:f5:c2:16:9d:6a:35:6b:44:87:48:7e:a1:05:60:30:
         c5:b7:c3:8f:45:ac:2b:03:fb:2b:c5:12:ad:1d:91:75:9b:3c:
         32:3f:49:d9:09:e0:aa:32:5d:a0:da:2b:a4:cc:84:7a:6a:34:
         72:e0:87:0b:0d:79:8e:53:fc:ba:2c:4b:fb:42:d8:f9:fe:c5:
         59:1b:e7:59:82:36:81:2e:75:62:39:2b:76:5d:76:1e:0d:ca:
         be:1e:bb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 03:46:31 2024 by rpki-client on console-ams.rpki-client.org