Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File:                     G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier:          ZfRKLHt5Fmwwvev8k3eRPfjv43zZpugdj5+u3fa3fwE=
Subject key identifier:   0A:CF:DA:D9:42:9E:F2:20:98:89:A0:55:B8:E8:A9:F3:B2:0C:4C:31
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer:       /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial:       018F486A4A7C1952E2344D433BCA33165DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number:          1159
Signing time:             Sun 05 May 2024 11:01:16 +0000
Manifest this update:     Sun 05 May 2024 11:01:16 +0000
Manifest next update:     Mon 06 May 2024 11:01:16 +0000
Files and hashes:         1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: BrJRz+icf62t9Tg2mmpqWFnenWQeyP4NopIPLURMnSo=)
                          2: YnQVXFSEtcGKj1ySWNPnigrh_Gc.roa (hash: VlFeFiluJIvfKSFDOZfcweQlAbqR/4Z279IH3fV7Yp4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 11:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:6a:4a:7c:19:52:e2:34:4d:43:3b:ca:33:16:5d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
        Validity
            Not Before: May  5 11:01:16 2024 GMT
            Not After : May  6 11:01:16 2024 GMT
        Subject: CN=0acfdad9429ef2209889a055b8e8a9f3b20c4c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:ab:d3:c6:22:b8:65:a5:85:45:a8:e2:65:
                    2d:fa:59:0c:73:27:50:d7:cd:7d:37:da:12:a8:c5:
                    cb:45:62:dc:fd:56:07:ee:0a:e0:53:e8:6e:cf:c7:
                    1c:49:79:9c:24:e5:18:2b:c9:d5:30:57:d2:f9:80:
                    82:bf:44:94:6b:57:54:87:d5:69:ec:73:1f:7c:1c:
                    01:18:4c:af:3c:fb:dc:70:4b:15:7f:4c:69:b7:f4:
                    72:81:9a:8c:b7:c1:d0:f8:08:cd:ac:5d:a4:1f:2f:
                    d6:5a:c7:4b:41:cc:3d:0c:40:11:f2:ad:22:f7:35:
                    72:39:69:69:d8:f7:99:28:45:cd:74:62:ee:c6:07:
                    f3:e2:84:e1:89:88:e2:b9:51:bb:50:89:21:3c:f1:
                    8b:1c:46:78:4c:08:f8:64:8a:fa:ae:d6:0c:9a:fc:
                    e5:92:0b:d6:62:42:fa:48:7f:f7:ff:f6:3f:ad:c3:
                    ed:16:50:6c:af:23:c7:1c:eb:62:fa:50:04:b6:c2:
                    d5:e4:3b:00:48:b3:98:2f:8c:8d:b6:12:71:35:93:
                    52:ce:ba:41:f5:17:a6:4c:8f:18:41:a3:81:4c:91:
                    d7:f9:c9:fe:4e:8e:7c:fd:78:19:fc:1e:cb:9c:3d:
                    32:aa:8f:91:fc:4e:79:9a:3e:90:c3:7c:17:99:21:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CF:DA:D9:42:9E:F2:20:98:89:A0:55:B8:E8:A9:F3:B2:0C:4C:31
            X509v3 Authority Key Identifier:
                keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:81:1f:45:7e:91:ba:15:c2:cb:f7:14:c7:0b:c1:37:5c:c5:
         fb:ec:69:d6:dd:17:f3:a8:68:25:14:2f:2b:3c:44:5c:09:98:
         49:9b:6b:43:38:1c:e7:1e:73:38:77:2f:3f:7c:48:12:5e:35:
         81:48:6a:d1:1f:53:ce:4a:eb:87:7f:4f:58:74:5e:aa:75:03:
         9b:8c:fb:0c:3f:51:b4:50:f4:e8:fc:0b:01:17:5b:53:6e:3e:
         73:fe:a1:1a:3b:be:6a:05:39:47:ed:00:4d:4d:53:2f:b8:20:
         84:54:f8:fa:7d:f8:c3:a4:c7:77:3f:d1:46:7b:0e:3f:94:52:
         9c:ef:ce:61:c8:4a:16:f0:42:eb:4e:a8:2e:fb:d3:61:77:cd:
         af:36:29:d9:02:19:42:99:7a:a8:60:fd:ca:ba:b4:c4:ce:ae:
         d8:8b:d0:18:d8:65:94:45:8c:6c:91:87:5d:dd:27:0f:2b:66:
         85:73:21:fd:e0:a8:f9:19:54:55:f9:27:02:c9:18:28:9d:89:
         6c:db:f8:c9:3f:e1:40:67:5c:22:48:90:07:5a:1b:7c:c5:0b:
         11:68:f5:91:62:3f:6d:0d:2b:a7:a6:c5:49:83:00:32:6f:ba:
         a3:9a:b3:08:b9:f2:23:0e:fa:52:b2:53:ad:83:04:5c:2d:7f:
         82:f9:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:13:28 2024 by rpki-client on console-ams.rpki-client.org