Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File:                     ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier:          vDyDNFVZ6XZDYlCY0dxLgkZnhov+O0o03EeNuseiIuM=
Subject key identifier:   C9:C9:D2:43:FD:92:D6:E3:54:3C:F5:8F:21:A8:F6:6D:F6:FF:4B:44
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer:       /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial:       018F373FEC570CF736D25D6554DBDC762E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number:          114E
Signing time:             Thu 02 May 2024 03:01:27 +0000
Manifest this update:     Thu 02 May 2024 03:01:27 +0000
Manifest next update:     Fri 03 May 2024 03:01:27 +0000
Files and hashes:         1: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: eeGGieb1dUnIQlxMcRGR8gVvQCgBErzNKsidWvi/O6Y=)
                          2: dWPs7VeFNLjm6nNah79NK6nhBKs.roa (hash: JDDvsXjy0E3I07/myojh4GuA7x8eVcmeYJ2Qeq0ViGU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 03:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:3f:ec:57:0c:f7:36:d2:5d:65:54:db:dc:76:2e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
        Validity
            Not Before: May  2 03:01:27 2024 GMT
            Not After : May  3 03:01:27 2024 GMT
        Subject: CN=c9c9d243fd92d6e3543cf58f21a8f66df6ff4b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:76:98:5c:ea:dd:6f:37:2b:18:32:c5:0b:7d:
                    93:ab:3d:d2:52:92:dd:e9:22:2e:5a:d5:cd:bf:90:
                    4e:85:02:c3:c5:3f:ad:ec:0f:34:32:47:16:8a:04:
                    3c:86:be:95:30:e7:15:43:df:ba:c5:d6:57:51:f7:
                    78:fa:6d:ae:09:22:9f:71:4b:81:af:81:53:2f:48:
                    ec:2d:ed:37:af:6b:a5:88:89:aa:ae:7f:b0:ac:ab:
                    da:92:d0:f4:ba:59:ed:f0:16:f4:d5:a0:32:d0:8e:
                    7c:66:0e:3e:bf:2f:7e:bd:36:b4:93:07:e4:9b:20:
                    a7:f8:51:a7:3b:d1:4d:b8:0f:22:db:59:86:cf:0f:
                    02:1c:3a:de:b8:d2:de:eb:d2:e3:cf:c1:7d:76:a6:
                    7e:71:10:b9:91:ca:e4:18:a5:b5:30:fc:fb:a7:f6:
                    85:8b:f4:be:12:9f:ec:07:81:a0:c2:e1:3e:35:25:
                    42:d8:0f:ae:1b:64:6c:98:3c:34:e5:1b:43:2e:a7:
                    5e:10:b3:a6:bd:b3:b3:8a:a0:66:ab:e6:84:be:e0:
                    e7:ca:48:70:bf:91:39:e9:31:d7:20:51:79:ce:c6:
                    12:be:74:74:11:bf:ce:f7:1e:74:fe:0b:c1:5e:6e:
                    c8:fa:43:dc:af:fe:a4:aa:43:eb:bc:bc:1a:ba:8a:
                    af:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C9:D2:43:FD:92:D6:E3:54:3C:F5:8F:21:A8:F6:6D:F6:FF:4B:44
            X509v3 Authority Key Identifier:
                keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c9:6c:5a:8d:cc:9a:c0:44:55:76:aa:f9:6e:66:71:dd:88:
         a0:ee:91:e0:55:57:41:78:ab:f6:24:3b:4b:38:81:e7:99:c7:
         9c:45:6d:4e:d5:52:00:f7:8a:83:5e:4e:19:28:31:d3:75:4b:
         f9:c8:bf:44:b4:d0:d0:9e:9f:7d:eb:54:39:97:6f:42:21:a9:
         36:a3:ba:c6:d7:24:ad:16:b5:c6:dc:d3:b9:d7:ba:0a:de:7b:
         56:e4:7f:de:42:46:1d:7a:cf:6c:5f:a6:5e:50:e6:5f:13:90:
         36:f0:fa:dd:6d:bc:8c:ff:bf:d2:ce:99:0e:b1:4a:58:dc:17:
         be:bc:da:02:4a:ee:59:aa:01:aa:98:76:20:0f:66:ad:91:39:
         79:c3:1c:6d:71:4e:21:60:32:02:6e:60:45:32:3e:89:aa:c8:
         01:69:97:89:5a:60:29:87:d8:f1:bd:39:8b:d1:19:ab:71:ee:
         b4:e0:33:d6:42:28:12:bc:c5:92:96:42:a2:61:6d:ce:4f:5d:
         63:93:4a:7d:3b:cd:db:a2:6a:16:b1:6b:5f:43:e7:ed:60:c3:
         d1:40:1e:53:c6:6f:07:c5:36:58:1c:35:79:d4:8c:18:6d:6a:
         c9:21:4e:e7:b3:ba:b0:68:03:6c:1f:44:70:f5:2a:92:eb:9a:
         bf:34:cf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:27:39 2024 by rpki-client on console-fra.rpki-client.org