Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File:                     AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier:          puHhebo066NoICBXSbCA0ZSTDgMdtSExrjvcA6QxsFE=
Subject key identifier:   2D:A2:35:8C:2A:94:F9:91:84:53:E2:C5:F8:EA:02:0E:7E:50:2C:A8
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer:       /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial:       018F57DD979BC4353BEC54279393E4FFDE02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number:          115E
Signing time:             Wed 08 May 2024 11:01:31 +0000
Manifest this update:     Wed 08 May 2024 11:01:31 +0000
Manifest next update:     Thu 09 May 2024 11:01:31 +0000
Files and hashes:         1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: QgL2w9amy2+bsT8XV4RoBuILVFPw/qCcX3LbM7HA1WM=)
                          2: T49QIqnNNcKeOxbYnONDdm1zDv0.roa (hash: CjLdhyWpEYBH2noAwFgyhvfuISWLEiqE2Pw8t/NekmI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:dd:97:9b:c4:35:3b:ec:54:27:93:93:e4:ff:de:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
        Validity
            Not Before: May  8 11:01:31 2024 GMT
            Not After : May  9 11:01:31 2024 GMT
        Subject: CN=2da2358c2a94f9918453e2c5f8ea020e7e502ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:c1:d2:e1:0e:18:8a:67:77:f7:5e:cd:73:
                    a2:12:9d:bc:56:57:e6:3d:12:a8:db:32:b0:b3:4f:
                    c6:f8:d4:3e:4d:f3:4c:2e:57:c7:7d:13:ed:80:b4:
                    2a:96:79:0e:f6:91:a4:ee:3d:d4:38:f9:d9:1e:56:
                    b5:a5:e0:63:43:a4:9f:69:de:eb:71:ae:df:19:39:
                    0a:7f:eb:db:32:5c:3a:40:d2:69:1f:a7:da:0c:81:
                    b9:75:01:a4:e6:d1:70:e4:67:02:22:91:fa:a5:52:
                    32:17:13:98:da:5c:5f:41:48:76:08:f6:57:91:da:
                    2e:64:4c:37:97:e8:f4:3f:52:9f:aa:fe:bf:64:b3:
                    29:a8:8e:92:e6:2b:b2:33:dc:fb:b4:e1:da:43:81:
                    88:41:37:05:64:50:f6:d4:0a:ab:74:14:a5:2f:a9:
                    f3:b1:b1:96:1c:68:d9:82:dd:30:d6:59:1f:b4:da:
                    d3:0a:f7:80:8a:85:ca:4c:76:05:c6:fb:80:5e:f5:
                    e2:25:f7:00:0f:d5:79:e6:4e:b0:2b:f5:6f:cd:61:
                    e5:80:78:5a:06:58:4c:de:97:49:e6:76:e4:c9:26:
                    db:21:8d:b8:48:c1:4c:3c:b6:33:64:b5:c9:fa:e5:
                    a9:89:ab:79:8e:d9:95:03:37:e6:78:4b:bf:79:9e:
                    2b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A2:35:8C:2A:94:F9:91:84:53:E2:C5:F8:EA:02:0E:7E:50:2C:A8
            X509v3 Authority Key Identifier:
                keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9c:8e:85:87:b6:c4:1d:27:c3:24:3d:ae:3c:75:81:7a:8e:
         cb:82:5e:95:02:37:11:82:b9:6b:f4:fc:82:cf:57:a4:47:41:
         37:11:00:9d:e3:c8:5c:f3:92:0c:57:b5:5d:e0:4b:0d:5e:41:
         39:fb:5b:18:67:25:77:3f:8e:2b:59:67:f4:1c:19:d0:f8:58:
         27:e3:28:d5:b0:ee:a9:f2:05:54:43:a6:bf:63:cc:e7:d7:ad:
         61:42:03:1d:28:4d:bf:34:6b:fe:68:8c:b8:ac:50:cd:7f:7a:
         36:fe:f2:a4:e3:6f:9b:49:4a:c5:54:ae:9d:c0:c0:2b:88:d5:
         9b:db:39:6f:0e:62:f4:ea:03:4a:bc:9c:b5:7a:40:89:4c:54:
         06:2f:b2:f3:79:7d:35:3d:62:57:d3:f0:26:0a:f9:be:f0:ab:
         06:4b:16:33:bb:b6:ff:b6:0c:09:6b:11:94:fa:8f:4b:db:5d:
         18:ee:7b:7d:22:57:96:cb:fd:31:f6:c5:6d:c2:43:51:41:cc:
         b4:e0:e1:ff:2e:94:b9:cd:4f:52:96:e7:bf:f9:a7:59:c9:ee:
         3a:98:f9:13:e8:cb:65:a7:d8:6b:1a:6f:e1:fb:e4:5c:c6:32:
         1f:f5:db:1e:7e:14:8f:2e:1d:97:8b:f9:89:d0:cf:1b:d9:5e:
         18:4b:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 14:15:35 2024 by rpki-client on console-fra.rpki-client.org