Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File:                     7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier:          lO9xjK8SkgLzzdiAmxB9M5kfTj9Ysk/kbxjqq2YV7oY=
Subject key identifier:   04:6E:42:5E:F7:F1:6E:AA:5A:A8:93:18:9B:95:83:AD:9B:1E:4B:2C
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer:       /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial:       018F411EF6170F033771D410FE7EF21CC7A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number:          1152
Signing time:             Sat 04 May 2024 01:01:39 +0000
Manifest this update:     Sat 04 May 2024 01:01:39 +0000
Manifest next update:     Sun 05 May 2024 01:01:39 +0000
Files and hashes:         1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: 2LRbqVXBaK7lpszo+rp20w2xq5V+tmVBdmAe5jxyg8Y=)
                          2: TlZcvj_d5q_mrTojuLzKNMqldQQ.roa (hash: MS7xBKZjm+Sxc3v9/VpTWTPG5ePi4sexGFAsLO08+Rs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:1e:f6:17:0f:03:37:71:d4:10:fe:7e:f2:1c:c7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
        Validity
            Not Before: May  4 01:01:39 2024 GMT
            Not After : May  5 01:01:39 2024 GMT
        Subject: CN=046e425ef7f16eaa5aa893189b9583ad9b1e4b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:e7:d5:97:9d:7c:82:72:6a:0d:d4:01:fb:
                    26:12:5e:73:d0:31:49:0d:12:ff:dc:65:5e:2c:a7:
                    cc:6d:f1:6a:93:55:3d:7c:5a:12:73:29:3d:47:b4:
                    d2:83:39:7f:7d:76:7d:d5:c2:8c:3b:57:23:fd:58:
                    34:92:53:b8:4b:f4:04:a9:99:07:43:34:e7:45:ee:
                    37:dc:5c:e7:05:b5:cf:73:d7:01:f6:ca:f1:a0:15:
                    b1:d4:dc:d8:38:3e:8c:4e:a0:3d:81:47:ce:71:6f:
                    7b:6b:58:a5:e4:93:6d:74:7e:ae:3a:53:e9:ec:de:
                    1e:53:df:53:b2:c2:c8:7e:2d:fd:92:f1:3f:d7:30:
                    75:c2:ae:43:62:c2:0b:eb:9a:26:ca:92:eb:8a:8c:
                    7b:05:ab:1b:64:7b:5a:bb:af:fd:0e:f9:89:7f:89:
                    29:24:c9:85:48:04:7e:a5:5a:49:e3:17:0b:b2:b0:
                    94:f3:cb:fc:e8:c8:48:01:18:2b:b3:1c:39:2f:e1:
                    e0:a3:6e:c7:fd:68:a2:d7:da:33:49:c9:53:b1:39:
                    9b:83:d4:cf:a4:74:8e:8a:a7:57:83:b1:ac:f5:59:
                    37:3c:55:38:66:4f:92:0b:28:bc:bf:7d:dd:21:bb:
                    34:74:2b:b7:4b:93:67:b8:f0:4f:7e:e5:d4:6a:34:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6E:42:5E:F7:F1:6E:AA:5A:A8:93:18:9B:95:83:AD:9B:1E:4B:2C
            X509v3 Authority Key Identifier:
                keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:ed:de:96:13:67:31:14:a4:77:2d:18:17:cf:2d:51:5f:14:
         7d:9c:e7:5d:e6:f7:a5:e4:e5:d7:54:5d:53:04:06:2f:a6:7b:
         7d:55:40:72:88:5f:95:07:d7:7f:5d:78:6b:1b:36:0b:f7:33:
         37:d7:1e:76:76:39:9b:f6:cc:a0:c5:31:bc:87:d3:d7:da:11:
         9f:cd:ad:03:dd:e6:40:f5:31:d9:8c:bb:2a:af:1b:ef:48:87:
         7a:95:b8:96:a8:ad:d3:b2:4d:b5:09:01:94:2e:42:b0:4e:93:
         b7:73:00:91:21:60:02:16:e1:ee:c8:db:15:92:20:30:50:bb:
         a5:f0:94:98:70:93:99:9d:2f:97:cf:41:18:ba:29:93:6b:2b:
         f3:23:88:a8:81:0c:d7:78:7c:07:7f:cf:15:87:10:85:c9:c1:
         20:d5:c2:0a:a5:da:bc:5e:8d:c5:a6:5b:a5:78:87:3f:4d:b4:
         2a:86:7c:cc:28:60:a2:32:e5:9a:a7:be:52:ed:b1:08:2c:6c:
         84:f1:93:51:69:d5:cb:27:46:96:f6:99:5d:10:34:1d:18:c4:
         7e:a1:c4:eb:f9:52:54:81:db:52:c2:09:69:7d:7a:ee:02:2f:
         26:7b:99:21:d1:d2:55:86:34:c5:3c:8c:76:86:37:14:72:96:
         ab:da:f6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:18:41 2024 by rpki-client on console-ams.rpki-client.org