Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File:                     4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier:          RifS1n9X27pobm6+Qk5yPqIsWE8wzFYTsEV6eabWlP4=
Subject key identifier:   36:00:69:20:0E:FF:AB:3F:19:68:E6:D9:44:23:40:C8:98:55:1C:EC
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer:       /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial:       018F1F6DBB81B9DFFFA119B2994252295026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number:          1149
Signing time:             Sat 27 Apr 2024 12:00:36 +0000
Manifest this update:     Sat 27 Apr 2024 12:00:36 +0000
Manifest next update:     Sun 28 Apr 2024 12:00:36 +0000
Files and hashes:         1: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: 3Kwr5ti7ZeeCuRWeQhYwrOpwBnUlZQTmf2MTjFhwiWs=)
                          2: 8ILfYpD01k2SWXPtedrh0QU6ft0.roa (hash: +6CO7uoct66zzIzNhMedHPAWpMyvy0KRAuwNdGM/XaQ=)
                          3: TGK-y5pn75ezz81k2D5A8MYlv9c.roa (hash: k4+Jc05sDycolT25+KcoQBL9JGiTsNi7DkvV1yfgk4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:6d:bb:81:b9:df:ff:a1:19:b2:99:42:52:29:50:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
        Validity
            Not Before: Apr 27 12:00:36 2024 GMT
            Not After : Apr 28 12:00:36 2024 GMT
        Subject: CN=360069200effab3f1968e6d9442340c898551cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:45:7d:fc:f4:93:1d:c3:c6:54:20:d7:49:
                    ab:43:5d:4e:61:ca:f4:63:c2:65:ea:94:2d:42:5f:
                    46:48:fd:d2:3c:c6:cf:c3:a3:39:02:ce:fc:4f:f4:
                    b9:4f:8b:f2:20:1c:f6:14:8c:06:15:69:54:b4:f7:
                    d5:0b:31:8d:8f:62:70:ff:80:cb:d4:62:9a:3b:9a:
                    0f:72:b7:2d:23:2c:08:df:90:73:fc:3c:1d:db:0b:
                    fb:5d:ab:2e:01:90:97:84:86:03:91:03:3f:32:79:
                    33:d4:3b:97:29:4c:76:ff:0c:d3:bc:9a:40:7f:00:
                    2b:ba:95:bf:e2:e3:2a:b3:da:03:eb:67:aa:f2:3a:
                    3a:d5:5f:3d:6c:e5:0f:29:0e:17:ef:85:11:b7:30:
                    08:23:5d:ac:55:f3:1b:31:da:71:8e:22:a5:eb:58:
                    02:62:cc:41:95:d2:33:1c:7b:43:e5:3f:2c:7e:8c:
                    9f:82:6b:55:25:1f:33:52:b3:69:ce:11:52:14:6b:
                    0f:9a:7e:94:80:43:aa:71:2d:89:16:79:63:4b:1e:
                    07:ba:c7:6f:23:3d:7e:a2:b5:53:ca:76:11:9a:64:
                    2f:48:31:c4:74:ce:d4:f1:5f:bf:33:ce:e3:a9:1a:
                    c5:6d:04:e3:c0:c3:a8:4a:fb:06:c1:c5:b2:86:e9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:00:69:20:0E:FF:AB:3F:19:68:E6:D9:44:23:40:C8:98:55:1C:EC
            X509v3 Authority Key Identifier:
                keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:88:56:e6:ec:e0:cc:4b:26:41:a0:d4:ba:82:d7:07:59:56:
         b5:69:35:f8:b6:18:62:05:2b:14:78:b8:6a:89:24:54:6d:97:
         48:59:fc:47:d3:93:12:27:72:a1:67:0f:ec:97:4a:8f:61:ad:
         a1:7c:dd:d3:d5:cb:ef:ef:31:2e:c5:1a:92:55:13:2d:68:00:
         d8:f7:f2:a7:43:75:da:2f:2e:4e:f2:b8:5a:21:05:6e:73:e0:
         aa:a9:de:5a:67:39:f8:17:0b:09:fe:68:57:c2:fb:09:9a:d9:
         8c:8c:41:a5:df:e2:f9:b0:38:ad:6c:e3:f7:0f:a9:1a:01:8d:
         80:49:ba:88:05:44:e1:b9:ec:3c:1f:fa:4c:21:a6:06:83:e3:
         2a:48:b0:9b:ed:8b:8d:1b:ea:63:c4:e0:ba:1b:c4:9b:9d:ec:
         60:1e:03:f5:76:75:95:51:9c:a0:0d:2a:f2:40:4a:65:62:34:
         29:6c:63:75:55:9e:32:f4:1b:32:00:b4:d2:00:97:f2:57:3c:
         d3:91:94:2f:2b:91:00:ec:3d:71:ce:02:c9:35:40:a0:f1:b3:
         c7:a7:fa:99:d3:a0:9b:79:23:c3:44:f0:e0:e4:44:5a:3c:c2:
         0c:fa:7f:95:a7:7e:09:85:fc:ba:6b:55:64:ab:3f:e5:11:26:
         09:2f:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:13:11 2024 by rpki-client on console-ams.rpki-client.org