Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
File:                     EsShfSBma32NKx_-GKRoevkmIY8.mft (raw, json)
Hash identifier:          XaobSbai1dLaeZQUO9BmqOqU7nt8PS1xZSwADUOcC+0=
Subject key identifier:   59:F7:DD:8D:41:0A:49:01:C6:7B:4E:0B:9A:A6:DD:73:4C:E1:14:EF
Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
Certificate issuer:       /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Certificate serial:       018F343E161D2CD072DC141B33CAAF0F007D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
Manifest number:          114C
Signing time:             Wed 01 May 2024 13:00:35 +0000
Manifest this update:     Wed 01 May 2024 13:00:35 +0000
Manifest next update:     Thu 02 May 2024 13:00:35 +0000
Files and hashes:         1: EsShfSBma32NKx_-GKRoevkmIY8.crl (hash: 5hlhyr/TBmSg7VptxHUn9xo5wRNsrdwzKWy6QzZ/BOE=)
                          2: m0n9Y5mrE_9EMO13ZJL09qJaMsU.roa (hash: x2Nwi2LHAGG/RkDGsKep/X0Zxpxd/AsFDpgHHa7HMnc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:3e:16:1d:2c:d0:72:dc:14:1b:33:ca:af:0f:00:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
        Validity
            Not Before: May  1 13:00:35 2024 GMT
            Not After : May  2 13:00:35 2024 GMT
        Subject: CN=59f7dd8d410a4901c67b4e0b9aa6dd734ce114ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:10:7e:41:c7:06:ec:fb:5e:c2:a0:a6:b6:
                    6b:89:4f:47:35:a8:12:35:6b:46:7e:1e:5a:64:c3:
                    38:2c:fe:9f:32:5e:b3:66:96:98:72:60:ae:77:2a:
                    d4:6e:aa:ed:de:70:40:9f:e3:4b:d0:89:2a:03:39:
                    7c:35:12:8b:a2:11:e5:a7:fa:c9:bc:af:e7:2e:fb:
                    cf:59:7a:e2:c3:aa:3f:44:56:c5:53:4e:b2:4b:29:
                    32:20:c9:44:9a:91:a9:a1:39:d9:67:68:80:78:d4:
                    ac:da:81:17:99:c7:d5:11:3a:06:9f:f4:3e:56:c3:
                    6d:33:22:81:32:dc:f9:0f:a7:6b:f7:56:64:65:0f:
                    5e:7a:26:92:f5:01:bf:dc:3f:73:75:5d:cc:44:74:
                    85:03:13:3b:dc:aa:5b:03:60:9f:7d:73:25:6c:e9:
                    47:86:ea:60:22:0e:24:b5:8b:4e:2d:3d:76:d9:46:
                    70:40:4f:92:65:3a:6a:95:c7:77:09:1c:48:b4:54:
                    db:27:2e:ad:9b:10:37:2d:a6:ec:2c:cd:71:8e:82:
                    8f:08:d8:6f:7f:bc:c1:c5:b4:43:e6:87:e4:0b:73:
                    53:df:00:7d:39:e9:6c:26:44:9c:8c:e4:89:2e:8a:
                    84:27:b5:11:e6:ed:5a:2f:f7:5f:a4:5d:ab:df:61:
                    6e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F7:DD:8D:41:0A:49:01:C6:7B:4E:0B:9A:A6:DD:73:4C:E1:14:EF
            X509v3 Authority Key Identifier:
                keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:86:e7:2b:af:75:cc:01:53:32:f2:b9:ff:d3:db:0e:ad:0e:
         22:d3:d1:1c:d7:93:05:27:79:55:3b:27:43:42:e4:8c:75:5a:
         5f:1b:9d:e3:a3:1f:83:25:1c:81:e3:13:d6:4a:85:28:a4:ee:
         c4:2a:ea:14:7d:c2:a7:e4:d5:29:ce:c2:ea:6e:cc:a4:ef:d8:
         f1:70:a6:25:e0:35:36:9c:76:a3:5b:64:de:a7:16:f8:5b:2b:
         13:94:15:d1:05:93:aa:1d:25:16:51:a2:ff:b8:9c:f0:8a:20:
         84:72:3f:7a:e7:22:a9:7d:e8:06:66:95:ed:3f:41:0f:df:6d:
         df:80:62:86:94:32:60:b4:5b:92:a0:34:6b:bb:5e:43:4d:6e:
         bd:6a:c6:d5:0c:fe:cb:cc:ed:ea:25:3a:b5:31:fe:4c:bc:cc:
         0d:c0:25:ba:a3:2a:d7:4f:3c:7b:c5:05:4e:52:9d:e2:d7:60:
         44:82:1c:5c:da:14:34:c3:f6:d4:a2:11:eb:69:82:8e:00:77:
         61:57:72:2d:86:c8:a1:b4:6c:7e:42:9d:2a:27:62:9e:d0:15:
         6e:f2:3e:54:68:16:f9:22:a3:d3:37:68:af:1b:00:e7:dd:75:
         5a:4c:11:f5:ef:42:eb:6b:ac:4b:18:65:3e:56:ac:05:70:5b:
         bc:ef:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:56:51 2024 by rpki-client on console-ams.rpki-client.org