Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File:                     EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier:          KYkUMCqIXoS41QoTLofqjoCFNTKGz6t+RFFABfkXgmc=
Subject key identifier:   AB:2F:AA:EF:89:1E:08:70:3F:4C:E1:D5:D6:85:3C:90:8C:AD:CC:C8
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer:       /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial:       018F478E5827FDE5BCE682A65521CAF4EC65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number:          1156
Signing time:             Sun 05 May 2024 07:01:02 +0000
Manifest this update:     Sun 05 May 2024 07:01:02 +0000
Manifest next update:     Mon 06 May 2024 07:01:02 +0000
Files and hashes:         1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: 8LIkgoNYbzEQfvTziSmNzpXXwtow/ON0xlzhrffbirA=)
                          2: k3lh8V-bxajVxhDuiHQqMK68HdU.roa (hash: KuPKb8KiKK4SVcp59wAcofUeTB5aB8MvsW8viQfvN5c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:8e:58:27:fd:e5:bc:e6:82:a6:55:21:ca:f4:ec:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
        Validity
            Not Before: May  5 07:01:02 2024 GMT
            Not After : May  6 07:01:02 2024 GMT
        Subject: CN=ab2faaef891e08703f4ce1d5d6853c908cadccc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:e6:b3:04:90:46:8a:5b:ef:e0:72:0c:08:
                    93:b4:c6:cb:97:8c:c4:26:1e:24:a0:5c:1a:00:10:
                    71:5e:dd:9e:20:20:4f:8e:32:f5:c3:04:b9:33:b9:
                    7e:c6:75:23:a1:3d:14:29:69:7d:e9:1f:ba:aa:2d:
                    1d:f2:92:b9:ba:aa:fa:f0:a8:ae:c5:ed:ee:e5:c4:
                    a4:52:26:2b:7c:21:65:9d:40:17:f9:8d:df:09:58:
                    34:44:bd:5b:50:3d:26:2e:f9:ec:31:fb:0f:0b:5c:
                    4d:64:33:3a:92:68:aa:b4:1e:25:01:bb:35:68:49:
                    24:d8:64:9c:6b:f8:e4:e1:71:0c:73:62:fc:08:32:
                    3a:38:c6:dd:4a:39:5a:f0:48:15:5e:8c:65:9f:5d:
                    14:3d:4f:08:92:68:55:e2:86:82:cd:3c:42:a0:f7:
                    c2:02:77:42:3a:75:56:9f:f6:36:a1:55:38:8d:8d:
                    5f:1f:16:26:98:a3:79:c1:aa:f9:d6:94:15:80:3a:
                    b5:a4:3f:91:ef:ff:68:45:2c:07:47:e7:46:e1:c6:
                    59:06:b9:72:a8:af:e7:41:21:4d:2a:72:05:19:fc:
                    66:6e:c4:65:a3:0d:b5:ec:70:ce:66:48:a3:65:ea:
                    2e:d9:dc:09:2c:63:91:51:f0:96:0d:64:a1:1c:20:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2F:AA:EF:89:1E:08:70:3F:4C:E1:D5:D6:85:3C:90:8C:AD:CC:C8
            X509v3 Authority Key Identifier:
                keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5a:33:fa:67:3c:4b:fe:84:16:02:d0:ab:18:ac:eb:49:12:
         c5:9c:d9:7d:58:c3:64:79:90:fc:0e:cd:2f:c1:aa:40:82:fa:
         1c:44:e8:b5:48:8b:4d:d5:4c:93:51:3d:10:7c:7f:73:63:d8:
         35:9e:56:74:fc:c2:5b:cd:f2:9a:00:0b:75:ee:ac:01:2c:a2:
         08:08:43:bc:7c:c8:d1:0c:aa:04:e5:b4:d2:57:0d:ce:4c:51:
         54:47:63:ba:aa:66:89:d1:ec:00:8f:d3:a9:fe:0d:45:ca:53:
         f8:a8:65:b3:ee:27:dd:05:8c:3c:a1:85:cc:3e:2a:49:47:0a:
         4c:ab:b9:61:05:9b:7f:70:77:e6:e4:d9:30:14:5c:5a:a6:a2:
         86:02:c1:04:d9:dd:f6:19:dc:1d:2d:fa:83:4d:cc:23:55:ca:
         e2:e9:18:1e:71:4d:71:f9:b9:43:87:0a:1d:29:b2:43:63:fc:
         b7:ca:12:17:2a:9b:bd:11:a4:a5:cd:43:51:f5:e6:52:eb:b0:
         ad:01:1a:89:a3:ac:d9:32:1c:f3:d1:6e:b0:bc:b9:bf:24:d4:
         dd:dd:88:87:bb:91:9f:e6:31:cb:ba:05:76:a1:9a:84:a3:f0:
         42:b5:77:97:20:9d:69:ec:8a:52:55:48:a4:49:bb:a2:a3:a4:
         88:76:50:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 13:06:05 2024 by rpki-client on console-ams.rpki-client.org