Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
File:                     CoRnuQcocepoG1eg2AHdo4xr_3U.mft (raw, json)
Hash identifier:          hF0qtnICmwuMK/kmrVdku8u7kgv1XI/ji4FHfkpxlNM=
Subject key identifier:   39:51:CC:C8:56:DA:D7:B0:D4:EB:B1:EE:77:5C:40:EF:C1:0D:A0:8B
Authority key identifier: 0A:84:67:B9:07:28:71:EA:68:1B:57:A0:D8:01:DD:A3:8C:6B:FF:75
Certificate issuer:       /CN=0a8467b9072871ea681b57a0d801dda38c6bff75
Certificate serial:       0192102BA71172C248A9473B5E683E82BE50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
Manifest number:          02F7
Signing time:             Fri 20 Sep 2024 16:02:29 +0000
Manifest this update:     Fri 20 Sep 2024 16:02:29 +0000
Manifest next update:     Sat 21 Sep 2024 16:02:29 +0000
Files and hashes:         1: CoRnuQcocepoG1eg2AHdo4xr_3U.crl (hash: cl+iSDaiifSFmI7MxxTBV9BeRixWCvtQnmIbRLtVKbQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:10:2b:a7:11:72:c2:48:a9:47:3b:5e:68:3e:82:be:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8467b9072871ea681b57a0d801dda38c6bff75
        Validity
            Not Before: Sep 20 16:02:29 2024 GMT
            Not After : Sep 21 16:02:29 2024 GMT
        Subject: CN=3951ccc856dad7b0d4ebb1ee775c40efc10da08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:b9:e5:bb:4e:0b:55:bb:9f:9a:cc:d1:42:
                    50:1c:80:9c:51:85:d3:de:f8:83:3e:ab:3a:3c:96:
                    1c:79:b7:dc:7b:2e:5b:fd:05:6d:b4:91:e1:8d:49:
                    2e:69:be:06:4f:48:11:0b:ed:c0:81:57:35:31:d6:
                    6e:1e:a4:09:ac:59:d0:bd:0d:be:c7:39:2d:82:df:
                    d0:e6:80:57:66:e3:2e:11:b0:96:94:2c:43:48:29:
                    cf:2a:f3:d1:08:5d:66:b5:50:40:54:58:69:66:d1:
                    42:48:58:b6:c2:e5:6a:e4:98:0a:54:fe:e1:bd:b6:
                    b8:f4:3b:cc:df:90:a5:b8:68:19:2b:b3:aa:3f:fc:
                    41:aa:ac:f6:55:57:52:c9:3c:2b:39:e4:af:8f:5e:
                    1b:4e:a7:4f:50:a1:cd:7a:ed:ca:93:5b:c4:21:30:
                    3a:6c:1a:e9:e4:d1:ad:29:a0:c2:38:da:0c:91:e8:
                    6d:42:f1:b7:4b:9e:45:3d:9b:95:31:a2:cc:c0:60:
                    7f:23:d1:10:8f:80:08:13:a8:27:2d:bf:0e:60:57:
                    eb:6c:8c:50:ae:f1:85:ef:3c:ef:41:b0:c7:a0:1c:
                    d4:f7:92:d8:88:a2:92:2a:9e:bc:28:7b:9c:2d:37:
                    01:35:1a:e1:dd:50:54:01:59:db:de:17:78:0f:02:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:51:CC:C8:56:DA:D7:B0:D4:EB:B1:EE:77:5C:40:EF:C1:0D:A0:8B
            X509v3 Authority Key Identifier:
                keyid:0A:84:67:B9:07:28:71:EA:68:1B:57:A0:D8:01:DD:A3:8C:6B:FF:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3f:1c:a5:d9:aa:69:57:bf:45:7e:71:b7:d0:20:d8:f8:14:
         cb:1a:dc:42:b9:f6:4d:f7:e0:8b:be:07:04:cd:88:05:c7:93:
         64:d0:e9:0e:af:10:43:aa:8b:46:18:69:de:ab:47:8f:63:99:
         48:fc:9f:26:7e:ac:a6:58:6a:d4:81:fc:75:9a:69:f7:6c:36:
         26:ae:60:00:34:6b:3e:16:c1:fa:2b:8d:5d:ec:3a:86:d1:4e:
         86:7e:3f:6c:6a:1c:82:79:58:1f:a2:44:18:dc:99:7e:25:ec:
         59:a4:a8:09:7f:11:ae:b0:34:24:d7:1b:93:72:ee:f2:cd:5c:
         b4:7f:47:1b:6f:ab:c2:65:f2:f4:5f:a8:80:24:ca:79:ce:41:
         7c:28:06:37:5e:7d:99:4d:f2:30:63:bb:7e:ad:6b:e2:31:c2:
         0d:69:f1:b8:e1:3c:ac:29:ae:8b:00:93:36:ae:7d:d2:a4:dd:
         63:5c:73:fb:bc:b4:a5:85:d1:c8:5b:4c:6f:90:72:31:0e:b4:
         74:87:68:a8:14:dd:5e:03:8d:9e:3a:e8:46:3c:80:d2:4c:93:
         5f:3e:76:16:6a:d6:e0:0a:da:ff:81:99:8e:92:6c:4e:ac:2e:
         18:f5:dd:97:94:74:90:8e:2c:5a:32:67:77:62:de:b1:b7:00:
         81:33:2c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:25:58 2024 by rpki-client on console-ams.rpki-client.org