Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
File:                     D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft (raw, json)
Hash identifier:          ZqGy/XNLQyDPNakt0AHv3p2Oi6D8/1v6YOhH/8+lzrw=
Subject key identifier:   50:F4:35:0E:18:6F:FC:A7:34:57:79:C3:EE:E2:8D:4A:7D:B4:E9:D8
Authority key identifier: D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
Certificate issuer:       /CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Certificate serial:       630AAC245149EF8B5EBC2DC6654DCB9B0E83D646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
Manifest number:          C7
Signing time:             Fri 17 May 2024 07:47:19 +0000
Manifest this update:     Fri 17 May 2024 07:42:19 +0000
Manifest next update:     Sat 18 May 2024 08:31:19 +0000
Files and hashes:         1: D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl (hash: vhvyMZJ6yBI60A9bHrfAnIQDnAzo5ubMPO+r5y0lGFA=)

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0a:ac:24:51:49:ef:8b:5e:bc:2d:c6:65:4d:cb:9b:0e:83:d6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
        Validity
            Not Before: May 17 07:42:19 2024 GMT
            Not After : May 18 08:31:19 2024 GMT
        Subject: CN=50F4350E186FFCA7345779C3EEE28D4A7DB4E9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:8f:6e:90:3f:82:4e:8a:ff:25:05:1d:a2:
                    18:fe:30:b2:e7:e9:0b:b7:45:bc:5f:f1:f1:9c:78:
                    1b:f2:89:c3:bb:b4:0c:09:8f:a4:82:bb:63:20:4b:
                    cc:8d:a9:03:ed:d6:8f:cb:0b:b6:4a:2a:e7:37:29:
                    59:7d:a7:db:34:47:9b:41:b0:d4:4e:b7:1c:36:f0:
                    7d:88:2a:a0:e8:b9:aa:ef:ea:93:ae:f6:15:c0:d6:
                    60:cd:d6:c7:20:b6:43:5d:93:8d:dc:dc:25:21:9f:
                    1b:29:70:7a:82:d7:e0:1d:92:83:d9:b1:c8:35:71:
                    9f:ed:0a:80:d3:09:4a:0c:63:cc:c0:aa:ba:a6:b0:
                    60:44:92:63:ba:4c:81:d3:80:c5:5d:3e:b0:49:1b:
                    9f:b0:e1:5c:e6:26:9d:a7:f8:34:40:15:f9:51:15:
                    f3:c9:8d:d3:f1:31:d6:16:43:b6:69:5f:e8:00:da:
                    b2:03:0e:85:1e:dc:af:a7:c3:7f:da:1d:8d:a6:78:
                    53:d5:95:82:39:4b:39:21:5d:58:d2:eb:6a:fa:d3:
                    83:11:ae:3a:3f:bd:f1:9c:50:a8:b9:2c:c9:61:48:
                    02:40:2f:c2:fb:18:a7:6d:5b:fd:bb:e1:3c:f7:df:
                    57:9a:3a:c0:8d:30:64:3f:3a:ef:4e:77:6a:30:e9:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F4:35:0E:18:6F:FC:A7:34:57:79:C3:EE:E2:8D:4A:7D:B4:E9:D8
            X509v3 Authority Key Identifier:
                keyid:D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:19:5d:27:71:18:31:8e:f4:21:8a:a4:6f:52:3d:70:1d:8f:
         cd:d5:f2:b4:bb:95:a5:33:01:cf:cb:4e:86:dd:41:57:d6:c4:
         36:97:eb:cf:da:9c:b2:e6:70:fd:87:59:aa:60:51:da:4c:c2:
         86:97:97:9c:93:45:47:1e:6c:5b:34:ea:21:b6:cb:a6:22:94:
         ad:d3:75:08:58:75:2d:ee:ef:f2:9f:d0:34:b0:69:29:8d:dd:
         01:10:cd:7d:e2:d3:25:d1:d0:c4:2a:27:c8:28:7f:c5:a6:18:
         d2:e1:40:c3:65:95:93:5f:04:4b:9d:7f:9c:ac:4f:72:79:6f:
         72:1c:50:85:63:e3:2c:ee:e8:b3:2b:22:16:6c:9c:68:8f:2c:
         50:99:7a:23:08:fd:08:68:e3:15:b7:08:92:be:79:08:b4:e7:
         e4:bb:6d:42:20:6a:db:9b:c6:f3:c6:38:27:87:94:64:28:37:
         1f:d5:a0:22:75:d2:51:9a:d5:46:0b:9a:ff:4d:36:1c:97:02:
         ee:64:9b:2a:97:48:5a:ed:31:c6:02:e3:f0:8a:78:c0:2a:70:
         48:4b:8a:34:68:51:8e:97:8f:95:22:34:99:5f:70:9e:d1:8b:
         69:13:7c:64:f8:15:9f:1c:d3:9c:78:2d:41:cd:58:09:a3:27:
         09:b9:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:51:52 2024 by rpki-client on console-ams.rpki-client.org