Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/105dc9-33a3-4d15-a656-8fa66c4025af/1/fPdfJTM2_2SdS557kT9HoFe0otY.mft
File:                     fPdfJTM2_2SdS557kT9HoFe0otY.mft (raw, json)
Hash identifier:          UNEbadopUsuSiNCXpKhqDNjX1LdT7UwiFbWVgl76w/8=
Subject key identifier:   E4:46:FE:BF:2E:C8:1B:43:4E:B2:E5:F9:BF:E9:00:50:5B:F4:0A:B7
Authority key identifier: 7C:F7:5F:25:33:36:FF:64:9D:4B:9E:7B:91:3F:47:A0:57:B4:A2:D6
Certificate issuer:       /CN=7cf75f253336ff649d4b9e7b913f47a057b4a2d6
Certificate serial:       018F893837EC6D57A901A16875FEA8B59E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPdfJTM2_2SdS557kT9HoFe0otY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/105dc9-33a3-4d15-a656-8fa66c4025af/1/fPdfJTM2_2SdS557kT9HoFe0otY.mft
Manifest number:          0C15
Signing time:             Sat 18 May 2024 01:01:53 +0000
Manifest this update:     Sat 18 May 2024 01:01:53 +0000
Manifest next update:     Sun 19 May 2024 01:01:53 +0000
Files and hashes:         1: fPdfJTM2_2SdS557kT9HoFe0otY.crl (hash: nrx3mh386CdqWBbYgHx7zdimmTnUAJjNHvWiJju+m0U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/105dc9-33a3-4d15-a656-8fa66c4025af/1/fPdfJTM2_2SdS557kT9HoFe0otY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/105dc9-33a3-4d15-a656-8fa66c4025af/1/fPdfJTM2_2SdS557kT9HoFe0otY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fPdfJTM2_2SdS557kT9HoFe0otY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:37:ec:6d:57:a9:01:a1:68:75:fe:a8:b5:9e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cf75f253336ff649d4b9e7b913f47a057b4a2d6
        Validity
            Not Before: May 18 01:01:53 2024 GMT
            Not After : May 19 01:01:53 2024 GMT
        Subject: CN=e446febf2ec81b434eb2e5f9bfe900505bf40ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:44:1b:dd:31:a0:d0:c5:73:57:6c:88:ea:
                    be:2b:75:f8:b7:7f:50:17:ce:51:cb:bb:9d:bf:50:
                    18:a7:86:2b:67:70:ac:ac:bf:81:4d:e6:85:fa:98:
                    a9:7e:c0:96:0b:31:a1:c7:6e:5a:cb:f7:39:f7:49:
                    b0:35:ca:8b:45:7c:8a:d9:52:a2:e4:cd:b9:35:d0:
                    bf:25:4d:ba:ae:4e:d3:6a:00:a9:e5:39:1e:61:bb:
                    72:62:27:73:27:7d:3e:26:0a:8f:28:7e:d0:85:8a:
                    1d:16:d6:20:27:45:9a:b2:69:b1:27:7d:6a:63:2f:
                    e1:39:81:f8:32:ce:eb:f9:1b:6b:96:a3:e7:37:a6:
                    66:1e:c8:21:92:49:56:7b:32:8b:3e:49:35:3a:9d:
                    16:7e:f2:80:bd:e4:6a:2c:31:78:de:a7:64:8e:d5:
                    c1:57:e2:61:43:85:d8:7c:c9:a5:6e:6a:fa:c1:8b:
                    2a:e5:a7:25:e5:d9:43:60:b4:1a:e6:63:0c:b9:df:
                    5c:ea:2f:d2:68:42:d8:8b:72:9f:69:9d:9f:d3:55:
                    27:b9:73:1b:d4:fa:2d:50:07:74:12:6b:32:28:77:
                    b5:04:a8:74:04:ff:f6:64:19:1f:d3:e3:c5:b0:5b:
                    5f:ff:8d:94:30:c1:2a:da:2f:34:af:b8:ad:46:74:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:46:FE:BF:2E:C8:1B:43:4E:B2:E5:F9:BF:E9:00:50:5B:F4:0A:B7
            X509v3 Authority Key Identifier:
                keyid:7C:F7:5F:25:33:36:FF:64:9D:4B:9E:7B:91:3F:47:A0:57:B4:A2:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPdfJTM2_2SdS557kT9HoFe0otY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/105dc9-33a3-4d15-a656-8fa66c4025af/1/fPdfJTM2_2SdS557kT9HoFe0otY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/105dc9-33a3-4d15-a656-8fa66c4025af/1/fPdfJTM2_2SdS557kT9HoFe0otY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ad:4e:ba:68:ca:f1:94:0c:b2:30:6c:68:00:bf:3d:69:56:
         a1:9f:80:57:65:07:fd:52:3d:ae:6b:d1:aa:f3:5c:21:8c:48:
         97:95:3a:0a:90:a7:6c:b0:96:17:95:07:b5:d6:cb:9e:f9:13:
         01:d2:a8:ef:a7:3b:01:d2:5f:6e:fb:35:14:6c:03:ac:b7:7a:
         67:c9:8a:8c:63:a6:5a:8e:20:f1:77:8b:31:63:b3:b4:e9:af:
         ea:a6:33:46:ec:56:4f:05:ea:63:6d:bd:ff:78:dd:ef:0f:4a:
         23:24:92:c9:92:90:51:05:79:c4:9e:a4:22:40:bd:b4:ee:5c:
         40:c7:3d:c0:d0:d0:0d:2d:87:ed:6d:f3:ed:03:e0:68:30:ac:
         32:e6:65:27:3b:d5:23:83:61:cb:f0:ee:74:4a:4f:8c:5d:73:
         14:c5:6b:54:31:5f:48:a5:45:b2:49:a8:c4:f2:1d:18:bf:83:
         e5:59:40:f2:61:03:44:24:9a:5a:ce:3e:32:a4:70:b5:e8:ed:
         08:b9:cf:26:20:db:fa:59:de:ea:0f:d2:b0:f1:67:2d:a2:3a:
         0f:ee:eb:15:88:ce:6c:4c:01:a0:c5:9b:c6:3d:96:1e:cc:b7:
         36:ab:20:49:89:c0:7d:2e:24:ba:b6:df:50:97:f1:38:dc:77:
         43:bf:fa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:01:27 2024 by rpki-client on console-ams.rpki-client.org