Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/8d3375-125e-435f-9650-f7ddf80c6e2e/1/0MddHYWpmv1YsHDSiVPrxQoGOAw.mft
File:                     0MddHYWpmv1YsHDSiVPrxQoGOAw.mft (raw, json)
Hash identifier:          v/uEm+H6V3U6Po1j+0Iu0ZZfgPD5hCQSJt25VtG1QMY=
Subject key identifier:   22:ED:F7:42:5A:CE:FA:48:9B:9B:50:9C:42:6E:8D:19:13:AF:B9:57
Authority key identifier: D0:C7:5D:1D:85:A9:9A:FD:58:B0:70:D2:89:53:EB:C5:0A:06:38:0C
Certificate issuer:       /CN=d0c75d1d85a99afd58b070d28953ebc50a06380c
Certificate serial:       018F45A280F5973DE422A805634D64CD7ABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MddHYWpmv1YsHDSiVPrxQoGOAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/8d3375-125e-435f-9650-f7ddf80c6e2e/1/0MddHYWpmv1YsHDSiVPrxQoGOAw.mft
Manifest number:          1152
Signing time:             Sat 04 May 2024 22:03:48 +0000
Manifest this update:     Sat 04 May 2024 22:03:48 +0000
Manifest next update:     Sun 05 May 2024 22:03:48 +0000
Files and hashes:         1: 0MddHYWpmv1YsHDSiVPrxQoGOAw.crl (hash: qsADE39K2xGqhGh5/YwUwdiTKM4ysqmeBK+/aSvo5kE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/8d3375-125e-435f-9650-f7ddf80c6e2e/1/0MddHYWpmv1YsHDSiVPrxQoGOAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/8d3375-125e-435f-9650-f7ddf80c6e2e/1/0MddHYWpmv1YsHDSiVPrxQoGOAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0MddHYWpmv1YsHDSiVPrxQoGOAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a2:80:f5:97:3d:e4:22:a8:05:63:4d:64:cd:7a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0c75d1d85a99afd58b070d28953ebc50a06380c
        Validity
            Not Before: May  4 22:03:48 2024 GMT
            Not After : May  5 22:03:48 2024 GMT
        Subject: CN=22edf7425acefa489b9b509c426e8d1913afb957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b8:f0:6b:30:08:ac:e4:53:63:76:f2:cc:96:
                    1e:ef:df:a7:99:de:19:11:e3:2d:c2:41:f2:d9:de:
                    87:de:99:01:02:79:c5:a8:ed:f5:4f:39:aa:25:b2:
                    ac:40:c0:cd:67:66:8c:d6:8b:7b:e4:ae:29:94:a8:
                    85:97:cc:41:4d:57:fd:79:51:3d:59:89:15:48:8e:
                    63:c2:0b:7c:c4:ec:dc:a3:4b:64:f1:32:5a:a0:69:
                    31:bd:e0:4e:b7:f0:58:46:63:8f:52:53:d3:92:7f:
                    4b:8d:0a:45:75:33:a2:06:06:8f:df:1f:35:3b:4f:
                    10:24:d3:05:1e:3c:f7:94:d0:07:43:c1:5b:11:bb:
                    8e:1f:c5:32:6e:73:84:bf:84:b1:37:57:a1:0c:f2:
                    7b:60:1e:5e:39:00:d9:81:81:97:64:28:ec:e1:ee:
                    8d:ee:60:70:0f:a2:70:f1:76:a6:1d:c0:1f:21:cc:
                    ec:c4:55:c8:d7:a5:7b:11:b9:32:99:53:10:a5:86:
                    ae:b9:19:f8:df:20:c3:8e:24:30:4b:89:91:89:f3:
                    bc:d8:95:b3:00:8c:9c:fc:91:24:0c:e2:71:27:41:
                    dc:0d:06:0e:7c:7b:4f:0b:92:4e:30:51:32:a5:33:
                    f4:d0:5e:38:ef:00:82:6e:a7:f7:37:8f:0a:91:7a:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:ED:F7:42:5A:CE:FA:48:9B:9B:50:9C:42:6E:8D:19:13:AF:B9:57
            X509v3 Authority Key Identifier:
                keyid:D0:C7:5D:1D:85:A9:9A:FD:58:B0:70:D2:89:53:EB:C5:0A:06:38:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MddHYWpmv1YsHDSiVPrxQoGOAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8d3375-125e-435f-9650-f7ddf80c6e2e/1/0MddHYWpmv1YsHDSiVPrxQoGOAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8d3375-125e-435f-9650-f7ddf80c6e2e/1/0MddHYWpmv1YsHDSiVPrxQoGOAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7d:94:89:4c:b3:72:ca:65:ee:9b:32:0e:09:39:bb:ea:0c:
         90:7f:2d:6c:91:ce:7d:18:92:b6:f4:b9:a8:e3:3f:ab:71:b2:
         31:b8:9c:ce:7e:18:28:40:4d:e5:f0:80:8e:cb:43:d5:9b:79:
         23:fa:b0:8e:8f:26:bd:28:7d:bb:c3:3b:32:31:1f:95:f2:7a:
         18:41:67:74:1f:a4:97:46:02:a4:89:f5:53:1f:5e:ba:ad:4b:
         4a:c4:d1:50:00:0f:22:5c:d4:86:5e:fd:9d:40:b1:6b:f1:fa:
         c7:18:7a:b8:ad:54:0b:f7:84:69:10:3f:81:13:66:8b:73:09:
         e7:c2:24:bc:1e:b7:36:f3:2e:df:3e:1d:14:af:29:c2:f8:9f:
         4e:2d:26:d5:6b:6e:95:ac:78:fc:0f:2c:f8:28:34:6b:8b:0d:
         cd:ba:0c:15:3e:09:ea:c5:9c:b1:2e:19:c3:5f:62:c2:b3:36:
         9e:44:1d:a3:55:4f:47:18:c5:a0:09:69:d6:4a:59:08:71:1e:
         5a:1d:9b:77:c0:3c:72:72:78:5c:2f:79:ec:f2:37:18:0e:34:
         50:bc:84:d4:9c:5c:77:a7:27:2c:4e:a3:5e:78:51:22:4e:77:
         0e:c9:05:cd:93:d5:15:83:c7:11:f2:98:14:e8:6a:ab:f2:69:
         5b:07:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:15:22 2024 by rpki-client on console-fra.rpki-client.org