Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f44a7c-f023-4955-b0ce-5a94246eaa92/1/5O1pU2eK57p6GKHHssEXFxeJy3Y.mft
File:                     5O1pU2eK57p6GKHHssEXFxeJy3Y.mft (raw, json)
Hash identifier:          t6iQQ+nhWGbbXvURVJmF529Jij+mb/FpIjD6ONTXrp8=
Subject key identifier:   A8:11:CA:A8:52:B5:C4:CD:0A:61:F5:77:6B:68:05:17:BB:33:3B:62
Authority key identifier: E4:ED:69:53:67:8A:E7:BA:7A:18:A1:C7:B2:C1:17:17:17:89:CB:76
Certificate issuer:       /CN=e4ed6953678ae7ba7a18a1c7b2c117171789cb76
Certificate serial:       018F3BFABB0FCB02D3336B751C7321EA456E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5O1pU2eK57p6GKHHssEXFxeJy3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/f44a7c-f023-4955-b0ce-5a94246eaa92/1/5O1pU2eK57p6GKHHssEXFxeJy3Y.mft
Manifest number:          114B
Signing time:             Fri 03 May 2024 01:03:58 +0000
Manifest this update:     Fri 03 May 2024 01:03:58 +0000
Manifest next update:     Sat 04 May 2024 01:03:58 +0000
Files and hashes:         1: 5O1pU2eK57p6GKHHssEXFxeJy3Y.crl (hash: eJiA0nSLTMCMNWKR4uOQLF0qqpg/uJTgFychSJc2Wz8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/f44a7c-f023-4955-b0ce-5a94246eaa92/1/5O1pU2eK57p6GKHHssEXFxeJy3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/f44a7c-f023-4955-b0ce-5a94246eaa92/1/5O1pU2eK57p6GKHHssEXFxeJy3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5O1pU2eK57p6GKHHssEXFxeJy3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:bb:0f:cb:02:d3:33:6b:75:1c:73:21:ea:45:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ed6953678ae7ba7a18a1c7b2c117171789cb76
        Validity
            Not Before: May  3 01:03:58 2024 GMT
            Not After : May  4 01:03:58 2024 GMT
        Subject: CN=a811caa852b5c4cd0a61f5776b680517bb333b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:7b:e5:45:59:f7:17:a1:90:4e:6d:9f:b5:
                    1b:fb:f4:6a:1a:b7:59:98:48:9b:08:ee:05:c6:ca:
                    fe:27:c6:96:4a:7e:1c:0f:aa:07:ef:68:f2:e8:7a:
                    e8:b8:9d:c8:3f:30:c8:82:d2:45:8e:42:67:e4:31:
                    3d:83:6e:a5:43:8e:ba:3e:fd:56:2f:1a:bf:05:08:
                    14:63:a9:91:50:b4:1b:8a:19:67:dd:92:df:d0:30:
                    5f:b0:76:f4:12:fe:c9:3c:07:60:17:54:89:40:e9:
                    85:b1:6e:39:16:d8:8f:0d:57:3f:0d:cb:13:82:00:
                    51:74:d8:12:1f:e4:15:d7:ab:8f:b5:b2:c8:cf:e4:
                    55:e3:58:62:d5:b2:ea:b5:eb:9c:67:20:b4:33:25:
                    fb:1b:ad:c5:a1:c0:8c:46:c7:44:0d:41:4d:72:c5:
                    57:3f:da:35:e6:70:26:47:9d:ba:b7:2d:3f:1e:0d:
                    3a:e4:65:51:25:30:c3:27:25:6f:e8:96:b8:44:7f:
                    6b:5e:bb:5b:74:17:a9:0b:8e:26:08:db:d4:f7:62:
                    c2:ef:47:08:14:6a:32:77:e7:2b:f9:18:be:0e:d5:
                    d1:54:7a:84:1b:20:a6:0e:18:14:f0:58:05:81:9e:
                    dd:c3:d1:d8:dd:55:4b:ba:aa:c3:8e:23:af:c0:33:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:11:CA:A8:52:B5:C4:CD:0A:61:F5:77:6B:68:05:17:BB:33:3B:62
            X509v3 Authority Key Identifier:
                keyid:E4:ED:69:53:67:8A:E7:BA:7A:18:A1:C7:B2:C1:17:17:17:89:CB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5O1pU2eK57p6GKHHssEXFxeJy3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f44a7c-f023-4955-b0ce-5a94246eaa92/1/5O1pU2eK57p6GKHHssEXFxeJy3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f44a7c-f023-4955-b0ce-5a94246eaa92/1/5O1pU2eK57p6GKHHssEXFxeJy3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0f:3e:8c:41:88:33:7f:c7:87:c0:a0:80:ab:16:1e:ff:7b:
         81:9c:87:db:98:e4:fc:d5:a2:0b:00:fd:b9:7b:52:14:78:9e:
         06:e1:aa:de:f2:14:26:d2:8f:f5:11:86:1a:c5:87:0e:4d:fa:
         4d:47:6c:26:2b:b8:3f:c2:29:b2:84:4e:cb:68:f6:30:a4:57:
         72:32:6d:3b:21:fd:f4:5a:b0:2a:88:aa:49:52:54:4e:db:2f:
         9f:f1:98:ae:fe:e3:b5:60:54:68:ab:34:ec:8b:c9:fa:a8:37:
         c2:dd:14:08:12:e1:63:1b:cf:61:3a:ba:42:91:f1:70:85:b5:
         45:de:a1:0c:14:04:43:72:75:f4:29:c3:64:af:15:96:ea:1f:
         a9:9b:e0:40:2d:0c:a8:37:f8:aa:09:13:0b:2c:a0:96:78:6e:
         5e:5a:38:cc:03:6a:86:d5:42:41:55:db:a2:8e:48:66:08:a2:
         9e:7a:a2:6e:6c:14:c1:6a:c7:56:34:7e:26:fc:7f:f6:25:c5:
         7f:ec:de:78:e5:b4:b5:63:9c:21:b2:bc:f2:2c:c2:f4:90:4e:
         d1:f7:12:ae:04:c4:94:23:ab:0d:20:f6:02:f7:91:f0:23:00:
         0f:2b:74:b1:02:0a:32:c5:21:68:d0:d5:8d:fa:a6:5c:4c:a1:
         94:f1:c9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:28:45 2024 by rpki-client on console-ams.rpki-client.org