Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File:                     8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier:          Welj197Z/VjEFsxe7pgbPNKLGZV24Le2c5KqEZjVjTQ=
Subject key identifier:   A3:DC:9D:D6:87:F5:F7:2D:11:DB:8C:B5:A1:09:9D:B2:19:59:F6:26
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer:       /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial:       018F43B2A445F28994251DA57FC0891E3D7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number:          1152
Signing time:             Sat 04 May 2024 13:02:11 +0000
Manifest this update:     Sat 04 May 2024 13:02:11 +0000
Manifest next update:     Sun 05 May 2024 13:02:11 +0000
Files and hashes:         1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: IAXIMoeCdxRJdI3CHt1LdPskId3W6F1LA3FaD66KVJ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:a4:45:f2:89:94:25:1d:a5:7f:c0:89:1e:3d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
        Validity
            Not Before: May  4 13:02:11 2024 GMT
            Not After : May  5 13:02:11 2024 GMT
        Subject: CN=a3dc9dd687f5f72d11db8cb5a1099db21959f626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1f:55:c6:16:3b:34:24:d1:45:80:5c:a7:71:
                    bd:dd:97:2e:90:0b:e4:23:03:cf:40:73:a3:4c:ab:
                    1c:d8:c3:ff:0d:c5:b3:43:38:37:8f:0a:30:0a:d9:
                    11:19:d5:7a:70:95:6d:56:00:ab:f2:d8:7f:a0:4c:
                    c9:6a:02:f2:45:f8:81:14:e7:e0:42:04:be:ac:42:
                    4a:ef:76:d3:0c:a9:e6:3b:68:d4:c1:a0:32:44:f1:
                    9d:fa:51:ec:ce:62:02:d5:1f:7c:4e:e5:48:da:6c:
                    e1:57:5d:fe:ec:5b:05:7f:a0:83:56:24:54:29:73:
                    18:58:b6:3e:99:f1:c8:a5:fc:80:10:5f:d5:6d:e0:
                    54:a1:34:17:90:50:12:61:dd:72:ee:06:bb:0b:9c:
                    1e:bb:f3:ac:4a:9c:c0:80:b4:41:3b:88:f6:f9:50:
                    1a:ab:86:96:0f:5f:87:ab:bb:ca:32:f2:7b:79:e7:
                    2f:07:d7:28:7d:9f:01:7b:8a:78:9e:80:f8:59:1d:
                    ec:79:34:b0:8f:cc:af:c2:0c:a2:08:cf:20:17:3d:
                    ca:3d:c9:1d:6d:21:76:29:b2:b0:a3:d8:93:7d:e7:
                    33:f4:5d:94:d0:e6:51:31:9d:a1:03:dd:05:98:12:
                    31:37:b4:b8:d5:d5:84:ef:14:cb:44:c2:28:96:e6:
                    fb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DC:9D:D6:87:F5:F7:2D:11:DB:8C:B5:A1:09:9D:B2:19:59:F6:26
            X509v3 Authority Key Identifier:
                keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:99:b2:29:75:85:dc:a5:a9:0d:66:31:a6:53:37:4a:35:3f:
         32:f9:1a:a4:6b:a3:03:8a:9d:1a:6d:ce:f2:15:58:db:78:19:
         48:94:0c:6b:54:e8:bd:83:e5:5e:ea:72:ad:8b:d2:5c:00:e1:
         9f:7e:cf:3c:4a:3b:4c:4a:54:a3:fc:2f:ca:bd:a1:d0:7b:40:
         24:5b:61:0b:af:d1:87:01:80:df:16:58:e4:17:91:a3:38:f5:
         63:49:28:fc:a7:6e:45:a8:71:a3:b9:8d:bb:06:a0:08:e2:ae:
         33:7f:97:94:39:4d:a0:fa:6e:90:49:0e:53:f2:40:5d:81:f3:
         f1:7e:d1:ed:bf:33:cd:27:0c:5c:df:4b:1a:a4:3f:55:87:b1:
         59:8a:25:96:4e:04:3a:60:a6:b6:84:fa:05:19:bc:10:ae:a4:
         3f:cd:d5:c0:45:ed:09:67:f6:09:55:12:86:93:47:11:3e:73:
         af:6d:07:2d:c2:4f:e7:e0:5c:9b:40:59:ac:09:ca:80:34:ba:
         bd:95:fa:d7:3e:60:f5:28:67:12:56:b9:c0:88:01:ac:cd:01:
         83:85:62:f5:6e:dd:ba:5b:26:37:10:60:41:57:9b:cc:d2:e1:
         48:f5:12:b6:8d:d5:65:6b:25:f0:d6:44:34:bc:8a:c7:25:10:
         08:8c:3f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:05:04 2024 by rpki-client on console-fra.rpki-client.org