Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File:                     GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier:          DZXqkTMPREikJGdYC5I2RL5koqaTkGV8taGvvjWxOsE=
Subject key identifier:   BB:25:4A:B1:AC:C2:B3:05:6F:A7:79:31:15:30:21:3A:58:F7:76:22
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer:       /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial:       018F3D41BFA209D824BD11C01368FBBE2CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number:          114F
Signing time:             Fri 03 May 2024 07:01:09 +0000
Manifest this update:     Fri 03 May 2024 07:01:09 +0000
Manifest next update:     Sat 04 May 2024 07:01:09 +0000
Files and hashes:         1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: fV0Yxp3uwx06XV528yFLrHwQfCD9Bzb1ORGymadKS2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:41:bf:a2:09:d8:24:bd:11:c0:13:68:fb:be:2c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
        Validity
            Not Before: May  3 07:01:09 2024 GMT
            Not After : May  4 07:01:09 2024 GMT
        Subject: CN=bb254ab1acc2b3056fa779311530213a58f77622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:34:ba:fc:0c:34:7a:ae:75:8a:f9:e6:83:
                    5c:3f:ae:7b:9a:3f:99:d9:fd:f3:71:87:12:61:36:
                    96:2d:a4:6a:51:70:e4:32:7f:ac:80:26:e2:41:a9:
                    e7:28:8d:71:8d:bd:d0:4a:54:2b:db:5b:89:c1:61:
                    63:73:91:d7:6d:89:20:0e:59:8d:7a:7a:73:81:c9:
                    6c:a6:6b:3c:2c:86:54:fd:8c:87:fb:b7:73:d6:1e:
                    8d:1b:e1:79:e9:9a:19:d2:64:44:94:be:19:93:ff:
                    3a:1c:ae:03:bc:1e:da:f1:06:47:d7:9b:8a:ab:41:
                    3e:e0:cb:a4:f1:bf:b9:18:0e:9e:a0:82:62:01:58:
                    03:35:b0:22:95:36:6a:d0:ee:00:87:fe:c7:9d:fc:
                    1a:c6:da:fd:f8:61:48:b2:3a:a4:cb:b8:c4:44:4f:
                    2e:b7:f9:d2:37:ca:f9:6a:e2:ba:30:dd:20:be:f1:
                    5a:0b:51:a3:bc:ca:65:db:98:b1:cc:72:a9:a5:b3:
                    f1:53:e0:6e:a2:92:11:ea:db:c8:e1:2e:41:7d:09:
                    f8:a1:da:2d:c1:1c:77:5a:8e:9b:56:67:4a:d2:6b:
                    a4:bf:b8:7d:57:ca:a9:c5:66:b9:bf:99:37:93:7a:
                    1f:c9:96:4e:60:3f:7f:0e:fa:03:0f:7e:a4:b0:a6:
                    8a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:25:4A:B1:AC:C2:B3:05:6F:A7:79:31:15:30:21:3A:58:F7:76:22
            X509v3 Authority Key Identifier:
                keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4b:5b:6a:82:0b:84:5b:5d:d8:f2:e4:3d:0e:0c:66:57:87:
         24:82:cd:4c:d3:f6:e0:de:f2:62:50:ea:48:5a:af:bf:ae:6d:
         e6:48:1b:31:38:8a:97:78:82:48:d8:9b:12:ab:f9:f5:e4:7d:
         b8:3c:66:9e:cf:c6:b9:b8:7b:54:29:37:2f:52:15:ad:d3:50:
         4d:f3:e4:04:95:e9:c2:b0:3c:41:a8:0f:c7:0f:79:59:8a:d1:
         57:aa:52:c7:da:af:30:8f:0c:0a:4c:bd:df:bb:f8:a0:c2:b1:
         ce:e1:37:1b:5e:2a:ed:8f:28:a1:e5:14:11:78:78:c7:91:c2:
         e3:65:b7:02:6c:9a:12:e9:e9:d6:0c:1c:cb:ad:54:e1:21:bc:
         b1:7a:b8:b3:b7:84:3f:28:39:44:33:e2:74:d0:46:bf:be:6a:
         38:dd:a9:a1:83:08:ca:13:da:df:38:2e:fd:19:3e:10:91:97:
         0f:9a:55:f2:99:6e:d3:a9:f6:fd:18:83:13:4b:b0:c8:d7:4a:
         57:37:08:3c:34:95:7d:19:c4:ce:c8:86:d1:fa:e3:4c:7f:bd:
         df:b7:2e:86:ef:a7:07:af:2e:de:a0:75:78:84:bf:ba:ad:ad:
         cf:a7:71:67:31:d2:3f:5c:03:4f:cc:1c:8c:b7:d7:bf:f8:5b:
         c1:1a:d3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:16:56 2024 by rpki-client on console-fra.rpki-client.org