Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
File:                     ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json)
Hash identifier:          ORt7x+30SAck4sypVse31hQWmPSz7DFoQ6nEjlUO9/A=
Subject key identifier:   45:29:1B:8B:25:DA:29:7A:0B:9B:14:7D:B1:E3:E2:0F:51:85:3E:1F
Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
Certificate issuer:       /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Certificate serial:       018F86A3AF0CDAB69C383D99003D2337FDD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
Manifest number:          0C4D
Signing time:             Fri 17 May 2024 13:00:25 +0000
Manifest this update:     Fri 17 May 2024 13:00:25 +0000
Manifest next update:     Sat 18 May 2024 13:00:25 +0000
Files and hashes:         1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: SYvzcpTy98xqV90D8ow5uCK0/nJu8MsWNgIxMB36tyM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:af:0c:da:b6:9c:38:3d:99:00:3d:23:37:fd:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
        Validity
            Not Before: May 17 13:00:25 2024 GMT
            Not After : May 18 13:00:25 2024 GMT
        Subject: CN=45291b8b25da297a0b9b147db1e3e20f51853e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:6e:5b:06:40:ef:05:80:ab:e0:9b:e6:b5:
                    7f:12:53:4b:97:b4:5c:97:55:0a:fd:8f:19:3b:2a:
                    00:7c:0b:01:68:c7:b6:fc:33:4b:e7:dd:59:7b:02:
                    c6:3c:6e:04:e1:84:9b:e6:05:9e:46:2f:be:15:4c:
                    be:67:f1:0a:d5:c1:b9:6d:9b:e7:f1:1b:d9:27:f9:
                    9f:2a:5b:6a:d9:fc:ca:79:be:83:59:b9:08:b9:7c:
                    3a:36:57:f2:8c:da:6d:c6:62:48:23:36:66:dc:93:
                    0f:c9:45:16:75:42:55:99:71:60:6e:26:b3:52:c8:
                    9b:f8:ac:e9:5e:ec:10:28:72:63:ad:b8:1f:bc:8f:
                    5d:14:0c:45:b0:8b:40:d0:07:d8:f9:89:4c:71:b3:
                    82:1f:0b:b5:a0:b0:0a:83:08:99:91:72:6b:cf:99:
                    c9:46:1d:f8:85:30:53:75:43:67:49:6b:be:60:78:
                    44:aa:94:9f:fc:0c:04:35:31:54:b2:dc:a2:b6:98:
                    8a:49:20:ee:15:20:f5:0d:4f:38:9d:26:48:81:8a:
                    8c:26:a4:1c:1a:5b:2f:52:c1:d2:05:87:c5:1b:ac:
                    ed:5e:ed:09:e7:90:8e:29:34:8a:11:57:64:7c:8f:
                    fe:64:c2:26:0e:7f:df:01:3b:a2:0d:62:8a:6f:16:
                    71:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:29:1B:8B:25:DA:29:7A:0B:9B:14:7D:B1:E3:E2:0F:51:85:3E:1F
            X509v3 Authority Key Identifier:
                keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d1:46:d2:eb:d6:3f:3d:5f:28:ec:5d:a5:6a:97:2c:f6:90:
         4f:35:fe:11:d4:7b:53:6b:5c:e6:60:21:66:b8:95:70:08:27:
         27:fc:bb:5f:79:2a:fa:b3:56:c2:02:24:22:5e:69:51:4f:d4:
         c2:1f:9d:d9:01:19:1a:ee:f9:fc:74:7d:07:80:ed:70:ff:c5:
         ec:28:ed:ad:4c:fe:4c:85:bb:82:08:7e:ee:e9:0d:6f:5a:c1:
         b0:09:fb:dc:28:53:4a:88:ea:80:c0:1a:02:cd:79:9e:0d:84:
         43:6b:a9:4b:e8:9a:da:d3:50:89:5a:85:92:ff:e5:23:f3:6c:
         47:02:61:83:e4:37:be:35:a5:90:3d:2c:5f:5f:8d:fc:b6:a0:
         a4:bd:b1:24:12:03:dd:16:88:ca:3f:d5:49:f4:a7:73:77:17:
         04:07:93:e0:c2:1d:00:1e:dc:8b:ec:23:15:1b:52:04:d3:20:
         27:a6:b4:52:10:63:e9:3a:6f:80:78:ae:6b:73:3b:b2:6a:55:
         a2:98:50:a2:e4:87:f4:a9:e2:0b:f7:92:20:a7:91:db:20:53:
         d8:94:4c:7a:96:26:c5:76:0d:f2:6a:4d:5c:95:14:1b:b8:23:
         b7:10:22:80:3d:08:8e:71:c7:59:52:20:f8:34:8c:80:89:13:
         28:57:bf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:55:29 2024 by rpki-client on console-ams.rpki-client.org