Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File:                     0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier:          1mex85+cMcXCHZ08SMzy0e2N2+7A/Li1oFb9Hgjr5As=
Subject key identifier:   CB:0E:70:7B:55:11:08:C2:09:58:D0:78:6B:0E:47:AF:85:AD:89:45
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer:       /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial:       018F570401C709C29CEC42A599458B3F8CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number:          115C
Signing time:             Wed 08 May 2024 07:03:51 +0000
Manifest this update:     Wed 08 May 2024 07:03:51 +0000
Manifest next update:     Thu 09 May 2024 07:03:51 +0000
Files and hashes:         1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: QRJILoQM/h5uCetVT90HXjIcG3GBrbZV5/XYEH185zw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:04:01:c7:09:c2:9c:ec:42:a5:99:45:8b:3f:8c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
        Validity
            Not Before: May  8 07:03:51 2024 GMT
            Not After : May  9 07:03:51 2024 GMT
        Subject: CN=cb0e707b551108c20958d0786b0e47af85ad8945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:fc:57:a7:7f:7b:d8:5a:53:ba:a0:70:e5:
                    5b:72:18:84:55:a5:95:24:d3:7a:1f:7f:33:ef:e9:
                    e8:ca:a8:9b:d4:4b:6d:b1:11:5b:62:a4:a6:77:89:
                    f3:d2:de:ab:da:fc:eb:d9:0e:c8:a3:c0:95:ff:d5:
                    8d:ee:80:26:6e:1b:64:49:57:9c:8b:dc:07:a6:81:
                    d5:36:8d:09:c1:ea:4f:9f:06:4c:16:75:90:f3:ea:
                    49:ee:a6:ba:e2:a4:45:a1:0f:e0:97:4e:e0:65:1a:
                    d0:dd:98:61:1a:89:67:62:f6:f7:3b:80:6f:f5:39:
                    f1:83:5b:e2:b7:70:b5:ae:bf:10:09:d8:eb:f1:d3:
                    b5:c2:96:18:1e:32:87:cc:56:7d:af:b9:65:d8:ca:
                    93:a5:e1:46:d4:a5:47:7a:47:fd:ae:bd:d8:0f:3b:
                    4f:a4:ce:87:3c:9d:10:91:01:d7:74:dd:37:1f:7e:
                    5d:28:cd:67:da:1f:e9:cb:5b:9e:b4:be:ea:35:c0:
                    d4:33:3f:da:2d:10:c1:6a:ec:dc:10:ff:2a:06:9a:
                    64:d3:27:d0:b9:d9:c6:40:36:3e:2c:50:9d:a4:5a:
                    83:2e:c5:70:e3:ef:d3:b9:25:55:9e:e2:79:1d:bd:
                    b1:f6:42:72:5d:64:61:6d:bd:35:83:0f:5c:0b:67:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0E:70:7B:55:11:08:C2:09:58:D0:78:6B:0E:47:AF:85:AD:89:45
            X509v3 Authority Key Identifier:
                keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b4:c0:7c:a0:e8:de:80:fc:31:b3:c9:80:e4:6d:4d:f0:05:
         32:a4:36:ff:79:b9:aa:f9:60:db:17:65:9f:c3:d3:22:bb:ee:
         f6:9b:4c:d3:18:63:cd:8a:87:94:24:d9:db:99:12:21:aa:c8:
         be:c1:a4:15:e8:00:58:d4:95:f4:87:ec:5c:89:93:ef:38:27:
         03:07:05:69:22:12:65:7d:c4:54:9a:14:f4:fb:e1:b5:5b:52:
         9a:e1:c4:61:62:c0:92:7b:fb:2b:f6:4f:d9:f8:33:5d:2f:ad:
         99:5a:1b:ff:e6:24:e5:62:10:27:ba:9a:18:85:8a:e9:7d:5f:
         a3:51:94:75:07:f0:bd:73:67:82:20:26:94:b0:dc:a3:58:99:
         73:81:40:6d:0c:00:ff:6c:65:af:a7:cb:40:79:36:dd:b5:d8:
         03:67:fc:15:13:43:80:61:11:e1:ed:55:1b:4e:e8:a8:97:91:
         85:7a:0d:45:17:4b:dc:bb:e8:e8:8a:99:10:3e:3d:c6:d3:7c:
         83:6d:45:db:80:8a:34:87:50:cc:ec:d1:40:83:1f:ca:3e:7c:
         2b:ed:29:0a:52:3b:a8:96:3f:51:95:34:22:36:75:e0:9c:7b:
         fc:c5:3e:ed:b8:bf:cc:c7:1a:44:35:07:26:13:7d:93:63:b7:
         6c:4b:3c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:42:50 2024 by rpki-client on console-fra.rpki-client.org