Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File:                     0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier:          Ztw8bE2HQE8Y5mSYrV42jZqqJAF3Yvc8apZeHgxH6Y4=
Subject key identifier:   3C:15:69:E2:0A:66:83:9A:E7:B9:7F:1D:3B:18:FC:4F:EF:DB:FB:07
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer:       /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial:       018F41C51C86C1CF14559EEEF96EB9B489F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number:          0E23
Signing time:             Sat 04 May 2024 04:03:07 +0000
Manifest this update:     Sat 04 May 2024 04:03:07 +0000
Manifest next update:     Sun 05 May 2024 04:03:07 +0000
Files and hashes:         1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: H8rYOQ4sgxhLv4QY64WZeUU66yVmtcpgb2Ta8frILMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c5:1c:86:c1:cf:14:55:9e:ee:f9:6e:b9:b4:89:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
        Validity
            Not Before: May  4 04:03:07 2024 GMT
            Not After : May  5 04:03:07 2024 GMT
        Subject: CN=3c1569e20a66839ae7b97f1d3b18fc4fefdbfb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:c8:19:b6:d7:0e:0e:ec:5f:fe:f9:40:61:
                    b6:58:89:65:14:a3:97:ea:3d:81:ec:db:62:4d:b7:
                    39:c8:10:35:34:38:bc:a3:f8:71:af:d1:f6:64:67:
                    10:c1:00:72:32:36:56:ca:df:6d:e0:ab:e4:1a:aa:
                    04:e5:9b:3a:8a:28:0a:14:a1:5d:b3:3f:c0:06:33:
                    60:29:ff:17:cb:ef:52:12:50:af:d3:fe:b2:1b:2c:
                    cd:c2:d0:55:3a:32:ee:1a:eb:95:1d:9f:6e:af:2c:
                    da:7a:5f:cf:bb:25:de:c3:24:30:13:26:a0:69:e1:
                    36:57:dc:39:b2:5d:df:23:67:db:58:8e:41:3f:20:
                    fa:83:13:5c:ef:9d:5a:b7:a8:d7:b4:11:e3:6e:f0:
                    35:29:8b:6c:dd:ad:c6:24:8f:93:a7:d2:55:40:3f:
                    fc:5c:1c:07:f4:ae:78:7f:bc:c3:a0:7e:58:ab:10:
                    58:55:29:67:f6:08:d4:a2:76:ec:ef:8e:89:cb:fa:
                    9c:6c:2c:1e:d9:d9:93:50:29:05:b4:b3:c4:1c:fc:
                    23:4f:0d:25:ca:a5:6f:66:6e:1e:4c:d4:fd:61:69:
                    22:53:15:10:31:53:8d:b7:ad:72:73:92:85:0a:fe:
                    77:d2:d2:1b:20:ae:08:e6:96:5d:9a:44:69:55:89:
                    be:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:15:69:E2:0A:66:83:9A:E7:B9:7F:1D:3B:18:FC:4F:EF:DB:FB:07
            X509v3 Authority Key Identifier:
                keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2d:30:a0:c2:92:ab:95:c6:9c:68:1b:68:df:7a:e0:ff:41:
         db:97:94:3c:8d:e6:a3:43:37:18:2e:11:03:f2:c5:d4:05:ff:
         e4:0e:f4:56:40:e1:dd:f3:20:a6:c6:9c:f4:a0:4d:29:4b:7b:
         ae:e5:1e:79:82:45:a4:e7:cc:95:ef:d5:92:08:86:ff:62:90:
         4b:00:cc:08:7e:db:12:4d:c0:e8:9c:9c:c1:8a:86:61:5d:8b:
         5d:3c:86:80:8a:a1:96:55:1c:34:ab:f4:c8:11:ee:1c:73:3d:
         85:51:d7:c3:b3:38:d8:90:6c:e3:1f:af:3d:4a:62:d0:fc:34:
         3a:0c:ed:fd:e3:0f:81:3d:3f:91:44:30:60:2b:98:d7:3d:64:
         60:75:64:a0:ab:ca:d6:83:a7:95:9f:34:db:86:39:67:8b:ab:
         80:a4:ea:63:8f:86:ca:1a:60:8f:c1:62:16:d5:6c:c9:93:a2:
         ec:d1:89:53:fa:bf:85:13:65:52:89:fb:c1:49:9a:50:98:7e:
         9b:8e:dc:21:2b:61:15:e6:67:4e:5a:03:a3:ef:5f:c8:c1:41:
         b8:0b:84:dc:14:58:6d:59:bb:63:7a:b5:15:dc:fb:fb:42:53:
         7a:9b:fa:7e:6a:12:bf:91:47:30:d5:79:78:68:79:4b:91:93:
         be:d6:03:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:34:29 2024 by rpki-client on console-ams.rpki-client.org