Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
File:                     ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json)
Hash identifier:          +gJj04HQ1eh9vIstXOui9wNChR4+QRHk4glhC+Q3s64=
Subject key identifier:   2C:8D:F2:08:5D:FE:3B:40:62:10:8A:7F:FF:7C:9C:3B:B2:63:C5:0E
Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
Certificate issuer:       /CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Certificate serial:       018F874A316DCA9A0349E5674581D680F731
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
Manifest number:          02C8
Signing time:             Fri 17 May 2024 16:02:17 +0000
Manifest this update:     Fri 17 May 2024 16:02:17 +0000
Manifest next update:     Sat 18 May 2024 16:02:17 +0000
Files and hashes:         1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: xcWo4DS9FKHzbGtfgL0E+jr+s5VnPzjVnjcH60NVk2o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:31:6d:ca:9a:03:49:e5:67:45:81:d6:80:f7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20
        Validity
            Not Before: May 17 16:02:17 2024 GMT
            Not After : May 18 16:02:17 2024 GMT
        Subject: CN=2c8df2085dfe3b4062108a7fff7c9c3bb263c50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:67:59:13:79:3d:9b:db:27:f3:7a:bf:d0:
                    b7:b2:6d:0f:43:b5:54:4b:1a:41:b3:24:17:79:e7:
                    1a:83:94:f2:e3:7d:53:fd:0d:2c:67:65:b1:a1:80:
                    f6:27:83:96:d1:75:fc:20:55:b6:aa:45:7c:aa:46:
                    79:47:08:41:ba:f9:cf:87:8e:e6:d5:f3:dc:68:b4:
                    64:9f:be:02:68:f9:1a:fe:3d:05:75:bd:be:ed:38:
                    63:93:de:7d:07:ff:9c:74:49:f3:c0:c8:27:07:e7:
                    b6:98:44:dc:e0:9b:32:a2:61:37:86:42:0c:ae:7d:
                    69:78:2e:3e:69:0c:0e:36:e4:50:4c:d3:d5:c1:fe:
                    dd:1c:48:65:b3:6e:db:dd:7b:d1:f6:85:7e:ee:9c:
                    08:37:1c:3f:72:5f:3c:73:5e:bb:46:2e:83:91:ce:
                    5a:d1:91:5a:1a:07:74:2b:ea:ef:e1:8d:f5:d2:12:
                    01:eb:c0:c9:eb:1a:fd:a7:3e:58:97:e4:8d:bc:e5:
                    90:7a:1e:a8:cb:03:03:ac:d0:e9:8d:18:6b:77:e6:
                    1e:9c:fa:d3:0d:c6:81:23:95:55:ad:c0:78:b2:ec:
                    bd:f0:5e:57:39:48:b1:fc:44:c1:08:cb:9e:a7:16:
                    4a:8e:57:8b:af:4b:b4:7c:45:79:fb:0e:bb:75:d4:
                    3d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8D:F2:08:5D:FE:3B:40:62:10:8A:7F:FF:7C:9C:3B:B2:63:C5:0E
            X509v3 Authority Key Identifier:
                keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:64:4d:1a:91:f4:2f:8f:ff:62:44:d4:ab:d2:29:ce:71:8a:
         57:08:e8:b2:9a:7a:66:45:97:7f:53:9d:21:8e:1d:8a:1c:dc:
         81:58:6e:6f:7f:89:5b:03:c2:3d:7c:b9:fd:2d:67:5c:00:ee:
         0d:09:00:ec:45:9c:57:28:be:83:8b:8b:c5:64:a4:6b:ab:53:
         f2:b4:fd:f7:7f:c3:c9:9a:d7:85:71:b1:ad:7c:d4:48:83:f0:
         88:33:0c:4c:af:10:f6:dd:8d:29:ff:35:a6:13:a5:c0:54:bc:
         c5:3d:a5:89:63:d3:8b:4c:b5:d6:93:47:98:d8:85:78:c2:08:
         46:cc:a6:54:58:23:5c:e4:3c:85:de:cd:90:78:e4:0a:ef:60:
         3c:c7:d3:d5:ec:37:07:30:7e:42:8a:36:84:6a:52:a1:cb:ae:
         79:bd:2d:7f:2c:27:69:fb:bb:87:c6:78:2d:80:b2:8e:b6:68:
         cd:4f:66:a6:48:ac:10:07:58:10:72:62:7f:4f:50:72:11:42:
         d5:ea:ff:18:a2:84:d7:40:93:4b:1f:ad:29:be:f4:bf:c6:da:
         58:ee:e9:32:7e:ad:00:6b:2d:26:36:9d:3e:74:b0:af:22:b7:
         37:f9:a6:6f:5d:df:85:e8:5d:f2:4f:6f:f2:08:9d:2e:a2:f3:
         df:ae:d3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:17 2024 by rpki-client on console-fra.rpki-client.org