Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/345c97-d364-4d9b-9e17-de9aa7c67618/1/EzRKWmeG2ywJPOhNeCEujsaAxnM.mft
File:                     EzRKWmeG2ywJPOhNeCEujsaAxnM.mft (raw, json)
Hash identifier:          2Ap+GbkUrTH8wBpLPLbTHW7OVxkR7Uw+pvRk2Iv6TVs=
Subject key identifier:   51:20:EE:A7:F8:90:76:24:27:51:4C:30:05:13:B8:66:C2:6B:8A:FC
Authority key identifier: 13:34:4A:5A:67:86:DB:2C:09:3C:E8:4D:78:21:2E:8E:C6:80:C6:73
Certificate issuer:       /CN=13344a5a6786db2c093ce84d78212e8ec680c673
Certificate serial:       018F404304942B263091B9B766795EC78D7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzRKWmeG2ywJPOhNeCEujsaAxnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/345c97-d364-4d9b-9e17-de9aa7c67618/1/EzRKWmeG2ywJPOhNeCEujsaAxnM.mft
Manifest number:          0739
Signing time:             Fri 03 May 2024 21:01:24 +0000
Manifest this update:     Fri 03 May 2024 21:01:24 +0000
Manifest next update:     Sat 04 May 2024 21:01:24 +0000
Files and hashes:         1: EzRKWmeG2ywJPOhNeCEujsaAxnM.crl (hash: bwvdSGELn/PKwUKz1ZWUl5NYhSRnVDQQUwsWdFDAoHg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/345c97-d364-4d9b-9e17-de9aa7c67618/1/EzRKWmeG2ywJPOhNeCEujsaAxnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/345c97-d364-4d9b-9e17-de9aa7c67618/1/EzRKWmeG2ywJPOhNeCEujsaAxnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzRKWmeG2ywJPOhNeCEujsaAxnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:43:04:94:2b:26:30:91:b9:b7:66:79:5e:c7:8d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13344a5a6786db2c093ce84d78212e8ec680c673
        Validity
            Not Before: May  3 21:01:24 2024 GMT
            Not After : May  4 21:01:24 2024 GMT
        Subject: CN=5120eea7f890762427514c300513b866c26b8afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:11:0f:8c:50:bd:51:b2:13:a0:92:68:f4:
                    01:55:e0:99:52:c6:e5:50:79:cc:53:ba:71:e6:0f:
                    61:28:59:cb:8d:98:5c:13:78:d6:62:2b:41:0e:a8:
                    db:53:6b:05:dc:1a:fb:55:6f:9d:09:00:9b:71:91:
                    65:37:3e:7b:48:e9:84:b4:79:9c:30:07:6f:40:5c:
                    34:d4:51:9d:58:bf:c3:90:b9:fc:5d:15:76:b4:1e:
                    3b:b1:49:1c:cf:19:9e:0a:1a:ca:8b:11:b4:8c:a5:
                    53:1a:b6:3a:fc:4f:7c:7d:85:cc:71:24:b8:ec:0e:
                    23:78:1a:c6:7c:79:2a:a7:a9:7c:53:b0:d2:8b:ac:
                    96:48:7e:ac:af:08:f8:c8:fb:7d:0c:7b:b6:9c:e7:
                    f7:6f:b1:13:32:d1:da:d7:9c:46:03:84:a8:71:cb:
                    34:36:37:5a:98:71:92:2a:ab:7c:6a:5a:34:1f:e7:
                    a1:4c:b6:60:a7:c6:0a:b0:b2:aa:f4:93:62:ac:a4:
                    9b:24:b8:7c:43:2b:51:06:4d:ed:da:60:63:99:3c:
                    bd:4c:b9:b6:49:e2:4b:35:3e:47:13:d0:4c:71:fe:
                    fd:2f:e5:27:53:70:93:56:5b:46:00:43:76:fe:4f:
                    9b:4e:fe:eb:35:dd:8b:4b:8c:bf:7c:d8:06:2e:70:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:20:EE:A7:F8:90:76:24:27:51:4C:30:05:13:B8:66:C2:6B:8A:FC
            X509v3 Authority Key Identifier:
                keyid:13:34:4A:5A:67:86:DB:2C:09:3C:E8:4D:78:21:2E:8E:C6:80:C6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzRKWmeG2ywJPOhNeCEujsaAxnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/345c97-d364-4d9b-9e17-de9aa7c67618/1/EzRKWmeG2ywJPOhNeCEujsaAxnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/345c97-d364-4d9b-9e17-de9aa7c67618/1/EzRKWmeG2ywJPOhNeCEujsaAxnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:19:39:db:e5:d5:7d:91:7c:28:7f:0d:90:5f:de:ca:62:96:
         a6:48:85:5c:2a:5e:f1:cb:3c:24:95:95:c2:6a:55:0c:95:26:
         b1:3c:5f:db:38:ae:3f:a3:0a:63:fc:19:61:e9:c1:da:ee:ce:
         e5:e1:5f:1e:2a:de:da:3e:92:e3:f6:13:2d:82:64:61:74:54:
         36:ea:c0:0e:8f:7b:43:ec:9f:c3:72:a3:fe:66:ae:ba:22:c3:
         bd:49:2c:e2:72:99:5f:a8:f3:62:29:f8:d4:63:8b:17:ae:e8:
         eb:ee:97:a2:23:c6:87:86:13:25:d6:6e:de:9e:f0:9d:df:41:
         d0:1a:49:b2:2d:d5:41:1f:ac:38:75:af:27:58:34:f4:c5:42:
         6b:00:81:a6:91:e1:83:16:d3:5d:b9:c1:48:4c:d5:fc:07:ab:
         01:37:61:fc:d3:fa:19:01:3a:5f:8b:7d:09:1a:ed:63:61:25:
         3f:3a:ff:44:3e:24:fc:1c:91:c8:06:d6:20:dc:47:fd:e0:ae:
         9c:a2:ef:d0:af:03:91:04:6b:04:42:37:af:eb:84:9f:ec:e9:
         18:c8:08:62:27:5c:52:67:4d:91:7d:f5:54:44:7f:e0:9f:53:
         e9:36:66:d5:ff:0d:11:66:07:90:9e:4f:1a:d6:1f:11:ae:bc:
         40:30:2b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:05:39 2024 by rpki-client on console-fra.rpki-client.org