Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File:                     CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier:          hsIE8zyEOUcyAF6oNbaQIqnECxuVJM7aYIEzY5iBgKw=
Subject key identifier:   3D:BA:A3:48:9B:4C:76:35:B4:9D:4E:63:AE:A7:AB:0B:8F:2E:15:BD
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer:       /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial:       018F3250B058B839A299638119C862BDD2FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number:          1148
Signing time:             Wed 01 May 2024 04:01:39 +0000
Manifest this update:     Wed 01 May 2024 04:01:39 +0000
Manifest next update:     Thu 02 May 2024 04:01:39 +0000
Files and hashes:         1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: uh4UxZpVMv9NnQkYz6YoN9ps9a+fMqO/ccERn5ICiOE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:50:b0:58:b8:39:a2:99:63:81:19:c8:62:bd:d2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
        Validity
            Not Before: May  1 04:01:39 2024 GMT
            Not After : May  2 04:01:39 2024 GMT
        Subject: CN=3dbaa3489b4c7635b49d4e63aea7ab0b8f2e15bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e6:df:cc:66:8a:f9:8e:f1:76:cd:2d:4b:0d:
                    d2:cf:cf:a5:c8:f7:77:e2:90:9a:b3:45:53:ee:11:
                    fe:b3:97:5a:aa:88:f3:bf:02:35:ac:45:6e:1d:97:
                    aa:20:d0:28:11:79:47:5d:91:cb:3c:30:32:b3:ee:
                    9a:b8:34:b7:ab:58:2c:23:bc:f3:ab:83:7c:d0:34:
                    d2:8d:e9:d1:c0:37:d1:15:26:f3:5d:e8:53:96:86:
                    4b:81:cc:f2:a4:fe:01:72:21:e5:b6:68:9b:de:f0:
                    e8:4e:b6:b5:f6:d9:b5:f3:ed:33:dc:f9:05:4f:32:
                    01:e9:49:97:6a:5b:81:47:6a:18:f7:5e:32:81:4b:
                    6e:c3:81:16:e5:74:a9:a0:b4:84:30:05:79:2a:5d:
                    de:c2:ad:33:3e:68:ed:59:88:95:3b:d2:0e:e9:c2:
                    a4:fa:14:a3:c1:2b:41:82:ea:17:b2:ec:de:bb:70:
                    af:79:55:13:65:48:f2:fa:a9:3e:ca:14:c7:34:89:
                    c0:e9:da:93:a3:c3:47:06:52:a5:f0:f6:ee:11:a2:
                    b8:54:af:8f:3d:79:c6:d9:63:b9:60:51:68:20:66:
                    dc:b4:27:92:62:08:39:35:c5:2a:09:c4:d2:a1:14:
                    11:bb:f1:d4:4c:23:f5:1c:c0:8a:56:75:49:a5:0a:
                    90:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BA:A3:48:9B:4C:76:35:B4:9D:4E:63:AE:A7:AB:0B:8F:2E:15:BD
            X509v3 Authority Key Identifier:
                keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bf:d1:00:aa:ba:51:ed:d1:60:c2:dc:ea:ba:1c:2f:4e:4d:
         f5:c5:80:56:fe:96:c9:f2:14:88:aa:24:83:f2:aa:c6:c1:ef:
         57:58:f9:ad:a2:e4:a7:88:8c:7e:96:c4:a6:8b:50:fc:c3:24:
         b7:c7:21:1d:ba:29:d8:8c:ea:2e:36:72:49:8a:dc:35:38:9a:
         8d:86:79:56:cd:e3:20:b3:3d:86:d2:e8:f0:46:6a:b3:b3:2f:
         6c:64:77:a0:2b:8f:99:88:c7:f4:b7:cb:f8:8a:32:91:25:79:
         52:a9:46:e5:ef:06:d9:75:f9:8b:3f:ef:01:9c:35:89:5a:39:
         7a:d6:8c:d4:b8:67:b6:19:b2:5c:94:e4:e2:73:5b:dd:e6:2b:
         7c:7b:a4:43:16:d0:6b:8b:8d:33:46:50:1d:80:e7:c1:63:df:
         5b:13:f0:99:bb:74:26:bf:b1:48:59:b9:99:c9:0e:35:d1:52:
         4e:98:2c:05:dd:29:63:7d:e3:e6:bf:35:c7:1d:1a:eb:a7:e3:
         cc:f0:6a:41:04:71:0e:5d:53:03:08:ee:98:b4:af:c1:6f:dd:
         eb:7a:3d:3e:73:87:47:a1:67:a6:7f:69:df:bb:7d:e0:1f:c9:
         04:75:98:99:eb:6b:c4:e0:dc:94:c3:d9:33:4c:3a:42:d0:61:
         4a:5c:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 06:03:45 2024 by rpki-client on console-fra.rpki-client.org