Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File:                     1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier:          00DdthEn9e2IZwOMDR2ELryD/MjsiCRokPwPkyJRVEI=
Subject key identifier:   20:04:5C:79:9B:5A:36:A9:AD:2D:B5:CE:E3:04:EB:C6:EC:D8:75:E4
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer:       /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial:       018F3588608BA58525A55A736623A9BDAD74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number:          114C
Signing time:             Wed 01 May 2024 19:01:21 +0000
Manifest this update:     Wed 01 May 2024 19:01:21 +0000
Manifest next update:     Thu 02 May 2024 19:01:21 +0000
Files and hashes:         1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: LWxg0Cg3igYBSjYniB2N7/k+ha6mDL1ct1EzfWSlNgM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 19:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:88:60:8b:a5:85:25:a5:5a:73:66:23:a9:bd:ad:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
        Validity
            Not Before: May  1 19:01:21 2024 GMT
            Not After : May  2 19:01:21 2024 GMT
        Subject: CN=20045c799b5a36a9ad2db5cee304ebc6ecd875e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:da:41:9f:77:27:24:7d:54:47:08:2d:3d:
                    22:0a:78:5e:16:6b:b2:6a:6c:06:59:c8:ae:d1:ca:
                    2a:44:bf:bf:73:4f:63:72:fe:bf:85:4a:18:d0:13:
                    36:24:8f:c7:af:2a:fc:c2:b4:4c:40:c8:6c:55:71:
                    88:72:12:f5:b9:03:63:bd:fc:72:fb:69:47:70:4e:
                    cd:83:39:a1:61:4d:e6:11:f1:49:95:15:5e:ba:b1:
                    37:ca:91:72:84:fe:3c:22:5a:15:39:a8:e5:9c:e8:
                    50:7e:ac:36:d6:b9:a1:cc:db:85:a2:a3:f5:64:54:
                    2f:34:f4:f5:fe:22:97:25:d8:5b:c2:07:35:62:e3:
                    c7:f7:73:5d:19:88:e4:89:0e:9c:14:56:ba:9f:fc:
                    29:7d:21:92:6c:8c:f2:82:4b:78:9a:6c:7a:98:3d:
                    ef:26:ca:6d:67:94:3a:3d:45:a2:e0:c1:b0:25:bd:
                    d2:75:ae:ac:fa:04:75:24:47:e8:46:f4:62:b3:cd:
                    6a:b3:96:7e:f3:b2:51:81:de:9d:d5:7d:4d:c8:15:
                    62:ef:66:e4:5f:96:54:1f:b9:94:f9:04:8f:89:00:
                    5a:0d:ef:e5:17:cd:d0:0e:d3:e7:bc:b9:f4:67:e9:
                    d3:fc:63:89:ff:c6:6f:a1:f9:ce:40:c5:bf:c1:8d:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:04:5C:79:9B:5A:36:A9:AD:2D:B5:CE:E3:04:EB:C6:EC:D8:75:E4
            X509v3 Authority Key Identifier:
                keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d5:e7:80:6e:b5:69:d2:a1:25:34:45:4b:95:82:d1:bb:4e:
         df:e1:54:b3:0e:fe:6a:4f:56:ee:37:37:aa:aa:84:96:0e:c2:
         2a:39:81:8a:cd:47:8b:7a:78:68:23:ee:15:b2:c3:b4:bb:77:
         ee:ff:b6:f9:4b:38:74:4b:cb:7a:9e:45:cb:2a:f4:5e:05:26:
         97:81:a8:91:0d:6e:12:80:4a:61:46:5b:3c:c9:01:83:17:57:
         b4:c0:b3:37:96:8d:9c:ef:7f:6f:a8:2a:ec:0c:33:36:64:3d:
         ed:cb:35:fb:b3:ae:b6:cf:75:73:f0:70:eb:69:b2:a4:c6:5d:
         82:6c:e9:74:7f:64:2f:b3:3a:5f:e0:30:d5:c6:6e:84:a2:e1:
         78:83:df:c7:3d:b3:d5:be:8a:d7:3f:be:16:99:42:3f:67:4b:
         84:64:16:6c:13:d3:eb:6e:36:52:d2:42:bc:dd:dc:30:06:3d:
         44:4e:6d:df:33:02:76:43:9e:f8:0f:8d:ae:99:04:22:ec:34:
         58:6a:6f:38:c6:90:1e:e6:3c:a6:bf:af:36:05:4e:64:42:22:
         a9:dd:c4:c3:8b:d1:fe:cb:23:c8:d7:17:fe:bb:ab:37:af:4a:
         7f:ca:49:cb:c7:ed:e6:d4:f7:d9:d4:e6:ab:4a:ad:b2:4c:64:
         05:8d:9c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:35:31 2024 by rpki-client on console-fra.rpki-client.org