Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
File:                     DtBp69i6c1aNl9ixv7Q84upNqd4.mft (raw, json)
Hash identifier:          Gp0paFWgRnKfU5/3gmOpcSjkZcB9FIArrkJ8wzFpkOM=
Subject key identifier:   1B:23:B6:AE:74:CB:A9:E2:09:BB:0B:8B:B1:5A:ED:FB:1D:F2:1F:68
Authority key identifier: 0E:D0:69:EB:D8:BA:73:56:8D:97:D8:B1:BF:B4:3C:E2:EA:4D:A9:DE
Certificate issuer:       /CN=0ed069ebd8ba73568d97d8b1bfb43ce2ea4da9de
Certificate serial:       018F423146E9BFE3BD2286A318E1719266FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DtBp69i6c1aNl9ixv7Q84upNqd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
Manifest number:          1150
Signing time:             Sat 04 May 2024 06:01:16 +0000
Manifest this update:     Sat 04 May 2024 06:01:16 +0000
Manifest next update:     Sun 05 May 2024 06:01:16 +0000
Files and hashes:         1: DtBp69i6c1aNl9ixv7Q84upNqd4.crl (hash: pfYxnppqrsG0eeqcygokAYkQEoBCtzJIWxDTac482w0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DtBp69i6c1aNl9ixv7Q84upNqd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:31:46:e9:bf:e3:bd:22:86:a3:18:e1:71:92:66:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ed069ebd8ba73568d97d8b1bfb43ce2ea4da9de
        Validity
            Not Before: May  4 06:01:16 2024 GMT
            Not After : May  5 06:01:16 2024 GMT
        Subject: CN=1b23b6ae74cba9e209bb0b8bb15aedfb1df21f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:5b:1a:86:dc:cd:87:1c:d7:25:25:a3:15:
                    91:77:f7:cc:1b:6e:30:c1:c3:8b:5e:a6:98:2b:4f:
                    94:74:ae:12:1e:57:7b:0e:5a:01:32:90:fd:5c:a0:
                    75:71:ba:5c:57:74:83:8a:74:e8:ea:55:9c:44:f9:
                    95:bf:82:7f:db:cf:f9:57:4a:fa:aa:90:1d:ce:bb:
                    d6:bc:04:75:cc:f2:a5:e2:11:13:14:b0:c0:f7:36:
                    11:dd:42:1a:6f:df:a8:d0:c4:01:6f:a2:7f:fc:0c:
                    eb:4d:90:6e:27:59:c6:6b:c7:7c:8c:f6:61:04:f6:
                    9b:69:be:ca:90:9d:8c:cd:d3:cc:0f:6e:78:a8:cc:
                    42:3d:e6:af:53:08:8f:60:e6:d3:f4:9b:f7:6e:71:
                    1c:3a:df:9e:10:3a:a2:0f:6b:12:7b:cc:4b:a1:b5:
                    f0:eb:9c:1d:e5:f3:76:f4:4c:4f:7f:68:ad:68:99:
                    a8:88:40:31:3a:d9:47:ac:8d:7d:c6:51:81:58:c3:
                    1b:3f:4a:fe:88:38:9c:f1:b8:e3:da:f0:0f:09:5e:
                    90:b0:cb:e2:ea:1c:9f:03:a0:9d:7b:34:81:11:86:
                    9c:aa:b9:c5:ad:38:5c:a8:e7:a8:6b:f5:99:f9:b0:
                    ac:cb:43:f4:d0:4f:0b:5a:ea:9e:18:fb:7a:5d:d9:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:23:B6:AE:74:CB:A9:E2:09:BB:0B:8B:B1:5A:ED:FB:1D:F2:1F:68
            X509v3 Authority Key Identifier:
                keyid:0E:D0:69:EB:D8:BA:73:56:8D:97:D8:B1:BF:B4:3C:E2:EA:4D:A9:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtBp69i6c1aNl9ixv7Q84upNqd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:82:99:80:d9:b4:11:d6:19:18:c8:ae:b0:21:c0:38:a0:56:
         14:97:24:87:47:e7:63:3d:c3:a9:5b:dc:38:99:17:8b:fd:db:
         09:1e:fa:64:e8:dc:f1:c7:c2:32:ed:fa:2b:04:b8:6e:ce:f1:
         36:42:63:ba:dc:34:78:4b:94:fc:eb:5a:f6:f5:73:7b:ae:41:
         57:53:f5:0a:39:b9:fc:51:3c:4b:87:27:06:8a:b0:f7:20:42:
         5d:03:ea:e0:c3:a3:ec:bf:90:17:b8:f9:94:ab:2e:fc:37:ad:
         7a:29:d9:e8:eb:5f:95:07:55:ff:53:2f:68:64:3f:c4:71:22:
         a2:53:be:a1:94:46:aa:b7:24:7b:79:66:b5:b1:95:93:46:1e:
         b1:b2:10:76:53:9e:77:b5:30:7e:08:ca:9d:aa:d6:22:e9:9b:
         ee:5a:93:15:bb:45:c4:5d:a2:0d:28:58:ff:fb:77:ba:2b:eb:
         e6:e9:23:a9:3b:2d:59:b6:1f:ea:ab:71:06:05:ea:b7:8f:ce:
         5a:d6:a3:56:be:5a:79:7f:25:df:85:7d:8e:27:1e:81:4f:e5:
         39:b6:fb:f0:56:92:73:44:c1:43:e6:cb:65:f1:27:07:84:b6:
         1d:66:a8:08:33:69:d4:53:b6:57:2b:87:4a:09:7c:5f:99:1e:
         99:f5:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:01:44 2024 by rpki-client on console-ams.rpki-client.org