Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
File:                     4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft (raw, json)
Hash identifier:          9Jci63C+4UiFhCikgNUWehPAIRc9YSe7r9+2NIfr2TM=
Subject key identifier:   71:C3:1B:FB:36:90:53:2F:CC:D7:B7:22:E9:14:91:41:ED:05:BF:CF
Authority key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
Certificate issuer:       /CN=e33779b8388d001fdcbddc48ace227f009850660
Certificate serial:       018F5326C9586E64F307119CE0261F3B2FF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
Manifest number:          1158
Signing time:             Tue 07 May 2024 13:03:21 +0000
Manifest this update:     Tue 07 May 2024 13:03:21 +0000
Manifest next update:     Wed 08 May 2024 13:03:21 +0000
Files and hashes:         1: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl (hash: L2k2h5bcOF8dTGJSpNTVYy0sOgjFKou7Z3+LBlApQyQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:26:c9:58:6e:64:f3:07:11:9c:e0:26:1f:3b:2f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33779b8388d001fdcbddc48ace227f009850660
        Validity
            Not Before: May  7 13:03:21 2024 GMT
            Not After : May  8 13:03:21 2024 GMT
        Subject: CN=71c31bfb3690532fccd7b722e9149141ed05bfcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:88:b7:0a:42:2f:26:94:f1:14:66:23:e0:
                    b8:47:06:c9:be:62:76:4c:a9:e3:b5:63:f3:aa:ab:
                    e3:55:f9:40:cf:ed:0a:5f:29:23:fe:96:0d:9f:c5:
                    35:35:d8:78:ef:b3:82:e8:bd:77:50:5a:cb:76:76:
                    37:f7:1a:e4:6b:20:03:66:eb:e8:db:5c:41:30:12:
                    a3:0d:da:6d:5a:78:51:b9:93:70:b8:ab:b6:a2:4c:
                    57:f3:9c:b8:21:d8:a6:f0:5e:a0:3b:61:5b:3e:3a:
                    36:fd:a8:51:75:72:d9:43:31:57:9d:8c:a8:62:3a:
                    be:52:69:c1:e3:c6:18:97:34:03:0f:e4:fd:bd:cb:
                    18:b0:11:9f:c9:67:5b:43:ab:aa:61:50:c7:3b:94:
                    c2:13:53:08:ce:24:ef:48:8d:b8:53:59:c0:9c:57:
                    87:7a:92:2f:13:75:28:30:79:95:93:5a:de:23:12:
                    8f:aa:7c:55:52:c7:c0:93:06:d9:5a:de:2b:53:70:
                    47:ec:9a:78:01:8d:f2:50:34:60:7f:4c:52:a3:6a:
                    6b:93:8e:af:2f:71:12:0a:d5:f3:2c:3d:05:b0:91:
                    1c:44:a8:45:24:94:9e:bf:7c:a5:8e:51:d8:b8:af:
                    6f:78:e6:b0:6f:a8:1d:28:9b:c4:3a:6f:a0:ca:0a:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C3:1B:FB:36:90:53:2F:CC:D7:B7:22:E9:14:91:41:ED:05:BF:CF
            X509v3 Authority Key Identifier:
                keyid:E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ac:24:97:9c:1d:12:b5:a3:a9:7d:da:6d:65:af:50:45:80:
         28:1e:f5:8f:60:4b:4e:e4:fd:57:bf:47:a6:5c:2b:fe:80:49:
         ac:da:2a:5f:de:e8:ff:3d:f1:09:ed:03:83:b3:b6:b4:4f:13:
         5a:43:a3:19:e8:b5:72:e3:96:1f:c2:b6:4f:99:e0:05:02:91:
         4d:3b:0a:32:da:22:68:32:18:a6:0e:e6:25:7e:60:71:ed:6a:
         44:ce:cf:e4:19:ef:fc:36:ce:6c:1c:b9:25:c6:b9:af:cf:51:
         5c:2f:06:ac:11:7b:62:81:72:94:32:2d:07:06:09:3d:95:da:
         ce:b3:0b:e7:e3:05:31:de:17:46:18:5f:09:2b:b6:5a:e1:ad:
         43:ba:7c:64:ad:5e:4f:f4:13:7c:05:46:e6:1b:60:9d:d1:93:
         49:e2:eb:5d:c4:61:3c:87:b6:54:5d:3b:20:48:68:38:9a:a4:
         31:6e:cb:32:c4:94:1a:f8:da:13:c8:bd:3a:32:d3:62:25:53:
         89:40:71:93:34:a2:75:dc:7e:1e:fa:bc:5d:25:c3:fc:91:52:
         43:4c:bb:92:af:3c:54:aa:84:00:3f:1b:bf:b3:1f:34:e1:9b:
         f9:2d:dd:fc:1d:06:c6:16:61:ab:ee:a3:b7:9f:3b:9c:f0:13:
         89:9a:70:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:36:21 2024 by rpki-client on console-ams.rpki-client.org