Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
File:                     H38fQMjrspNo9ug7-d3QZ14H1O0.mft (raw, json)
Hash identifier:          LJJ/keQDznnYfA0OAtICNb6yO2VchMDr2ZE+pIKz3fI=
Subject key identifier:   45:97:12:9A:D0:C0:D2:72:BF:26:49:EC:CF:20:D9:08:B5:A9:C4:7D
Authority key identifier: 1F:7F:1F:40:C8:EB:B2:93:68:F6:E8:3B:F9:DD:D0:67:5E:07:D4:ED
Certificate issuer:       /CN=1f7f1f40c8ebb29368f6e83bf9ddd0675e07d4ed
Certificate serial:       018F362F8A75496055A752E3E044A0AE5D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H38fQMjrspNo9ug7-d3QZ14H1O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
Manifest number:          0A0E
Signing time:             Wed 01 May 2024 22:03:56 +0000
Manifest this update:     Wed 01 May 2024 22:03:56 +0000
Manifest next update:     Thu 02 May 2024 22:03:56 +0000
Files and hashes:         1: H38fQMjrspNo9ug7-d3QZ14H1O0.crl (hash: BIDTPTeA3NGdbam+gqrRA1mxKqjTsBZ+f4Wv7tMbIUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H38fQMjrspNo9ug7-d3QZ14H1O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2f:8a:75:49:60:55:a7:52:e3:e0:44:a0:ae:5d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7f1f40c8ebb29368f6e83bf9ddd0675e07d4ed
        Validity
            Not Before: May  1 22:03:56 2024 GMT
            Not After : May  2 22:03:56 2024 GMT
        Subject: CN=4597129ad0c0d272bf2649eccf20d908b5a9c47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:29:77:dc:4c:2d:fa:79:5a:7b:8d:4e:38:
                    a6:df:99:81:28:94:13:f7:f7:61:f4:b1:7a:78:a1:
                    52:08:a7:f0:39:38:95:fa:f3:cb:d2:2d:3e:2c:07:
                    e5:ff:bc:ca:ec:3d:7a:84:7f:c2:df:3e:0a:28:e0:
                    6c:5e:ed:e7:19:a5:2c:01:84:01:cc:f7:ca:2c:1c:
                    e1:c0:38:16:4b:e7:9c:f4:ce:20:d8:f8:ea:b1:26:
                    d6:bc:59:d2:9f:91:99:06:e1:fc:68:19:27:07:50:
                    4f:6c:c9:05:4b:d6:4a:a5:73:27:d3:4b:48:d1:c9:
                    51:ac:da:c3:ff:fa:3c:16:30:3a:7e:02:63:ae:67:
                    cf:14:44:e4:a8:c1:2c:6b:aa:31:b8:51:25:6e:5b:
                    68:99:2a:f6:89:1c:ee:5b:02:bf:6b:80:35:a9:cd:
                    1e:6b:f7:7d:a2:93:8a:5c:1e:7a:78:9c:8f:73:50:
                    a0:03:17:77:0c:a0:ce:36:26:bc:57:85:b8:8a:bb:
                    ba:67:0a:7b:12:b4:cb:35:fc:ee:0b:da:e3:bd:17:
                    74:34:06:da:cb:e7:25:9f:33:8e:f9:f3:a5:2e:64:
                    4f:b4:39:b3:ea:44:11:0a:70:7e:eb:2b:af:2a:8c:
                    91:a6:24:94:08:74:24:59:d6:4c:19:e2:fc:a3:e1:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:97:12:9A:D0:C0:D2:72:BF:26:49:EC:CF:20:D9:08:B5:A9:C4:7D
            X509v3 Authority Key Identifier:
                keyid:1F:7F:1F:40:C8:EB:B2:93:68:F6:E8:3B:F9:DD:D0:67:5E:07:D4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H38fQMjrspNo9ug7-d3QZ14H1O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:25:3d:0a:44:79:eb:4a:66:76:9e:6e:b2:d9:70:de:a1:f0:
         6a:d6:be:4d:11:ba:8f:43:81:f9:a2:66:e7:79:b4:15:eb:38:
         e2:6a:a0:bf:81:90:9d:3d:a4:69:71:36:1a:fb:cf:ad:3c:d7:
         be:0e:1c:77:2b:bf:46:5d:8c:7b:cd:a1:65:b0:c1:12:21:c3:
         e9:ab:ac:c8:4b:85:7d:a5:09:45:0f:e9:d7:1b:64:4a:75:05:
         5c:da:99:63:4d:ea:31:c8:1f:dc:d4:dd:cb:4f:71:b5:f8:cb:
         b7:54:60:c6:8d:3c:9a:6d:b7:1e:91:5f:93:9e:0b:25:78:1c:
         7a:ca:b6:15:67:a4:94:16:6e:f5:54:0b:9a:72:60:d9:77:d6:
         6d:2c:68:cb:36:2e:20:2a:ba:39:c9:1a:39:3c:88:72:fc:12:
         60:c7:00:b1:cc:44:27:2b:5e:fa:79:b4:45:84:5f:d5:25:76:
         af:92:9f:7b:45:0d:5b:bb:ff:38:29:7b:15:a9:e9:25:a0:0c:
         ac:c4:66:f9:41:9f:8a:b9:62:63:c8:6c:e3:ea:71:9a:5f:d3:
         fc:3c:0a:c7:ec:0f:db:6f:6f:6e:bc:98:80:42:03:99:27:b0:
         08:08:be:49:17:fc:93:e6:d5:61:6a:96:66:95:92:ca:d6:34:
         6f:1f:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:39:31 2024 by rpki-client on console-fra.rpki-client.org