Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ce5b87-d8c8-4452-8b8a-43da2e7ec15b/1/IMQGLy2h3hCA_wbcKfkEXSwvjCI.mft
File:                     IMQGLy2h3hCA_wbcKfkEXSwvjCI.mft (raw, json)
Hash identifier:          VEcrR5I3p1QPIgjyZpPrKCBtiQwBWXzDTlme3ELSSKw=
Subject key identifier:   E3:25:4A:37:A8:67:61:6F:B6:49:54:6F:BD:85:45:D8:20:44:45:44
Authority key identifier: 20:C4:06:2F:2D:A1:DE:10:80:FF:06:DC:29:F9:04:5D:2C:2F:8C:22
Certificate issuer:       /CN=20c4062f2da1de1080ff06dc29f9045d2c2f8c22
Certificate serial:       018F4CB5226925CB19EDB0DA20B04621FA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMQGLy2h3hCA_wbcKfkEXSwvjCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ce5b87-d8c8-4452-8b8a-43da2e7ec15b/1/IMQGLy2h3hCA_wbcKfkEXSwvjCI.mft
Manifest number:          0421
Signing time:             Mon 06 May 2024 07:01:30 +0000
Manifest this update:     Mon 06 May 2024 07:01:30 +0000
Manifest next update:     Tue 07 May 2024 07:01:30 +0000
Files and hashes:         1: IMQGLy2h3hCA_wbcKfkEXSwvjCI.crl (hash: eHnXosTYNACth0c1iUQdkwRmppqi4YDrCy0DA4XKkPY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ce5b87-d8c8-4452-8b8a-43da2e7ec15b/1/IMQGLy2h3hCA_wbcKfkEXSwvjCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ce5b87-d8c8-4452-8b8a-43da2e7ec15b/1/IMQGLy2h3hCA_wbcKfkEXSwvjCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMQGLy2h3hCA_wbcKfkEXSwvjCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 07:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b5:22:69:25:cb:19:ed:b0:da:20:b0:46:21:fa:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c4062f2da1de1080ff06dc29f9045d2c2f8c22
        Validity
            Not Before: May  6 07:01:30 2024 GMT
            Not After : May  7 07:01:30 2024 GMT
        Subject: CN=e3254a37a867616fb649546fbd8545d820444544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:c6:0c:83:31:8a:14:c4:fe:ba:1a:4d:1c:
                    67:b7:f5:33:5e:78:3d:ae:fa:09:a8:7e:ce:7c:53:
                    bb:3b:d4:f5:e2:cc:87:5b:a2:88:6f:96:07:17:a4:
                    8c:57:d8:83:21:d7:97:5d:48:a6:58:4a:87:d8:c7:
                    46:3d:ad:a6:b3:22:f5:d0:d3:4e:25:d2:33:7c:a7:
                    8b:dc:a0:58:39:21:d6:e0:ea:7f:ac:2b:2b:66:97:
                    aa:07:2b:f3:a1:ca:45:a3:0d:62:84:7d:f1:a3:30:
                    70:2c:79:41:63:97:3d:e9:e9:fa:41:8e:97:fb:44:
                    15:b2:8a:9f:72:33:c9:bc:62:76:66:e3:21:f1:13:
                    60:57:b3:75:c6:8f:1a:eb:fc:50:f8:73:f8:12:07:
                    6c:7c:05:bc:6b:cf:16:a8:31:57:e0:bc:a8:a6:e5:
                    89:4f:ed:c5:25:55:e8:cc:4b:fe:3c:bf:44:99:8e:
                    5f:bd:26:6e:2f:00:cd:75:08:54:e6:24:9e:c1:ba:
                    22:a7:fc:05:45:12:22:8d:ca:dd:64:10:fe:64:90:
                    19:56:15:de:99:49:98:97:2f:fe:18:58:b8:a1:e7:
                    f3:d8:a5:3e:c7:bd:ff:db:76:11:92:f7:3c:67:3c:
                    dc:a9:be:c4:b6:28:70:8d:93:d6:d5:11:70:8e:5b:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:25:4A:37:A8:67:61:6F:B6:49:54:6F:BD:85:45:D8:20:44:45:44
            X509v3 Authority Key Identifier:
                keyid:20:C4:06:2F:2D:A1:DE:10:80:FF:06:DC:29:F9:04:5D:2C:2F:8C:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMQGLy2h3hCA_wbcKfkEXSwvjCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ce5b87-d8c8-4452-8b8a-43da2e7ec15b/1/IMQGLy2h3hCA_wbcKfkEXSwvjCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ce5b87-d8c8-4452-8b8a-43da2e7ec15b/1/IMQGLy2h3hCA_wbcKfkEXSwvjCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:23:b8:9d:2e:bd:b9:47:86:60:e0:d2:bc:e4:77:a3:5a:
         ff:f3:ae:78:68:c7:d8:a1:90:ee:a8:f7:c1:66:3f:36:89:31:
         63:0d:81:df:4f:99:b3:7c:30:57:f5:3e:2a:f7:38:a4:23:bd:
         84:db:71:e4:87:d2:5a:ce:03:d0:62:57:78:a9:97:ef:9e:3c:
         fa:08:72:e8:7e:54:ab:d8:29:f3:9d:15:3d:70:28:cf:22:45:
         b4:79:0f:13:fe:c7:0b:d4:4c:64:c1:a9:de:c8:bd:09:60:33:
         2d:1e:8a:18:66:96:a7:ab:60:47:62:34:59:da:b1:83:71:8c:
         8e:5b:00:49:39:a9:9e:44:5b:18:48:f5:a0:d8:7e:d0:a8:01:
         40:de:3b:65:87:0c:44:84:f9:55:0c:da:b1:91:9e:3a:38:ec:
         3e:cd:c0:22:27:1e:ec:40:ad:ee:f1:f0:ff:ff:1e:10:ec:d0:
         4b:7e:2e:83:fb:83:6f:94:49:76:ec:ec:8c:11:57:3e:e4:90:
         14:49:f3:5a:a8:b3:e1:a0:01:01:d2:76:16:f0:51:96:b9:38:
         60:54:77:2e:e2:e6:3a:45:a8:da:b0:aa:3a:e3:65:2f:70:48:
         de:dc:03:16:75:6d:1e:45:dd:0f:b5:1d:15:3f:d7:7c:32:15:
         48:61:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:58:30 2024 by rpki-client on console-ams.rpki-client.org