Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
File:                     _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json)
Hash identifier:          NF+huBQeaat4PsSp+wpJmK2beQxfK3mTRNme6vCf3ro=
Subject key identifier:   38:D6:A4:49:3C:3E:66:C8:A8:FA:CF:53:39:4C:C0:3A:9E:16:2E:78
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Certificate issuer:       /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial:       018F88244F1B09DA0407C3BEDB3A98FE27E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 20:00:31 +0000
Manifest this update:     Fri 17 May 2024 20:00:31 +0000
Manifest next update:     Sat 18 May 2024 20:00:31 +0000
Files and hashes:         1: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: thsfN0uBJQcV7JOeNcLa89d7gqqTPMzRCS19EVq/pgY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:4f:1b:09:da:04:07:c3:be:db:3a:98:fe:27:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
        Validity
            Not Before: May 17 20:00:31 2024 GMT
            Not After : May 18 20:00:31 2024 GMT
        Subject: CN=38d6a4493c3e66c8a8facf53394cc03a9e162e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:24:c4:71:ee:c0:46:0a:03:52:b1:dd:21:
                    3b:fd:5f:7b:7e:51:61:ad:3a:62:fc:47:5c:c6:b3:
                    04:48:84:ae:f6:4f:4b:ff:e2:bc:3e:4c:fb:39:df:
                    f5:ef:f3:0f:76:b3:bb:25:8f:55:ed:f0:ea:32:8c:
                    09:79:12:4e:b5:ad:0d:fb:bf:65:3e:49:8f:b2:0e:
                    43:75:61:f9:c1:91:61:17:84:88:30:93:b7:22:e1:
                    55:d6:3e:d1:75:86:37:a3:f9:2b:f2:ab:5b:44:e2:
                    4f:a2:5b:ee:ac:27:a1:f5:9c:27:83:f1:29:78:54:
                    c9:31:ae:56:64:02:b6:d8:08:5a:4f:77:ef:f0:35:
                    fb:f9:4d:d1:f4:f3:b8:71:a7:09:54:a0:41:75:2b:
                    c1:8b:44:58:da:cf:13:72:80:a4:fd:d6:7c:c4:58:
                    5c:33:4a:f9:af:bb:3c:f6:df:2e:93:1a:8b:66:d5:
                    40:f3:4d:14:57:34:eb:6d:bf:0f:c8:5e:78:05:85:
                    84:67:e1:48:a2:b4:46:50:d2:4c:d0:2b:fc:62:50:
                    18:7e:c8:b7:af:32:9a:23:b1:22:07:aa:c5:81:e6:
                    c0:ed:4c:ee:48:06:ce:66:6c:91:f0:ac:45:4a:15:
                    3b:99:76:e5:f2:a5:02:85:ae:bb:ce:b4:d6:fe:95:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D6:A4:49:3C:3E:66:C8:A8:FA:CF:53:39:4C:C0:3A:9E:16:2E:78
            X509v3 Authority Key Identifier:
                keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c7:40:eb:98:db:39:c5:70:39:93:7b:c6:cc:99:6a:b9:a5:
         e0:34:8f:e1:41:33:e2:e9:a7:e9:99:5b:4e:5a:40:55:65:19:
         2b:27:fa:77:9b:b4:f4:9e:e3:56:d6:03:c7:94:28:9c:1c:72:
         31:8c:83:ff:97:95:af:20:fe:64:c5:cb:1c:a0:4c:b4:98:6e:
         30:bb:32:07:fa:fb:14:44:56:b1:41:2d:2f:b6:04:39:cf:83:
         22:6c:7d:c3:e1:ec:ae:58:4a:9f:d6:f6:24:da:c9:07:f9:a7:
         da:f0:5b:7b:73:f1:da:47:38:04:0c:29:e9:34:ef:31:41:bd:
         19:f7:79:a4:ec:1a:56:6b:f2:7a:4e:8b:91:29:44:e7:90:e6:
         e7:5d:a6:18:93:65:07:58:f5:e4:ed:18:b7:4f:35:70:fa:90:
         ff:ea:f9:5e:81:a7:b4:cd:d7:32:d6:18:30:1c:13:c1:d7:b8:
         d3:1d:6c:c0:4f:30:59:96:7e:4a:22:47:a6:5c:da:fc:d4:d0:
         cc:d3:2b:12:e7:0c:2a:06:05:f1:b7:ba:57:eb:0f:8f:a8:25:
         6f:f7:93:17:1e:d7:b5:f7:44:b9:2a:48:7e:e6:ae:10:6a:e6:
         0d:c9:22:ce:22:a7:b9:7f:a4:76:9f:e5:df:a1:e8:ec:db:eb:
         0e:63:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:49:17 2024 by rpki-client on console-ams.rpki-client.org