Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/d9a68f-ddc8-4ec9-83b2-635734ba1aec/1/COoyG_SzPcYmiCnolJ-A5VOnuUQ.mft
File:                     COoyG_SzPcYmiCnolJ-A5VOnuUQ.mft (raw, json)
Hash identifier:          RnLdHhJsl0Ulpheb9CPb6KpVIk+Mon2HE2vYSsmbvgE=
Subject key identifier:   48:E5:63:EA:2C:29:25:65:27:00:25:D6:43:75:3F:A6:79:2A:B4:6F
Authority key identifier: 08:EA:32:1B:F4:B3:3D:C6:26:88:29:E8:94:9F:80:E5:53:A7:B9:44
Certificate issuer:       /CN=08ea321bf4b33dc6268829e8949f80e553a7b944
Certificate serial:       018F41C373D5693522751E820E629117C01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COoyG_SzPcYmiCnolJ-A5VOnuUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/d9a68f-ddc8-4ec9-83b2-635734ba1aec/1/COoyG_SzPcYmiCnolJ-A5VOnuUQ.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 04:01:19 +0000
Manifest this update:     Sat 04 May 2024 04:01:19 +0000
Manifest next update:     Sun 05 May 2024 04:01:19 +0000
Files and hashes:         1: COoyG_SzPcYmiCnolJ-A5VOnuUQ.crl (hash: 1gd23lBlDpDIO0wLHlJUDScIFA637Who8IYG9SK+Iso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/d9a68f-ddc8-4ec9-83b2-635734ba1aec/1/COoyG_SzPcYmiCnolJ-A5VOnuUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/d9a68f-ddc8-4ec9-83b2-635734ba1aec/1/COoyG_SzPcYmiCnolJ-A5VOnuUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/COoyG_SzPcYmiCnolJ-A5VOnuUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:73:d5:69:35:22:75:1e:82:0e:62:91:17:c0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08ea321bf4b33dc6268829e8949f80e553a7b944
        Validity
            Not Before: May  4 04:01:19 2024 GMT
            Not After : May  5 04:01:19 2024 GMT
        Subject: CN=48e563ea2c292565270025d643753fa6792ab46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:25:99:43:e7:c7:83:92:8d:af:64:d7:4e:
                    15:cf:cc:9d:6a:da:48:35:4a:40:0b:c8:54:15:07:
                    f5:c8:ba:79:52:d8:11:ee:d9:7e:42:5e:d0:e2:c4:
                    5c:2d:dc:5e:7b:40:b9:11:73:4a:4a:77:86:f9:10:
                    9d:8c:d8:2e:c3:01:8a:65:3a:5a:d8:70:d6:dc:35:
                    31:ff:fc:5a:1c:3c:f0:53:88:bf:e5:6c:e3:0c:94:
                    7c:90:77:be:9b:f1:bc:7d:7c:e5:13:f7:05:0f:a3:
                    5f:f3:f7:c6:8f:37:91:95:71:d3:9d:de:7f:c7:af:
                    b6:44:78:23:03:a3:a7:0d:ec:fd:cf:c8:f6:5c:3d:
                    c9:37:22:ea:bd:0c:c7:75:7a:ca:28:e2:f4:2c:44:
                    5d:9c:e6:d4:37:70:07:05:bd:6e:da:be:eb:3f:28:
                    49:bf:d6:8d:aa:30:4b:a8:24:f7:ec:76:5c:f4:04:
                    89:bd:3f:1e:ae:0d:5f:53:ea:07:25:41:f8:40:c7:
                    c3:97:b4:b9:8a:8e:a7:c9:3f:86:26:86:85:58:8c:
                    47:5d:80:3f:1c:44:93:5b:c7:87:f3:47:b0:ee:49:
                    70:6f:e4:1b:0e:1c:6c:68:34:88:0d:f3:08:5a:82:
                    86:ef:42:6d:2d:3b:35:31:ae:cd:ee:50:23:b7:09:
                    c8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E5:63:EA:2C:29:25:65:27:00:25:D6:43:75:3F:A6:79:2A:B4:6F
            X509v3 Authority Key Identifier:
                keyid:08:EA:32:1B:F4:B3:3D:C6:26:88:29:E8:94:9F:80:E5:53:A7:B9:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COoyG_SzPcYmiCnolJ-A5VOnuUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d9a68f-ddc8-4ec9-83b2-635734ba1aec/1/COoyG_SzPcYmiCnolJ-A5VOnuUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d9a68f-ddc8-4ec9-83b2-635734ba1aec/1/COoyG_SzPcYmiCnolJ-A5VOnuUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:21:da:e1:50:18:3f:a3:59:64:c2:11:30:4f:36:94:a1:a2:
         8c:b6:11:60:f1:a8:bf:8c:e0:5b:72:71:08:e2:82:cc:42:03:
         02:3d:c2:bd:90:6d:c3:a8:1a:f4:4e:75:6f:40:e1:ba:63:86:
         86:ad:7b:7c:94:b2:f0:2b:40:87:12:2b:5d:db:3a:41:da:87:
         fb:fb:16:8d:c6:cb:54:4d:e6:f3:5f:83:e6:11:6a:0f:74:68:
         de:91:88:0a:e7:a6:c3:14:e2:61:04:74:c4:14:99:f0:c9:ac:
         ca:63:34:03:ec:59:eb:3f:0c:f3:d3:04:aa:e5:5c:b5:41:f6:
         8f:54:54:aa:fb:83:2d:47:c9:6d:df:99:30:a0:21:90:8a:d3:
         fa:2c:04:87:54:1b:6f:4c:da:ec:18:51:4f:b3:16:5d:21:0d:
         97:03:c2:df:34:5e:8e:4f:43:a4:39:c3:be:17:26:17:57:92:
         27:ff:28:26:b2:ff:f6:ab:40:ab:60:d1:03:47:ad:72:b4:23:
         c7:67:a7:29:b0:82:ca:f4:28:56:fb:8c:50:0d:d4:09:bc:2f:
         3f:e7:b0:13:01:fd:44:b9:19:2c:5c:ea:16:68:7e:74:e1:b5:
         f3:f2:bd:cb:2e:f3:09:0b:3f:f9:78:59:e1:25:14:2d:3c:9b:
         8c:f7:b0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:36:19 2024 by rpki-client on console-ams.rpki-client.org