Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File:                     cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier:          CZhHUAvsTwsPZNGgLaupfaBbZqA0mEK2q0dmRF2ptWY=
Subject key identifier:   DB:D9:12:04:BA:83:A1:8B:E3:8C:1D:AF:84:5A:C7:72:45:3B:11:56
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer:       /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial:       01936B22B389C3B6A83D2CA38E8B132EECD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number:          038D
Signing time:             Wed 27 Nov 2024 01:00:56 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:56 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:56 +0000
Files and hashes:         1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: ApwZLheF4pLw/7AzF13i6CB3gMI3wiqSesxaA2XJ/PU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:b3:89:c3:b6:a8:3d:2c:a3:8e:8b:13:2e:ec:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
        Validity
            Not Before: Nov 27 01:00:56 2024 GMT
            Not After : Nov 28 01:00:56 2024 GMT
        Subject: CN=dbd91204ba83a18be38c1daf845ac772453b1156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:10:41:e3:34:59:c2:8a:05:a8:50:4b:26:
                    85:a6:ab:de:66:b3:0b:69:d5:75:21:3d:a9:93:b3:
                    e2:ac:ab:46:51:89:d4:dc:9e:bd:16:5a:cb:9c:b6:
                    59:56:ea:de:59:c0:eb:ca:a7:b7:48:9a:7a:d7:60:
                    69:83:8e:03:4d:a8:6b:b6:6f:ad:41:80:80:3d:ba:
                    0f:ea:83:93:53:23:b9:0d:be:d4:28:8a:73:9d:f0:
                    56:ca:87:fe:13:51:c3:38:67:ac:69:be:7f:c3:cc:
                    21:1b:77:09:8a:cc:d5:5b:bd:cd:7e:6c:34:e6:8a:
                    8c:39:fb:3e:96:d8:9c:2d:8d:24:2a:c1:d2:c6:b8:
                    d6:d5:9e:ac:38:71:ac:c3:cb:49:2f:bf:7a:d4:53:
                    e0:2c:00:cb:cf:9c:3a:fd:15:bb:51:83:9b:72:75:
                    31:3d:46:ee:32:4d:ea:7e:bc:9d:33:44:1c:f3:1f:
                    0c:9a:b8:4b:98:8e:1c:c7:26:0d:ba:e3:0a:7d:33:
                    37:3e:2a:c5:c5:92:30:56:02:38:44:4e:1e:1a:92:
                    f1:81:1c:e5:3d:af:79:79:74:95:f2:56:47:74:68:
                    d9:6e:78:79:20:7b:3d:c4:3a:6c:5a:54:f9:b7:0d:
                    e9:ff:dd:7a:86:8e:7b:e9:86:24:94:5c:9f:b5:9d:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:12:04:BA:83:A1:8B:E3:8C:1D:AF:84:5A:C7:72:45:3B:11:56
            X509v3 Authority Key Identifier:
                keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ac:2c:12:5e:3f:c8:fd:9e:9a:1a:dd:ff:16:00:2d:bd:26:
         8f:1b:9e:8d:4a:61:71:be:3f:a8:fc:d4:86:fe:de:d7:73:4f:
         ff:7c:ef:d4:2e:54:9e:c0:65:f4:fe:4a:0a:b6:77:ad:37:e1:
         53:cc:1d:de:47:73:e7:a6:19:f0:a3:ae:25:f4:d5:e6:e6:7c:
         23:ec:6c:5b:5e:7f:9d:5f:63:52:8b:68:b9:66:73:b7:13:a3:
         7b:1c:c7:81:db:ff:b6:7f:df:56:f3:b0:27:f3:37:73:ab:26:
         fa:76:da:62:10:b8:47:9f:26:8a:18:c6:f0:c4:84:4e:e1:03:
         b0:5a:21:98:81:b7:26:5e:56:ed:61:be:8c:39:d3:62:b7:3e:
         64:3f:89:4f:d1:bc:16:60:05:db:81:5f:f3:3d:c5:85:7f:52:
         30:7b:09:10:de:c0:27:1a:96:2f:78:4c:1d:7b:20:c2:0a:69:
         32:63:71:fc:06:51:57:70:ca:d6:9b:59:ca:92:9f:bd:f0:bd:
         d9:84:a0:bd:84:c5:a7:3f:11:33:ae:7b:3f:06:05:7f:f1:cf:
         78:e8:f4:15:98:05:db:6b:ad:cb:51:ee:a9:23:e4:e8:03:51:
         b5:a3:13:0f:54:5a:e9:03:c7:59:c9:0b:55:aa:bf:55:7c:98:
         b8:6e:9e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:48:41 2024 by rpki-client on console-fra.rpki-client.org