Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File:                     _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier:          VOSVMgdKl7uHgo0r1LQLmZ3F1u9+/xj7McSoqFB1JeY=
Subject key identifier:   0A:CB:25:9D:1E:B2:5E:F6:E7:C6:85:FF:CD:85:4A:55:F2:ED:01:FB
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer:       /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial:       018F87ED56546BA084AFF6F4FEEA4A877957
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number:          0DF2
Signing time:             Fri 17 May 2024 19:00:29 +0000
Manifest this update:     Fri 17 May 2024 19:00:29 +0000
Manifest next update:     Sat 18 May 2024 19:00:29 +0000
Files and hashes:         1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: mDd7WuzJhvZ4I8xY2jjHCuemMsX3kSvoqANqPhApVOA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:56:54:6b:a0:84:af:f6:f4:fe:ea:4a:87:79:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
        Validity
            Not Before: May 17 19:00:29 2024 GMT
            Not After : May 18 19:00:29 2024 GMT
        Subject: CN=0acb259d1eb25ef6e7c685ffcd854a55f2ed01fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:e5:02:50:3b:c8:0d:32:2a:87:ed:5f:c3:
                    0b:84:51:00:e0:1c:2b:d9:b4:85:0f:6b:f6:21:8b:
                    66:a6:b8:37:dd:7d:50:09:fa:a8:dc:5b:a4:74:9d:
                    ad:52:20:79:9e:d5:de:32:bc:c4:8c:f2:7c:ed:a0:
                    34:a4:9b:bd:be:85:1f:59:bf:9d:32:2f:d5:35:cd:
                    b4:71:89:34:f9:7b:0d:c1:0b:b4:7d:f9:8e:a7:77:
                    27:14:e9:29:24:98:57:54:e5:c2:63:6c:7b:fc:a2:
                    91:1e:88:c4:ad:35:c9:4f:8c:0a:eb:ec:db:80:18:
                    51:9c:f5:33:c8:10:c2:5c:fc:34:09:ac:8e:e4:48:
                    25:6e:82:70:39:ca:55:59:d1:a7:3a:e3:c5:18:6f:
                    86:3b:7a:fe:2f:88:48:b6:36:54:77:5f:d2:e1:43:
                    3c:c2:62:1c:8c:3b:dd:c1:8a:90:49:4f:70:76:33:
                    2b:6a:05:3a:0b:6a:9c:75:34:62:53:f1:e2:92:e2:
                    72:81:2e:c0:80:4e:a5:4c:74:99:f8:f7:93:ed:e1:
                    cc:b1:29:de:51:e6:dc:e1:3b:ac:ce:ae:57:59:be:
                    cb:a8:56:02:fb:8e:4f:bb:f8:76:d7:b7:22:32:8b:
                    a3:3b:06:3a:6a:22:ff:c1:c5:6e:e8:3f:0e:59:d7:
                    2f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CB:25:9D:1E:B2:5E:F6:E7:C6:85:FF:CD:85:4A:55:F2:ED:01:FB
            X509v3 Authority Key Identifier:
                keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:34:27:74:d1:af:7b:30:4a:ea:4a:40:be:d7:c1:08:b9:90:
         af:ba:03:c3:3a:11:cb:ae:92:09:72:eb:a1:88:30:3d:b3:dd:
         26:42:12:7b:b2:40:31:11:b9:39:7b:c4:f8:a1:40:e2:9e:36:
         4b:35:64:f3:73:7b:32:2b:1b:b9:de:1f:44:46:eb:8a:e1:a5:
         b7:bc:ad:f1:25:3e:99:64:a6:2e:91:03:09:13:c9:d3:2a:04:
         60:df:5b:cc:67:b5:00:e1:7c:65:a1:5d:72:ac:1a:eb:fa:5b:
         f1:bc:1a:1e:c4:de:cc:e1:d4:9d:02:da:47:0a:61:eb:14:08:
         6e:63:12:b1:cd:37:31:ea:ad:2b:f0:9a:a7:15:87:f0:bb:ea:
         48:f6:82:a8:a5:0e:70:6d:27:dd:03:85:41:7b:54:33:86:f6:
         1a:78:c2:68:3a:ad:57:a7:cc:bb:bc:5c:3e:8e:4a:08:af:5c:
         cd:52:04:b4:dd:0f:c5:44:23:ab:0f:12:ad:8f:2d:1a:50:0b:
         b1:af:3e:df:69:1f:ec:61:2b:15:56:78:98:38:6c:66:5a:99:
         26:df:2c:fe:f5:9b:a5:0b:58:64:22:d5:55:ef:87:29:77:8f:
         1e:b0:3a:91:11:46:f4:8f:f7:54:e1:6a:62:2a:c3:be:9c:e4:
         dc:15:cd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:44 2024 by rpki-client on console-ams.rpki-client.org