Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
File:                     OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft (raw, json)
Hash identifier:          hPGknqAKeJBIsVtQ+HByB5JSw/iWx+wqv/EU9A6p4bU=
Subject key identifier:   A8:EB:1D:61:1B:8A:87:E1:F6:37:63:EF:08:1F:5F:7C:36:18:85:A8
Authority key identifier: 3A:BC:62:47:EE:0C:AE:C3:65:A8:02:2F:5F:8C:6F:EC:CC:A5:71:0D
Certificate issuer:       /CN=3abc6247ee0caec365a8022f5f8c6feccca5710d
Certificate serial:       018F87494C886556DAD3D4A71FB701D4392D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OrxiR-4MrsNlqAIvX4xv7MylcQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
Manifest number:          0A56
Signing time:             Fri 17 May 2024 16:01:18 +0000
Manifest this update:     Fri 17 May 2024 16:01:18 +0000
Manifest next update:     Sat 18 May 2024 16:01:18 +0000
Files and hashes:         1: OrxiR-4MrsNlqAIvX4xv7MylcQ0.crl (hash: U8Yb9WC07ezHlGK+7ZHAO2z3WCBPeNtleyQud2xXm4U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OrxiR-4MrsNlqAIvX4xv7MylcQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:4c:88:65:56:da:d3:d4:a7:1f:b7:01:d4:39:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3abc6247ee0caec365a8022f5f8c6feccca5710d
        Validity
            Not Before: May 17 16:01:18 2024 GMT
            Not After : May 18 16:01:18 2024 GMT
        Subject: CN=a8eb1d611b8a87e1f63763ef081f5f7c361885a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:0f:a6:64:ff:5b:ee:50:2d:12:1d:60:1b:
                    dc:7a:85:89:45:00:eb:5e:58:fa:42:56:48:76:ad:
                    96:da:0b:78:4f:d9:e7:d2:63:37:32:b7:9f:77:62:
                    d1:19:b9:4c:63:83:f4:9e:46:12:7b:06:5e:39:1c:
                    a8:de:27:30:55:4c:b0:33:c8:ee:62:19:44:4c:cc:
                    1a:e3:3d:20:7b:34:1f:bd:0f:eb:79:a7:6a:af:d7:
                    73:d2:7d:2d:41:54:8f:0a:5b:4b:2a:8a:ca:d5:64:
                    75:4e:15:20:04:42:b0:b1:20:49:ee:bd:33:b7:4f:
                    18:c8:53:29:38:4b:76:1e:bd:3e:63:b1:81:a6:7a:
                    06:f7:dc:05:52:91:43:26:5a:ce:eb:bc:a6:76:9d:
                    21:3c:e6:b3:79:c7:89:85:b4:85:36:64:23:4b:da:
                    0d:e9:0d:b3:35:3a:57:59:15:d9:63:b1:29:53:c4:
                    b5:e8:f2:89:fb:4b:ed:cf:6f:69:49:fa:1a:39:49:
                    ca:ee:1f:83:fb:1f:c7:84:fb:6a:28:66:48:83:27:
                    46:5e:d2:01:8a:7a:a2:19:91:05:53:be:5d:79:ab:
                    25:35:0f:9a:89:de:c2:e1:7e:e9:ad:c3:92:73:24:
                    94:1a:65:fd:d8:b1:a9:67:0a:4e:9d:d7:df:26:e4:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EB:1D:61:1B:8A:87:E1:F6:37:63:EF:08:1F:5F:7C:36:18:85:A8
            X509v3 Authority Key Identifier:
                keyid:3A:BC:62:47:EE:0C:AE:C3:65:A8:02:2F:5F:8C:6F:EC:CC:A5:71:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OrxiR-4MrsNlqAIvX4xv7MylcQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/633abb-2c3d-4dd3-80eb-b8cf649de32c/1/OrxiR-4MrsNlqAIvX4xv7MylcQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:10:c3:aa:7b:22:8d:48:dc:12:22:30:20:53:f8:25:81:89:
         fe:fa:a4:e4:5d:74:a3:4d:ab:bc:73:76:a7:50:7d:26:e4:56:
         2c:8d:3d:ce:b2:aa:97:bf:13:c4:d6:db:38:04:13:fa:ed:4e:
         46:11:43:96:9a:a2:f7:f8:e6:8b:3c:ef:30:7d:48:3e:d9:b0:
         5c:f3:f7:26:41:72:96:de:1a:04:99:43:79:2f:82:b3:fc:07:
         55:54:55:bf:f1:76:fa:c4:7b:19:83:e2:72:05:d8:8a:04:de:
         51:e1:55:a9:36:16:e6:af:a2:9a:ab:44:fa:c9:71:d4:8e:87:
         3a:1e:d9:b9:8c:69:74:67:49:9f:03:20:7a:f8:4a:f6:41:c4:
         5c:a5:bd:d5:38:a7:f1:ed:b6:ad:c9:9a:35:ab:8d:10:ba:bf:
         33:1c:0e:b5:ac:b1:d3:49:ca:60:63:49:e7:78:52:22:26:7b:
         d8:f5:52:ef:01:6c:df:84:ac:87:d1:ee:33:c5:47:2c:9f:dd:
         93:d3:10:7e:c4:c4:40:1c:ed:00:63:d7:f6:a3:5a:74:1a:b3:
         6c:52:b3:7c:40:9c:bc:ab:b6:85:80:a7:33:06:61:f8:5b:01:
         7e:fa:de:34:36:d1:01:32:1f:54:ea:de:82:90:2d:b2:a8:b7:
         51:88:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:03:20 2024 by rpki-client on console-ams.rpki-client.org