Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File:                     0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier:          olNcttpOchyolT+WlZZTq3bwXgAgIVF9qXs1UpggwiM=
Subject key identifier:   68:8F:D3:1A:F7:C3:F5:95:A8:92:AC:34:2E:57:3E:6B:63:0D:C7:58
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer:       /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial:       018F5400A08BD5E168BEB46299F3340144D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number:          1158
Signing time:             Tue 07 May 2024 17:01:18 +0000
Manifest this update:     Tue 07 May 2024 17:01:18 +0000
Manifest next update:     Wed 08 May 2024 17:01:18 +0000
Files and hashes:         1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: wVmH+57g/CBWfgGGR9qMtoxQyiZixWYjXCvhhCKxnE4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 17:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:00:a0:8b:d5:e1:68:be:b4:62:99:f3:34:01:44:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
        Validity
            Not Before: May  7 17:01:18 2024 GMT
            Not After : May  8 17:01:18 2024 GMT
        Subject: CN=688fd31af7c3f595a892ac342e573e6b630dc758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:f7:5f:29:6f:f6:49:5d:81:f0:78:f0:db:
                    f4:99:89:f8:d7:a8:89:92:3d:2d:ea:f5:00:22:ef:
                    c7:d2:7f:16:80:b6:36:40:d3:fe:44:e6:10:e0:1d:
                    9e:80:9e:21:82:18:c9:f2:d0:e7:0d:12:4a:f6:51:
                    10:e3:b8:83:92:ac:8b:6f:bb:b4:ba:0a:7a:f6:86:
                    50:41:1b:bc:05:c8:84:d0:ab:54:e2:38:05:be:22:
                    4e:80:25:68:25:24:b5:22:6d:b5:a8:20:01:a6:67:
                    4c:e1:01:79:b9:4c:01:0a:56:6f:1a:10:44:b9:c1:
                    c3:c9:a6:b1:5d:ec:3b:8e:e6:01:fa:00:08:79:97:
                    02:17:87:c4:44:c6:92:9f:29:2c:a9:67:5c:44:cd:
                    be:37:68:0f:a1:03:bc:e7:4e:42:9e:df:0f:d7:8b:
                    5e:14:93:f9:1c:1e:5e:9f:ad:2e:3d:f9:6b:24:f2:
                    3d:ea:9d:84:45:7d:4b:7a:15:0f:65:0c:01:7c:e9:
                    e9:b3:77:a5:1a:da:06:f2:30:2a:94:f6:c5:17:84:
                    00:1a:07:a9:4b:4d:86:e3:84:a4:52:01:d2:4c:f1:
                    56:de:c6:32:78:19:37:0a:a4:b8:54:fe:ee:9a:37:
                    87:09:f2:b2:6d:27:e7:bd:66:0e:c9:56:30:78:52:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8F:D3:1A:F7:C3:F5:95:A8:92:AC:34:2E:57:3E:6B:63:0D:C7:58
            X509v3 Authority Key Identifier:
                keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:40:30:05:06:a3:da:8b:ca:96:bc:2a:08:0c:a6:10:ce:
         fc:c2:c8:4f:fd:67:da:41:d0:8a:80:33:f0:f4:f9:a5:9a:d9:
         d7:2f:bc:f6:bb:bc:f0:ab:22:fe:cc:24:32:fe:2c:3e:32:fe:
         aa:41:ed:c1:df:d1:54:9c:9a:cc:dc:9e:ea:32:de:a7:2c:6d:
         42:a1:2b:6d:69:f2:e2:11:bf:60:fb:bc:c9:dd:50:37:64:7f:
         23:c8:fd:15:c8:a4:0c:ea:97:92:46:20:62:b7:21:f3:8f:1f:
         a8:31:29:df:e0:2c:bd:5a:85:61:34:d7:62:5a:7d:a3:a0:be:
         36:d6:c6:e6:c2:08:6f:82:be:3b:5b:40:c8:7d:ad:e9:eb:41:
         bf:bc:9b:5c:29:ba:aa:eb:73:f3:91:64:9f:89:cc:c8:34:fa:
         8d:2e:42:dd:d0:05:ee:e9:f3:91:8b:e7:88:d5:97:d6:5b:59:
         c4:36:5d:39:36:66:ef:16:74:e6:72:4a:7b:8e:0e:56:cb:ab:
         7a:ca:23:7f:b2:b2:5d:06:93:51:e8:5c:19:41:c3:bf:c1:3f:
         64:1a:e3:31:92:f6:7e:c3:d9:e2:c1:a9:ad:80:a7:82:5c:c9:
         63:a5:2d:b8:b6:af:51:19:68:ac:45:00:4f:70:79:54:68:61:
         cb:6c:08:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:36:07 2024 by rpki-client on console-ams.rpki-client.org