Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
File:                     OFt-lPpg22hRcc8TabHO-24g8zQ.mft (raw, json)
Hash identifier:          cQ+5ZpoKDoOi3tz9qtaC5fva2dpnw6SrlGwCFM5tQzM=
Subject key identifier:   55:0F:ED:94:28:0B:FD:74:C5:2A:49:DE:8A:1B:49:5E:04:47:3D:6A
Authority key identifier: 38:5B:7E:94:FA:60:DB:68:51:71:CF:13:69:B1:CE:FB:6E:20:F3:34
Certificate issuer:       /CN=385b7e94fa60db685171cf1369b1cefb6e20f334
Certificate serial:       018F8937B79F6A9D0113E2E13D7E158C3634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
Manifest number:          CC
Signing time:             Sat 18 May 2024 01:01:21 +0000
Manifest this update:     Sat 18 May 2024 01:01:21 +0000
Manifest next update:     Sun 19 May 2024 01:01:21 +0000
Files and hashes:         1: OFt-lPpg22hRcc8TabHO-24g8zQ.crl (hash: 0BNIj2QUKu42DzL66xgMi1jtStpQT/0ciBtP/AEZ2jQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:b7:9f:6a:9d:01:13:e2:e1:3d:7e:15:8c:36:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385b7e94fa60db685171cf1369b1cefb6e20f334
        Validity
            Not Before: May 18 01:01:21 2024 GMT
            Not After : May 19 01:01:21 2024 GMT
        Subject: CN=550fed94280bfd74c52a49de8a1b495e04473d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:69:d5:5c:f6:13:d3:74:d3:b4:4f:50:0a:b4:
                    a4:df:14:e3:3f:1a:a4:bb:e1:7c:1d:a2:d3:55:f1:
                    0d:e6:e4:f2:50:38:bf:89:e7:af:57:6a:30:85:be:
                    87:35:fd:79:e0:a4:b0:af:f1:6d:c5:e3:25:b5:9f:
                    0f:d4:15:83:ba:80:e6:21:aa:64:11:c1:a5:1d:de:
                    ec:ab:91:bd:0e:d6:da:13:0f:0f:6c:32:9c:b0:c2:
                    72:51:65:cf:a6:e9:cf:44:96:e9:b7:55:90:9a:5f:
                    06:f3:95:2d:3e:d7:3a:f5:58:ce:ac:fa:d1:c3:05:
                    1e:39:99:58:ff:65:8e:3a:9d:d4:6a:10:4d:35:49:
                    aa:a8:1d:47:c4:42:4a:fe:7a:7c:fe:b5:c1:28:06:
                    48:f5:38:5a:91:6c:72:e7:06:91:41:25:31:fa:49:
                    e4:3e:a5:e3:db:8b:c9:80:71:70:ab:13:1b:f4:ce:
                    c4:b5:1a:ad:cf:f7:75:50:8b:4e:d1:bf:dc:96:ab:
                    98:f6:31:b9:c9:ea:b9:df:04:c6:68:e7:56:6d:a8:
                    24:4d:5c:7d:dc:4b:16:43:f0:34:ae:da:59:a2:a8:
                    35:48:31:12:c8:5f:68:f5:a9:0f:42:1a:a7:e2:78:
                    ec:a0:55:ae:e8:06:fe:0e:c4:ed:c6:2c:96:cd:18:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0F:ED:94:28:0B:FD:74:C5:2A:49:DE:8A:1B:49:5E:04:47:3D:6A
            X509v3 Authority Key Identifier:
                keyid:38:5B:7E:94:FA:60:DB:68:51:71:CF:13:69:B1:CE:FB:6E:20:F3:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:34:ce:d9:1f:58:f9:47:28:2e:24:0f:b5:e0:03:72:2c:b6:
         22:74:d7:43:21:e1:76:d3:81:22:ca:3d:9a:8d:4a:fc:5c:50:
         68:8c:7f:24:f4:74:bc:11:c0:4f:43:4b:40:b3:3e:09:e4:71:
         5a:42:4b:97:d4:70:a3:06:92:5c:09:50:a1:f6:60:9a:5c:49:
         84:10:a9:51:50:29:e0:db:a6:8d:46:14:f1:d5:00:55:0b:6a:
         d3:f5:e2:4b:fd:74:68:66:4f:bd:7c:89:92:0e:46:c9:e2:84:
         3f:7d:9e:4b:6f:e4:1d:e7:8b:cc:98:f6:f2:3b:86:a8:3a:0f:
         8d:26:79:82:e8:9c:9f:fb:69:7c:b0:34:bc:c8:87:bb:1b:88:
         67:3d:47:12:04:fc:a2:9a:5c:72:65:aa:7b:0b:0c:d5:0a:8f:
         7a:f6:a4:65:37:b8:d0:96:a1:54:6b:2d:dd:6a:3d:98:cd:72:
         2a:f1:49:e8:7f:b2:7c:e4:51:73:d4:f2:03:e8:64:5e:9a:ec:
         35:57:1e:e4:7f:cf:5d:c7:ab:2d:4e:dd:69:98:97:e7:b0:e8:
         ce:b3:ae:ad:02:07:83:e8:5a:f1:e4:6f:4f:e3:19:02:3c:f1:
         c0:c0:c7:4c:59:0f:ce:f6:28:45:01:ff:c8:a1:94:3e:b0:89:
         09:77:03:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:43 2024 by rpki-client on console-fra.rpki-client.org