Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c72b8-c6f7-499b-88e4-9061934dda93/1/ED5IxZ1W_qJz7UgkTYM5ZFF-tuE.mft
File:                     ED5IxZ1W_qJz7UgkTYM5ZFF-tuE.mft (raw, json)
Hash identifier:          pzudQdOzjtRkq3BUTQzJDaFSVmcYcAGwdriR4wOcR9Y=
Subject key identifier:   B8:AF:2C:20:1D:E9:B9:B2:42:8A:D5:EC:F0:47:3C:D6:A4:BA:5B:82
Authority key identifier: 10:3E:48:C5:9D:56:FE:A2:73:ED:48:24:4D:83:39:64:51:7E:B6:E1
Certificate issuer:       /CN=103e48c59d56fea273ed48244d833964517eb6e1
Certificate serial:       018F8749A6DBBF2C1E6AE129F43460D9C5B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ED5IxZ1W_qJz7UgkTYM5ZFF-tuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/3c72b8-c6f7-499b-88e4-9061934dda93/1/ED5IxZ1W_qJz7UgkTYM5ZFF-tuE.mft
Manifest number:          031D
Signing time:             Fri 17 May 2024 16:01:41 +0000
Manifest this update:     Fri 17 May 2024 16:01:41 +0000
Manifest next update:     Sat 18 May 2024 16:01:41 +0000
Files and hashes:         1: ED5IxZ1W_qJz7UgkTYM5ZFF-tuE.crl (hash: zIfgZ+l1zmGLIZHLBtt6SN2c/LnkHXzBxWmxQah//3E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/3c72b8-c6f7-499b-88e4-9061934dda93/1/ED5IxZ1W_qJz7UgkTYM5ZFF-tuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/3c72b8-c6f7-499b-88e4-9061934dda93/1/ED5IxZ1W_qJz7UgkTYM5ZFF-tuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ED5IxZ1W_qJz7UgkTYM5ZFF-tuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a6:db:bf:2c:1e:6a:e1:29:f4:34:60:d9:c5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103e48c59d56fea273ed48244d833964517eb6e1
        Validity
            Not Before: May 17 16:01:41 2024 GMT
            Not After : May 18 16:01:41 2024 GMT
        Subject: CN=b8af2c201de9b9b2428ad5ecf0473cd6a4ba5b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:14:43:3b:8d:a7:44:ee:e5:10:09:68:94:
                    f1:48:d2:62:07:70:7c:c2:29:5f:cd:a8:11:ae:a9:
                    fa:26:c6:76:75:c5:ba:cb:35:ec:b7:2f:47:46:9d:
                    1f:d4:c7:3d:dd:17:cb:52:86:0b:05:1a:3f:f0:e1:
                    9e:05:dd:7a:39:1e:b5:80:26:5f:b1:8b:b5:ae:b2:
                    ba:be:14:2d:7c:98:b4:35:cf:a4:df:1e:8f:d6:ba:
                    72:85:9f:30:3b:de:ae:af:3a:9a:40:fa:2b:4f:34:
                    ff:4c:6d:74:e1:52:d6:17:d9:1a:91:13:04:e6:4f:
                    32:e0:15:6f:28:6a:eb:f4:15:c0:c0:a6:dc:80:d0:
                    82:a7:74:1b:d7:15:63:56:8f:5e:8b:3a:fe:fc:56:
                    f2:75:28:b0:64:77:5f:df:59:8a:e3:16:dc:c1:01:
                    38:91:57:fa:39:ba:63:8d:de:e5:02:d7:d9:ea:71:
                    d2:19:03:fe:11:78:16:d9:7f:b1:c0:e5:65:f3:ca:
                    71:01:8c:90:f9:b3:56:71:ca:42:31:22:5c:26:bc:
                    f7:c5:d1:53:f4:f2:40:c4:22:b0:02:41:05:c6:82:
                    ac:76:1b:bb:f7:c7:3a:d3:cb:ec:20:88:51:d7:86:
                    cb:16:97:a5:a2:89:27:f7:53:df:0a:b5:c4:2e:08:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AF:2C:20:1D:E9:B9:B2:42:8A:D5:EC:F0:47:3C:D6:A4:BA:5B:82
            X509v3 Authority Key Identifier:
                keyid:10:3E:48:C5:9D:56:FE:A2:73:ED:48:24:4D:83:39:64:51:7E:B6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ED5IxZ1W_qJz7UgkTYM5ZFF-tuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c72b8-c6f7-499b-88e4-9061934dda93/1/ED5IxZ1W_qJz7UgkTYM5ZFF-tuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c72b8-c6f7-499b-88e4-9061934dda93/1/ED5IxZ1W_qJz7UgkTYM5ZFF-tuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:40:8e:03:8f:5d:60:36:63:b2:b7:23:c7:ec:8a:51:82:f2:
         e3:9a:c6:97:c8:cc:c3:53:df:ee:94:50:cb:3b:92:76:e7:fe:
         02:ea:34:9a:50:ce:ac:bd:53:2d:74:14:db:6c:9e:cd:33:c9:
         97:4f:01:cf:0c:c9:bd:0f:b1:4d:46:de:46:c4:c9:ac:29:51:
         d7:1f:c1:4e:e7:26:2c:bf:ba:8c:d9:f3:29:77:80:90:91:c9:
         93:5f:76:b1:4b:cf:50:37:90:33:fb:2b:b7:4b:77:26:84:23:
         49:1d:a2:99:86:fa:09:74:0e:40:59:15:49:70:81:8f:e6:7b:
         c4:f5:94:5f:64:56:04:20:e6:6c:88:3a:5b:25:03:1f:60:ee:
         f3:0b:11:13:b2:2f:9a:52:a5:9c:66:47:a6:cd:6d:73:03:e3:
         dd:2d:7e:76:b1:93:cb:64:c8:6e:b9:95:0b:61:1f:49:d0:01:
         83:b3:42:f5:7d:13:09:a0:c5:d9:87:60:94:5a:21:5c:54:56:
         9c:42:5d:5f:70:30:a3:10:72:25:fb:89:fc:a0:8b:2e:a6:ea:
         c9:55:f3:b5:6b:d9:8e:fd:4f:61:82:65:22:7c:b4:87:39:39:
         bf:31:9a:3a:b4:aa:87:f0:31:29:71:4b:9e:86:08:a7:8a:0c:
         42:89:61:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:04:28 2024 by rpki-client on console-ams.rpki-client.org