Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
File:                     B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft (raw, json)
Hash identifier:          jK9mJQd+F3QiW/ybD4EJpPd2HGixBnez70b+ift33Dc=
Subject key identifier:   3C:52:8A:19:30:9C:4F:FB:1F:AC:B9:70:68:F8:49:75:A5:81:FF:0D
Authority key identifier: 07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
Certificate issuer:       /CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Certificate serial:       018F37093A6C36726A42620D4BFC630FA2F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
Manifest number:          114C
Signing time:             Thu 02 May 2024 02:01:42 +0000
Manifest this update:     Thu 02 May 2024 02:01:42 +0000
Manifest next update:     Fri 03 May 2024 02:01:42 +0000
Files and hashes:         1: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl (hash: RqwE8z0wFJo2voKR9Wo4J5cGEkTvuM6RZiXasScTiD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:09:3a:6c:36:72:6a:42:62:0d:4b:fc:63:0f:a2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
        Validity
            Not Before: May  2 02:01:42 2024 GMT
            Not After : May  3 02:01:42 2024 GMT
        Subject: CN=3c528a19309c4ffb1facb97068f84975a581ff0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:41:f4:1f:ff:9f:18:02:d7:ce:7f:82:71:69:
                    41:96:f4:b4:c2:bf:44:ef:97:27:ae:44:8e:05:19:
                    65:de:c3:2e:d3:08:20:b6:89:8a:58:63:01:bf:02:
                    ba:b0:cf:b7:26:69:37:f8:9f:54:e8:5b:71:4b:ff:
                    df:98:79:28:5d:26:84:6e:29:64:55:8e:96:ba:2f:
                    72:7b:27:54:ec:2f:87:bc:a1:01:73:d7:ea:8c:f1:
                    da:89:27:cb:a5:18:12:a5:bf:a9:3a:f3:9d:93:8b:
                    bc:a9:f5:69:81:26:5c:29:37:98:12:cb:49:2e:07:
                    fe:35:66:74:73:53:1b:e8:6b:bb:4d:13:23:a2:cf:
                    8e:9e:d6:c0:ee:3f:57:0d:f6:29:6b:2d:3d:21:fd:
                    3a:49:87:4d:e3:b2:d2:a4:80:86:8a:93:90:c6:fb:
                    c5:ca:74:1c:f5:f4:27:a1:ca:82:5b:e9:c5:23:f9:
                    d5:f1:a1:ba:d4:f3:0a:1a:4b:bf:cc:a2:95:38:05:
                    9c:d2:11:0b:f4:b8:06:86:1b:db:cd:f1:4e:04:1f:
                    f1:ec:ce:bc:0f:1b:a3:57:13:66:cd:09:f8:70:fc:
                    c0:b5:24:c4:a3:2e:2f:09:84:20:73:19:6c:bd:0f:
                    8e:f3:5f:ca:b5:8a:f7:da:fd:38:f0:50:33:29:40:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:52:8A:19:30:9C:4F:FB:1F:AC:B9:70:68:F8:49:75:A5:81:FF:0D
            X509v3 Authority Key Identifier:
                keyid:07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4e:ab:fe:53:ef:28:c9:2b:e6:52:8c:03:72:6c:aa:cd:4f:
         51:98:ef:ef:f2:32:d1:60:20:59:4a:bf:83:a1:17:f3:bc:ab:
         ad:c5:e2:81:eb:b8:2f:1b:35:64:00:99:8f:d6:a3:c2:54:fe:
         34:54:0d:57:2c:50:47:87:09:be:0f:85:69:ad:ba:fb:42:48:
         8a:2a:95:ab:de:75:90:e9:54:80:61:c8:61:9b:a5:ee:e8:1c:
         e7:14:34:fe:21:2f:7b:88:1c:4c:b5:72:ba:7b:48:bf:a8:2a:
         49:4e:a7:81:df:8b:fa:23:79:d4:81:9e:ee:22:32:da:16:91:
         22:8d:88:06:f5:4f:71:22:28:46:22:71:d0:cb:68:24:1a:f8:
         71:91:90:26:bd:31:34:49:33:cc:24:fe:0f:8d:bb:7c:42:bc:
         35:16:69:9a:6e:cc:54:24:aa:b2:00:f5:0f:f0:e2:63:99:62:
         7c:8a:d7:f0:3a:1a:1d:12:b4:e2:68:27:3b:eb:4c:eb:37:3a:
         f9:2c:53:bc:85:c1:6f:f2:c1:3a:44:67:85:6e:7e:1d:dc:ff:
         e1:0a:c4:25:4f:2d:2a:c3:08:68:be:00:75:14:e4:81:54:16:
         90:25:29:a6:6f:53:8e:e4:ee:18:93:ed:9b:97:61:fd:11:8c:
         c2:70:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:34:54 2024 by rpki-client on console-fra.rpki-client.org