Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File:                     DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier:          6KfNY2xuEJYOeYFELWQxjy9nZQqkG77+09Fq17oed8U=
Subject key identifier:   F4:CE:8A:86:A1:8E:E6:95:27:FC:DA:CD:29:B5:FE:F5:9B:A9:24:15
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer:       /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial:       018F381BBD694505D91BA16B3BEE9DF49B62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number:          114C
Signing time:             Thu 02 May 2024 07:01:32 +0000
Manifest this update:     Thu 02 May 2024 07:01:32 +0000
Manifest next update:     Fri 03 May 2024 07:01:32 +0000
Files and hashes:         1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: /VL3AtP/855v7A0Jp1BkFdQ2FFUfHPx6yGaOH1SiNVc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:bd:69:45:05:d9:1b:a1:6b:3b:ee:9d:f4:9b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
        Validity
            Not Before: May  2 07:01:32 2024 GMT
            Not After : May  3 07:01:32 2024 GMT
        Subject: CN=f4ce8a86a18ee69527fcdacd29b5fef59ba92415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:c9:ac:46:5b:9a:c5:e5:95:14:6a:c1:bb:
                    e1:66:15:d3:a5:40:5f:b9:ab:ad:d7:35:4f:cf:76:
                    02:4a:6a:dc:70:13:15:0d:76:a1:e6:f0:7d:c0:da:
                    73:c3:93:ba:fc:f0:92:68:ac:2d:27:c8:90:4d:ad:
                    f0:3c:78:78:32:d8:ce:e6:e9:8b:1f:9b:23:95:bb:
                    ec:76:b4:62:b7:59:d3:28:e2:55:a9:56:01:a0:5d:
                    67:28:66:30:a7:5a:0c:8a:1f:b2:fd:e6:d0:5e:9e:
                    a2:1c:51:76:1e:37:38:ba:67:73:fe:2c:65:1f:a1:
                    33:58:b2:82:98:f5:3f:da:83:bd:68:af:eb:e8:16:
                    2a:db:27:32:db:8e:ee:49:9b:03:e1:1f:b2:04:72:
                    da:1f:bc:02:d4:87:c9:7f:f4:8e:83:30:05:57:03:
                    e3:63:61:cd:71:86:e7:b9:8b:29:89:3a:e7:e9:52:
                    57:29:01:67:09:87:db:a8:6d:3f:c7:11:8f:2b:9d:
                    f8:a6:57:ba:45:a1:51:13:5e:2b:17:cd:b3:96:19:
                    cb:c5:75:2f:2d:bb:13:0c:ea:39:6b:ec:56:93:92:
                    e2:bd:01:0b:39:70:f1:e7:95:a6:26:f4:98:6a:55:
                    b3:e6:82:a3:91:68:83:ae:2c:2f:e7:ac:2b:f7:6c:
                    11:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CE:8A:86:A1:8E:E6:95:27:FC:DA:CD:29:B5:FE:F5:9B:A9:24:15
            X509v3 Authority Key Identifier:
                keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f4:13:56:81:7e:61:ff:37:7c:43:b2:ab:b1:56:d7:34:0d:
         df:49:ae:3b:cb:db:b2:83:26:29:ab:de:5f:27:70:90:09:bb:
         56:71:c5:e8:ef:56:1b:bd:c9:35:03:ed:cb:1c:b6:05:42:3e:
         de:dc:d4:29:45:53:d7:68:d3:59:8f:b2:6f:8f:e6:9e:ac:52:
         5d:47:85:64:47:8e:5f:54:52:95:27:f9:4a:9a:ea:0d:67:37:
         4b:f1:0b:d6:f1:59:39:ae:46:bc:a6:61:3b:42:aa:ea:b6:64:
         52:67:a1:94:26:64:1e:ef:8f:5e:74:40:39:d9:eb:3b:07:34:
         74:40:bc:70:3e:d8:09:fa:43:b1:53:63:9c:c8:f3:38:fc:07:
         2d:bc:4d:26:31:01:70:b2:95:81:0e:1c:e6:10:76:24:d8:e7:
         e4:b4:9f:81:80:60:25:ea:00:93:1a:2f:be:c3:aa:e3:32:6c:
         ee:79:d2:68:2c:34:94:7c:3e:4a:ed:ce:36:09:29:65:2f:7d:
         2f:24:d3:c2:5b:33:fe:62:67:a9:52:85:04:7f:54:c8:32:83:
         64:d2:7e:61:8e:82:9f:8e:d4:51:c7:9a:e0:3a:a4:d9:88:23:
         44:d5:63:e3:ef:66:6f:66:3b:95:6b:2b:6e:91:1c:83:a5:fd:
         6e:82:a0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:20:46 2024 by rpki-client on console-fra.rpki-client.org