Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File:                     7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier:          D841KkN/JCDtmTeUeRxvGh8RwOQSW7nJ63I9ThuhHuY=
Subject key identifier:   FE:EE:99:48:E5:02:A9:69:8F:0D:04:A2:4B:AA:7C:47:7C:C9:18:FC
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer:       /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial:       018F478F26A558DA1FE1804F8CCDE2EBBC7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number:          1155
Signing time:             Sun 05 May 2024 07:01:54 +0000
Manifest this update:     Sun 05 May 2024 07:01:54 +0000
Manifest next update:     Mon 06 May 2024 07:01:54 +0000
Files and hashes:         1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: xkR1mkNVuKq5c0HSmw7SXQkFbVIybqtLsUXMLTmB1a4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:8f:26:a5:58:da:1f:e1:80:4f:8c:cd:e2:eb:bc:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
        Validity
            Not Before: May  5 07:01:54 2024 GMT
            Not After : May  6 07:01:54 2024 GMT
        Subject: CN=feee9948e502a9698f0d04a24baa7c477cc918fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:33:f8:ea:4f:4c:24:21:31:87:b4:77:72:
                    a3:40:35:89:72:87:54:85:ac:e9:81:64:51:f3:b6:
                    fc:43:a7:35:7f:b0:13:4e:ac:67:e6:e9:19:b1:c9:
                    9c:1b:bf:c1:ad:37:c8:59:6e:fa:71:3c:2e:e9:01:
                    6f:94:6c:73:90:b5:d5:a8:0a:59:a1:65:c9:51:50:
                    5d:aa:2f:8c:98:bc:d1:d8:a8:4e:c1:9f:99:51:19:
                    f7:86:b2:cf:45:4b:50:e2:a9:87:86:51:ac:d9:42:
                    c7:91:06:f7:15:dc:18:0d:f1:93:aa:d8:e0:ce:cc:
                    68:95:cd:e3:42:ed:06:1b:f1:b2:a0:b9:be:c9:76:
                    eb:4d:1d:47:2b:eb:cd:f1:24:48:ca:6e:b1:27:ac:
                    8e:d1:15:3b:cc:12:24:cd:94:04:2d:ac:6d:86:cf:
                    4b:e2:a2:a5:53:50:41:26:39:d9:35:87:3e:a6:8b:
                    b3:85:ff:dd:4c:ec:bc:b2:21:5f:43:ad:bc:58:dc:
                    ac:ff:0c:37:fa:26:cb:b8:bb:fc:73:58:d8:fb:10:
                    f6:25:18:18:99:16:fa:de:19:e4:27:64:e7:e2:c5:
                    5d:05:6b:d3:dc:2c:c5:eb:2b:42:4b:bf:c4:56:d5:
                    3b:d7:d4:b1:95:0d:c5:e3:77:d9:39:58:fe:dd:ef:
                    cf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EE:99:48:E5:02:A9:69:8F:0D:04:A2:4B:AA:7C:47:7C:C9:18:FC
            X509v3 Authority Key Identifier:
                keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:f1:8d:2c:5f:c2:bc:da:29:2a:4d:da:ef:e7:a5:0b:ce:31:
         ee:a0:d2:50:43:98:6f:d4:ef:aa:38:e5:1d:bd:2a:c2:1a:a1:
         89:ad:7d:f3:ca:86:b9:52:8b:a9:03:ec:e6:eb:1d:2d:de:69:
         36:ca:69:f2:a1:b4:46:c0:05:56:1b:03:f8:87:e5:eb:89:38:
         82:33:db:3c:17:65:b2:b5:df:1f:c0:38:12:29:e1:59:c3:fa:
         b4:f5:e9:5c:87:84:e4:ee:c7:7d:25:7f:d6:d6:f7:ef:87:ff:
         7f:71:59:bd:c1:99:35:21:60:10:0c:a5:5e:df:86:a4:b6:05:
         2e:9d:18:cc:51:ee:c3:45:0f:e4:ee:07:ea:ab:07:e8:ad:e2:
         c5:59:b3:b7:00:40:09:45:e0:a4:28:a3:e5:37:22:38:19:32:
         82:2c:3f:e3:65:c8:b3:a7:a6:12:d7:dc:04:72:27:54:29:30:
         16:27:27:9e:60:7d:84:ac:6f:c4:57:0e:9d:1c:a2:f0:09:cb:
         8b:03:e3:8c:b6:36:03:10:62:75:a6:a7:e5:42:8b:04:69:2a:
         2a:ff:b5:b3:22:ec:ca:a5:15:47:a2:4d:7a:a2:9e:ee:37:94:
         a2:c1:ef:7e:7e:8b:3c:50:bd:57:35:0f:70:b4:b8:17:95:b4:
         c2:e0:9a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:51:37 2024 by rpki-client on console-fra.rpki-client.org