Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
File:                     vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json)
Hash identifier:          Tro1JRGRbQq71LAlGmcsWYhIDFDYf79d46FzKlS6qaI=
Subject key identifier:   BF:67:78:8D:D9:D3:73:B7:16:ED:A8:47:3E:77:BD:34:FE:1A:C6:3D
Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
Certificate issuer:       /CN=bcc7519d62882ef4672fa21276625727a2fbe061
Certificate serial:       018F8936D76C63E0E02D49C48E5481ED97B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
Manifest number:          09DE
Signing time:             Sat 18 May 2024 01:00:23 +0000
Manifest this update:     Sat 18 May 2024 01:00:23 +0000
Manifest next update:     Sun 19 May 2024 01:00:23 +0000
Files and hashes:         1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: 9LXAP5NyRLsSCN5X/wtVorQsZbGtumgUExtgUipSuL4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:d7:6c:63:e0:e0:2d:49:c4:8e:54:81:ed:97:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061
        Validity
            Not Before: May 18 01:00:23 2024 GMT
            Not After : May 19 01:00:23 2024 GMT
        Subject: CN=bf67788dd9d373b716eda8473e77bd34fe1ac63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:25:12:1e:c6:a1:ac:f2:46:d6:e9:dd:d6:
                    f6:d1:8f:2e:c4:77:96:69:65:a4:77:dd:c5:4f:9f:
                    4f:dc:62:a1:ee:26:fc:78:36:cd:79:c5:59:18:06:
                    c4:ee:21:d7:56:0a:d3:25:5d:3b:37:d4:26:bc:01:
                    ba:18:be:43:5c:d3:a5:15:57:79:4c:36:14:c8:29:
                    22:53:81:71:06:3c:f7:fe:29:a8:c4:0f:7d:36:e3:
                    a8:d1:8a:61:9b:2d:8c:58:a0:49:ec:d3:51:6c:73:
                    0b:d1:d7:1e:ee:c1:fe:2d:dd:f6:df:c2:ce:a2:20:
                    51:fc:db:5d:de:96:56:74:d4:14:73:42:91:fd:b4:
                    8d:0a:7b:7c:2a:f0:c7:03:23:6e:d0:4c:df:91:c6:
                    e2:37:83:bb:2a:17:45:34:8b:1a:8a:22:54:73:c3:
                    c3:39:3e:83:64:6b:d2:a7:f6:18:ae:53:91:fa:c1:
                    65:ad:e1:e0:b4:8e:ac:7a:8f:b0:5e:62:6f:da:61:
                    7e:71:83:2a:4d:6f:6b:33:a0:be:1b:f0:2b:45:84:
                    6b:54:56:8b:3f:97:c4:1e:e1:27:37:41:8f:97:12:
                    19:7e:34:ca:24:d3:60:db:ed:b3:2d:a3:55:b7:2d:
                    c5:55:56:01:d8:1c:db:8d:35:5b:78:f7:2e:b1:38:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:67:78:8D:D9:D3:73:B7:16:ED:A8:47:3E:77:BD:34:FE:1A:C6:3D
            X509v3 Authority Key Identifier:
                keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a9:4c:f5:44:30:20:27:56:83:5b:01:73:d1:0d:83:12:88:
         08:b1:33:d8:ae:f8:2f:99:3e:f4:57:60:7c:70:40:db:5b:44:
         f8:63:d1:d3:cc:4a:81:4e:90:61:bd:be:c4:a5:a8:05:97:cc:
         70:76:59:e5:8e:25:e2:b6:17:d7:ed:d3:b9:1e:85:f7:15:8d:
         b8:a2:00:1e:36:60:64:77:60:c3:fe:af:10:f7:76:05:80:44:
         3d:73:47:dd:e4:cd:49:30:17:28:7d:2f:c1:5f:a1:64:23:b1:
         27:23:bd:0d:9b:40:6e:29:3e:10:1b:bb:ce:b7:4f:c1:63:b0:
         b8:71:d0:10:a0:d9:27:1f:d0:e4:3e:d3:1a:c0:b9:b9:fa:5b:
         5b:5a:f5:51:4a:5e:a2:75:bd:f5:72:60:6e:3f:cb:ab:fe:4d:
         46:61:74:94:d6:6e:52:f6:0f:77:13:00:a0:d9:f3:35:78:38:
         f7:89:88:15:ba:2a:94:f9:85:87:ae:ca:bc:2b:da:72:ae:94:
         d5:53:7a:55:ad:e8:82:86:64:73:bd:92:62:4e:4d:cb:c4:1b:
         f2:73:9b:59:d6:8c:78:c4:f0:e0:e6:fd:c2:d7:b0:ba:28:82:
         51:68:7e:2c:77:15:06:7a:45:ca:77:38:71:d3:09:04:24:e0:
         25:fd:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:59:53 2024 by rpki-client on console-fra.rpki-client.org