Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File:                     11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier:          ly4Tc9lQf5JESUOnY9soC8/zWuS3xJbJHiV/2VxYLBg=
Subject key identifier:   7D:DB:4F:57:9E:F0:47:68:36:C9:6F:BF:52:89:7D:B0:DD:1A:C6:91
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer:       /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial:       018F4AC660247074DBC9367AB4907089644A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number:          1156
Signing time:             Sun 05 May 2024 22:01:05 +0000
Manifest this update:     Sun 05 May 2024 22:01:05 +0000
Manifest next update:     Mon 06 May 2024 22:01:05 +0000
Files and hashes:         1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: 1F2Gl9xpDWU+Yj1BegBAep87JFG9YRGQ8YsNG2LNLmQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:c6:60:24:70:74:db:c9:36:7a:b4:90:70:89:64:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
        Validity
            Not Before: May  5 22:01:05 2024 GMT
            Not After : May  6 22:01:05 2024 GMT
        Subject: CN=7ddb4f579ef0476836c96fbf52897db0dd1ac691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:92:ff:01:5c:18:80:a5:84:95:4d:0e:6e:
                    a4:8c:a2:9a:42:45:a8:0e:93:9f:d6:09:5a:fa:1f:
                    5e:f1:29:78:7f:ff:e6:f3:37:53:50:34:e9:0a:16:
                    67:6d:bc:5b:f0:8e:25:f9:de:02:fe:fc:9b:40:15:
                    7a:89:de:40:4e:4e:06:cf:29:90:8d:cb:f9:ac:6d:
                    af:aa:fb:c0:20:53:00:c7:75:84:91:46:9a:dd:c0:
                    18:19:98:60:dd:c6:6e:23:7e:f1:c6:f6:56:7f:ec:
                    30:82:ed:ca:29:ec:ba:4a:da:f1:27:9c:15:48:f9:
                    36:3a:9a:c5:eb:5d:3d:ee:0b:21:fc:48:4f:31:90:
                    eb:fd:d4:7a:0c:08:44:12:94:9f:5b:63:5d:0e:83:
                    ad:c7:17:01:a4:ee:c1:91:e9:b6:0c:b3:24:c5:91:
                    78:38:43:01:01:70:8a:89:36:cd:e8:fd:11:70:f6:
                    4f:e6:37:2d:83:88:80:07:5c:4f:1c:74:3c:3a:06:
                    49:d8:e5:b4:b3:5a:86:46:6a:2f:fc:d2:4a:f1:f0:
                    61:72:38:d7:b9:ef:3e:d7:a7:89:91:53:7f:36:fa:
                    7b:9f:cf:43:87:51:68:b7:c5:c2:87:e9:ef:8c:6d:
                    ab:66:9a:5c:91:1f:58:dc:79:d7:fd:15:e1:7e:4f:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DB:4F:57:9E:F0:47:68:36:C9:6F:BF:52:89:7D:B0:DD:1A:C6:91
            X509v3 Authority Key Identifier:
                keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:78:c4:00:17:93:6f:2c:68:5a:3f:9e:a2:62:fe:ba:b2:50:
         52:5a:3b:54:91:cc:6e:d0:70:04:38:4a:a5:e8:07:e0:20:49:
         30:36:95:85:df:eb:ed:91:06:09:89:6a:f8:c0:e9:28:1a:3d:
         24:60:20:2f:5b:ff:84:a6:0d:0e:91:a2:fc:7c:99:43:e2:b1:
         e6:74:4d:98:1c:e4:b4:ca:9d:f2:df:c6:08:a2:65:ff:d3:00:
         5a:0e:50:24:3a:31:0b:c3:dd:c2:f8:09:f3:77:7c:16:a2:66:
         62:6d:3c:6d:4a:1e:51:f4:4d:86:9e:f2:2b:f5:93:2e:8d:31:
         4e:4e:05:d8:88:b7:15:7a:6e:01:e1:4e:61:d3:12:30:95:19:
         f6:b4:04:62:9c:e2:83:3e:e0:4b:56:ae:3e:7c:30:d7:27:8c:
         02:47:05:88:cc:0e:ca:d1:21:d9:12:bc:b5:07:61:83:77:32:
         82:91:8c:e7:06:80:5a:a7:e8:6c:e7:bb:03:d5:4e:cc:45:14:
         cc:af:de:3e:6a:f1:3e:0b:ac:61:3b:e7:85:90:ed:b4:41:e5:
         65:00:01:3b:59:86:b8:95:22:b4:0e:eb:be:14:e5:c2:7b:71:
         99:e1:28:03:3f:9d:61:61:f1:b2:8e:17:fd:9e:64:be:96:c2:
         4c:79:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:10:57 2024 by rpki-client on console-fra.rpki-client.org