Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
File:                     QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft (raw, json)
Hash identifier:          TTaYGbAscALotqhDjMj97fS817/7TlmixJy+kz1B4Ps=
Subject key identifier:   DD:2B:38:C0:0F:88:A2:14:C3:4B:97:98:A5:D4:55:34:E1:53:B3:2D
Authority key identifier: 40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
Certificate issuer:       /CN=4036a64f1a066babb8beb864e695fa997692dd48
Certificate serial:       018F874A50B5E6110E96A768F2AB0849B448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
Manifest number:          0BD2
Signing time:             Fri 17 May 2024 16:02:25 +0000
Manifest this update:     Fri 17 May 2024 16:02:25 +0000
Manifest next update:     Sat 18 May 2024 16:02:25 +0000
Files and hashes:         1: QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl (hash: VVHA01xu+CZTt4n4tnvOTzRy5nDK3o0nKlCO19gB3RE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:50:b5:e6:11:0e:96:a7:68:f2:ab:08:49:b4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4036a64f1a066babb8beb864e695fa997692dd48
        Validity
            Not Before: May 17 16:02:25 2024 GMT
            Not After : May 18 16:02:25 2024 GMT
        Subject: CN=dd2b38c00f88a214c34b9798a5d45534e153b32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:71:e8:f6:73:83:0c:82:9d:e3:32:a0:0d:
                    31:33:6c:34:f0:76:37:60:d4:71:1e:7e:02:40:e4:
                    42:00:88:cf:e2:39:af:fe:63:76:1a:b6:8f:da:5e:
                    06:4d:43:78:96:b8:2c:25:9d:e1:b0:0e:62:27:a3:
                    50:0d:d5:d7:42:54:6c:b7:58:f9:95:0e:89:67:40:
                    6b:d8:2e:02:e0:3a:1b:9d:c2:df:96:b0:6a:4f:c4:
                    48:60:6c:94:3f:a7:11:16:15:65:16:14:35:4b:d7:
                    af:b9:b2:61:50:6f:95:55:48:92:66:32:b8:37:43:
                    ab:e0:a4:2d:cb:f5:bb:46:16:2a:1a:3d:08:14:38:
                    c5:92:31:47:9b:6c:e7:db:c1:ad:a0:9b:71:47:27:
                    d5:d4:05:ec:30:be:b3:10:65:f6:26:e0:3b:19:59:
                    88:c3:48:10:c2:07:a0:5b:5f:b6:8b:54:45:d8:3f:
                    40:2b:96:5e:9b:5f:4f:21:f2:69:a3:9f:57:83:d5:
                    02:b5:4d:82:9c:08:cf:b6:bb:7a:77:db:5c:5f:be:
                    c6:30:e7:97:60:f3:2c:60:0b:da:34:99:da:08:e0:
                    36:20:a8:cb:f6:7c:67:6d:53:63:9b:28:29:69:3e:
                    94:6f:fe:d1:e7:f3:56:06:2d:a8:38:7c:1d:43:75:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2B:38:C0:0F:88:A2:14:C3:4B:97:98:A5:D4:55:34:E1:53:B3:2D
            X509v3 Authority Key Identifier:
                keyid:40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a4:ea:3a:d8:5e:a3:ed:30:9f:4c:ea:e7:9c:31:24:a4:84:
         28:ba:14:c5:f7:00:19:55:de:a2:ea:b0:30:3c:59:d4:07:0d:
         40:52:5b:e7:70:34:64:8d:13:e6:c8:dc:f8:69:2c:9a:7b:ba:
         9e:8c:75:23:c7:74:76:e7:f6:ef:61:58:eb:c0:f1:72:bb:48:
         b0:21:48:c7:7d:22:c4:15:3a:5e:74:83:43:55:8c:13:87:8b:
         90:26:fe:14:5e:5b:df:0d:9f:28:04:a1:9a:5c:8b:30:90:23:
         8a:e4:88:d1:6b:e8:ea:b7:ff:55:56:16:e7:6c:a3:1a:8a:da:
         8d:07:93:4d:f7:2e:e7:91:69:19:ac:87:f8:64:d2:57:53:00:
         0a:8d:72:52:55:cd:b4:fe:2b:c7:3d:54:8e:1c:9f:01:4b:08:
         e3:c2:e7:f7:8a:62:5f:96:ee:e7:d9:ef:e2:75:6e:16:8b:17:
         37:b8:31:e1:bf:19:56:48:a8:0a:38:e9:d3:93:d7:95:90:4c:
         91:4f:d5:41:2a:5e:06:c6:17:2c:c5:51:2c:ab:73:59:36:a3:
         fa:d5:db:b3:32:a0:42:fe:91:31:54:33:0c:6b:8b:f9:33:f2:
         ba:59:ad:9a:0c:53:7c:6c:7a:92:a9:b4:b1:06:da:c4:a8:57:
         b8:78:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:30:57 2024 by rpki-client on console-fra.rpki-client.org