Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
File:                     sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json)
Hash identifier:          50XZ6ELgDlC4IbW4hAIM2TvisqPT3PR0JlVbi0KAI4U=
Subject key identifier:   BD:2B:7C:CF:43:6E:E2:13:E9:0F:BF:5D:45:55:E9:10:2A:2C:41:48
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Certificate issuer:       /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial:       018F874B5953D89E84AC5BEF06675A93C82E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:03:33 +0000
Manifest this update:     Fri 17 May 2024 16:03:33 +0000
Manifest next update:     Sat 18 May 2024 16:03:33 +0000
Files and hashes:         1: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: DxVq1lbqSvGK612E2/RoQV2zQJsiNlRFP13P4bB3ldY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:59:53:d8:9e:84:ac:5b:ef:06:67:5a:93:c8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
        Validity
            Not Before: May 17 16:03:33 2024 GMT
            Not After : May 18 16:03:33 2024 GMT
        Subject: CN=bd2b7ccf436ee213e90fbf5d4555e9102a2c4148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:a3:ff:4e:88:87:14:72:15:dd:eb:ac:f5:
                    4b:d2:a2:fb:69:93:83:7c:55:5a:1c:9c:7f:ed:9f:
                    74:25:d7:95:14:0d:c1:1b:7a:68:72:3e:3d:89:03:
                    8f:88:5e:4f:7e:ed:52:ec:b2:5c:68:4b:a4:c4:1a:
                    2e:b4:1b:f1:dd:dc:91:72:95:ce:5e:26:6d:cb:86:
                    2d:b6:df:20:76:dd:f8:44:0a:46:72:15:18:05:46:
                    ea:d0:a7:e0:53:ae:b4:a8:37:3c:4c:9d:98:3b:a0:
                    44:96:b2:d2:78:d4:b3:5f:2c:16:ed:ea:c5:bd:45:
                    9b:fc:95:85:7f:45:ad:0e:5d:a2:0e:70:5c:e0:55:
                    dc:ca:a8:ba:11:cc:76:4a:ed:83:33:72:1e:60:85:
                    e0:e2:8c:ab:7a:b0:da:9a:36:cf:68:ef:9f:82:9a:
                    f1:6a:b0:41:ec:5f:f3:4a:41:d0:6b:8c:5c:cf:ca:
                    1e:58:55:a5:72:1b:33:64:fc:af:51:34:a0:0f:11:
                    e2:62:43:78:f0:ff:cf:71:ef:b4:fa:1b:02:b3:09:
                    3d:cc:b1:06:92:7c:ba:f1:c9:c9:cb:76:6e:06:44:
                    a7:d9:8b:7e:17:22:aa:d9:09:2d:33:da:ec:b1:ea:
                    23:c8:31:ae:4d:9a:1d:a8:33:35:bf:12:54:13:73:
                    14:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2B:7C:CF:43:6E:E2:13:E9:0F:BF:5D:45:55:E9:10:2A:2C:41:48
            X509v3 Authority Key Identifier:
                keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:22:49:3a:8b:53:4f:4c:bb:18:60:e7:6e:92:89:05:5e:ca:
         f9:ff:fb:0a:ea:d5:d7:05:5a:d8:f1:29:d8:bf:af:26:b3:0e:
         5c:dd:c9:e6:c3:85:4f:da:e9:a7:e0:74:50:00:ba:2c:a0:9d:
         af:32:2e:25:e9:61:1f:49:cd:6a:49:1c:de:94:0c:5b:68:f4:
         fd:13:84:21:14:b2:7c:5b:b7:bc:5d:94:cf:9b:fd:fd:88:88:
         1a:04:f1:13:67:6d:8e:da:92:bb:f4:d8:c4:f7:3d:c0:da:4d:
         76:1e:a2:ba:b5:51:1b:1c:72:03:c2:fd:f1:71:c7:c6:bd:d0:
         0c:a5:4b:fb:dc:9d:d2:74:ab:4c:0c:39:53:ce:ea:b9:ee:de:
         ab:2f:57:07:91:53:c8:84:b2:9c:65:36:29:80:d8:a1:41:c2:
         49:96:8e:b8:75:61:d8:6c:51:26:f1:da:64:4a:63:f4:5b:27:
         7b:17:e1:f1:c7:fa:8c:2a:31:b3:4c:ee:5f:d6:d6:7c:b9:33:
         e8:c5:96:9e:af:f4:cb:fa:78:fe:95:97:28:49:f5:32:e0:eb:
         7a:5e:80:dc:7b:e3:47:56:3d:61:86:65:ca:95:56:89:06:e8:
         a2:13:8d:ef:55:ef:ee:54:54:08:f0:40:c5:de:8c:cb:1e:f9:
         b6:0a:69:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:54:44 2024 by rpki-client on console-ams.rpki-client.org