Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
File:                     0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft (raw, json)
Hash identifier:          rfDY55J6M8v2L5xIuki8V3eOTuZqMJKlYYiAz05OqFQ=
Subject key identifier:   36:F9:87:39:B2:D6:E5:0D:F8:CD:DC:2B:C8:DC:FF:61:BE:B8:37:51
Authority key identifier: D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
Certificate issuer:       /CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Certificate serial:       018F4DFED0260164FD2FAEF5C0E10EFD6540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
Manifest number:          1096
Signing time:             Mon 06 May 2024 13:01:36 +0000
Manifest this update:     Mon 06 May 2024 13:01:36 +0000
Manifest next update:     Tue 07 May 2024 13:01:36 +0000
Files and hashes:         1: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl (hash: l73hN53o3sLBmFou/aMiGkvj73ScSWxlWK8OnZS9r90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:fe:d0:26:01:64:fd:2f:ae:f5:c0:e1:0e:fd:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
        Validity
            Not Before: May  6 13:01:36 2024 GMT
            Not After : May  7 13:01:36 2024 GMT
        Subject: CN=36f98739b2d6e50df8cddc2bc8dcff61beb83751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:53:7e:92:f5:c4:f3:72:8a:3b:4f:65:aa:
                    e9:e9:b6:1b:32:41:31:5c:14:12:cc:13:25:fb:86:
                    6e:28:8d:ae:8f:4f:7a:5a:29:bf:c5:6f:c9:e2:e2:
                    d9:cc:c7:2a:d1:d4:4b:d7:85:86:93:b8:da:34:5c:
                    d2:be:44:53:0b:4d:1f:bf:47:d7:8d:32:7d:8f:28:
                    81:12:36:93:3a:7f:ad:6f:97:f0:49:87:31:7e:4e:
                    0f:07:97:a8:b5:65:e4:98:b1:cd:4e:56:37:51:dc:
                    7f:7e:6c:a6:20:10:62:cc:14:d6:84:5e:20:e8:fc:
                    40:26:06:a7:a9:ab:48:d9:e6:27:0f:8f:5c:d4:6d:
                    68:d8:a2:8d:bd:95:48:73:17:83:5b:d4:d2:62:6c:
                    51:89:86:47:6f:9b:89:75:c8:1f:ff:13:68:b9:e8:
                    68:de:85:66:7c:9c:33:50:ad:19:ff:d5:87:c9:84:
                    85:1e:4b:1a:0d:1b:3c:82:47:03:8b:47:98:dc:88:
                    10:c7:ff:6a:35:61:59:e8:ef:67:6e:78:1c:46:96:
                    51:9c:a3:48:d9:d1:1f:72:ad:af:c5:2f:19:0d:95:
                    51:7e:f3:d7:f2:f4:9e:5c:07:ae:df:4b:88:e6:4d:
                    9a:6a:54:99:8f:06:5f:b2:7f:75:13:83:e9:de:2d:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F9:87:39:B2:D6:E5:0D:F8:CD:DC:2B:C8:DC:FF:61:BE:B8:37:51
            X509v3 Authority Key Identifier:
                keyid:D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0f:0f:70:78:1d:18:0b:59:b7:7f:30:27:ed:43:d4:d2:40:
         f1:70:59:73:d3:56:81:ec:64:f7:b5:95:2d:02:e3:f5:c2:62:
         59:89:15:9a:38:01:8e:7e:09:c5:1b:82:83:a9:54:2e:78:80:
         ba:67:50:de:78:6a:eb:5b:8e:fa:b3:9b:32:b1:da:f2:e5:bd:
         fe:eb:6f:06:c5:8e:2c:82:d7:e0:bf:f0:95:a5:6a:88:00:18:
         74:2b:54:17:1a:fa:4b:c4:5a:a7:f6:89:95:3c:ce:24:02:f7:
         d1:65:4e:c5:71:95:d3:40:e7:a2:52:82:98:99:e3:8e:a0:88:
         c8:68:5e:89:25:39:4a:44:59:2d:ef:d7:b2:f9:06:87:ec:d9:
         47:47:44:28:3c:11:bf:79:87:eb:93:44:26:2a:cf:6b:76:e6:
         7f:61:41:31:2e:44:9a:b6:2c:df:84:15:d2:23:b5:df:69:69:
         6c:c4:40:cb:77:83:d3:f3:fd:33:fb:38:be:87:35:f2:4f:d5:
         58:6f:42:06:9c:81:8e:8c:c3:a3:ec:51:83:6a:9d:18:92:e0:
         47:0b:55:13:e1:bc:52:33:34:d8:bb:e1:3a:4d:6a:da:05:fe:
         22:73:e6:50:af:cb:8d:77:55:30:66:00:a5:8a:ef:a6:13:52:
         e6:7f:0d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:03:49 2024 by rpki-client on console-fra.rpki-client.org