Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
File:                     1MiI65YKABkAwnleiq-iaPYC2EI.mft (raw, json)
Hash identifier:          g82ff2vUpXjbrVZGPkPvgKork0wgnTURWuDTb8QKUmY=
Subject key identifier:   C4:CF:1E:E5:D2:BB:9A:20:0D:77:E7:75:F2:2E:D3:E3:AD:AA:DC:D7
Authority key identifier: D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
Certificate issuer:       /CN=d4c888eb960a001900c2795e8aafa268f602d842
Certificate serial:       018F41C4022B7A9F83AF51E714FE9CDF0D5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
Manifest number:          0660
Signing time:             Sat 04 May 2024 04:01:55 +0000
Manifest this update:     Sat 04 May 2024 04:01:55 +0000
Manifest next update:     Sun 05 May 2024 04:01:55 +0000
Files and hashes:         1: 1MiI65YKABkAwnleiq-iaPYC2EI.crl (hash: Mbf7Hn4ajKF0ctLeovKjcR4HyuWKE0Zl1RTw62KDbCQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:02:2b:7a:9f:83:af:51:e7:14:fe:9c:df:0d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c888eb960a001900c2795e8aafa268f602d842
        Validity
            Not Before: May  4 04:01:55 2024 GMT
            Not After : May  5 04:01:55 2024 GMT
        Subject: CN=c4cf1ee5d2bb9a200d77e775f22ed3e3adaadcd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:1a:da:59:4b:4f:7a:e8:96:d7:9d:a8:53:
                    0d:7f:5c:31:02:ca:1d:d3:73:56:28:8b:95:2a:fe:
                    77:36:59:17:99:b5:c0:e5:25:87:97:1c:6b:f4:53:
                    55:14:57:b1:43:51:3e:9a:0c:17:55:b2:a2:f4:66:
                    1a:ff:3a:3b:78:2d:d7:cc:2c:77:a5:49:55:1e:e1:
                    5a:1c:55:80:7c:a4:d4:d2:3e:89:fb:10:fc:ba:59:
                    9c:4c:65:46:f0:a0:ae:9d:ce:bd:4a:7d:72:ff:ba:
                    f2:fa:1b:0a:5c:66:ca:e4:ee:5f:9f:aa:ab:e0:d5:
                    59:08:d3:4a:00:36:a2:0a:48:1a:d8:59:18:71:d4:
                    9a:ed:f7:24:25:6c:59:ba:9e:2a:8f:32:5a:20:6a:
                    21:16:43:bb:e0:22:f2:a9:bd:47:69:4a:32:ba:ba:
                    9c:ae:bc:5b:d2:e7:f5:3c:d9:8c:86:fe:f2:90:07:
                    73:70:0c:98:4e:8a:83:92:10:23:32:6c:2d:33:34:
                    f8:d3:74:a3:c1:fa:e3:4c:ca:e5:b6:86:33:ee:77:
                    ed:0c:47:f1:ee:06:1f:e2:6d:33:af:8c:18:ce:7e:
                    0d:6b:3d:d4:70:72:96:b8:7a:e4:0c:12:b4:73:4b:
                    4a:a8:b5:25:bd:3c:15:54:86:9c:a7:41:b3:69:d6:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CF:1E:E5:D2:BB:9A:20:0D:77:E7:75:F2:2E:D3:E3:AD:AA:DC:D7
            X509v3 Authority Key Identifier:
                keyid:D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:1d:f1:a6:54:4c:2c:e9:d3:93:69:4d:21:76:94:d8:16:23:
         e7:fb:e1:a2:91:78:32:23:ac:b7:b9:f6:71:61:92:29:17:df:
         92:6d:1e:62:b5:52:a1:3e:71:22:c7:5c:af:80:c2:ad:de:6c:
         06:37:f6:a0:ef:76:c3:0c:65:07:a5:28:46:b9:ef:b9:c9:50:
         c2:7b:6b:fb:3a:66:fd:26:d3:0f:f1:d0:56:be:5a:1f:94:b4:
         90:c2:54:33:cc:b6:fc:9d:30:a2:db:57:e6:13:d4:28:ed:77:
         91:f3:c3:cd:08:19:c0:82:dd:f6:4f:e3:00:10:9b:6d:82:bb:
         56:ed:62:3c:25:43:34:43:63:59:13:10:a8:6a:4d:54:7f:4d:
         2a:ba:a6:8f:58:47:bb:59:8b:d1:ba:44:3c:6f:cc:19:b9:37:
         71:9b:12:95:5a:15:da:7d:59:d5:31:3b:d6:3a:07:24:ec:aa:
         f6:32:7f:db:d3:2d:a1:a2:ae:c1:b1:37:6a:c2:18:a7:a9:b4:
         c1:75:ec:68:b6:c5:78:42:22:ed:8c:a8:6c:c1:ab:bc:03:6e:
         30:36:27:75:1d:f6:3c:51:d6:f5:ef:53:d0:67:5a:c2:9c:4d:
         ad:17:09:5a:7c:ff:79:4f:42:f2:0c:ed:01:50:10:32:24:7e:
         a1:59:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:56:56 2024 by rpki-client on console-fra.rpki-client.org