Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
File:                     ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft (raw, json)
Hash identifier:          XHXp6BoJkjYxSyPB3uKrzMBcRunrVy9rnKZix+pFitY=
Subject key identifier:   CB:6F:D3:D2:90:F0:2C:53:4D:2D:22:2B:ED:E0:38:2F:9C:94:32:16
Authority key identifier: 10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
Certificate issuer:       /CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Certificate serial:       018F4F4852F6D24DAF11E11216DB176B2429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
Manifest number:          0F75
Signing time:             Mon 06 May 2024 19:01:30 +0000
Manifest this update:     Mon 06 May 2024 19:01:30 +0000
Manifest next update:     Tue 07 May 2024 19:01:30 +0000
Files and hashes:         1: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl (hash: dk4AeoJud4Q3QKVrQ+gjhGGCt59voYsY4DnJQsAvpnY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:48:52:f6:d2:4d:af:11:e1:12:16:db:17:6b:24:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
        Validity
            Not Before: May  6 19:01:30 2024 GMT
            Not After : May  7 19:01:30 2024 GMT
        Subject: CN=cb6fd3d290f02c534d2d222bede0382f9c943216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:14:aa:5b:3b:d0:fa:c9:98:79:1e:25:d3:49:
                    b5:f4:0c:bf:c6:46:6f:46:f2:d0:cd:c2:00:cb:88:
                    98:04:0c:cb:0f:e9:0e:61:99:eb:74:ad:6c:18:44:
                    28:be:44:69:00:24:dd:78:b3:d4:9d:e4:f3:bd:c6:
                    82:de:3e:ae:2a:9e:4e:d2:cd:39:24:b5:5c:02:f9:
                    49:ed:52:a3:94:16:ba:e2:73:fd:5c:21:6f:ef:ac:
                    99:52:70:6e:90:d0:3e:af:04:21:2d:09:b5:bc:e2:
                    9f:b0:5f:ba:8a:e2:1b:98:63:5e:82:77:ce:89:d2:
                    13:1e:93:09:35:6e:79:62:57:a6:c6:5b:ed:da:7c:
                    50:61:b3:53:13:74:65:9e:76:7e:f6:45:e1:fc:13:
                    1e:2d:d9:4f:f9:38:a8:4e:e0:98:70:4a:5a:09:4d:
                    52:d9:1b:9d:b0:16:36:97:16:3c:18:59:12:bc:2a:
                    b6:66:f6:10:05:7d:8b:39:2a:20:cb:df:e1:34:5e:
                    32:6f:d7:70:43:37:3a:ad:52:f6:5e:a4:c5:a7:60:
                    66:15:a2:b2:bb:2b:d9:2d:a8:3c:e6:e6:d5:20:25:
                    37:4f:5a:71:31:1b:e5:1c:29:e6:e2:43:da:c1:c4:
                    84:d6:d5:cd:59:45:96:04:7e:2c:d8:f4:50:9e:28:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6F:D3:D2:90:F0:2C:53:4D:2D:22:2B:ED:E0:38:2F:9C:94:32:16
            X509v3 Authority Key Identifier:
                keyid:10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:45:a7:fb:18:2a:41:06:9e:6c:b8:61:97:60:de:7b:1d:
         b3:df:3e:55:ce:5b:08:b6:35:35:e4:1e:db:60:26:88:f9:0d:
         44:2c:2a:19:ec:b1:56:3e:03:5a:20:62:72:f9:62:3c:43:61:
         03:db:7a:df:dd:03:a9:e6:10:6d:1f:f3:d2:b2:58:f1:4c:97:
         f4:fd:ac:fe:8b:ef:8a:e1:d1:02:f4:6e:ce:0c:6d:32:85:31:
         56:17:7f:a1:c2:13:5f:08:39:61:b0:ea:42:fe:3a:78:f0:6e:
         c3:10:6d:b0:93:66:54:81:e9:56:2a:71:ef:d6:5d:20:d5:e1:
         db:ab:9d:d5:52:4e:bf:ec:48:a2:e3:97:ae:74:32:29:51:57:
         df:02:5e:66:3b:75:c4:5d:60:29:a7:59:e0:71:39:20:7d:17:
         8e:60:f3:22:e9:7e:91:c7:4d:af:32:49:78:66:59:d2:96:30:
         26:81:8c:fc:94:16:a8:39:ca:26:2c:fd:7d:95:44:ef:25:bd:
         45:3a:65:9d:60:fd:63:f7:ab:c4:4a:9e:81:16:66:e8:7d:f2:
         da:df:c4:19:a0:8b:78:8c:8c:0d:24:da:29:43:23:01:df:e1:
         92:5c:b2:f8:cc:57:f3:14:bd:93:54:02:95:67:4f:dd:27:2f:
         ce:f2:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:07:18 2024 by rpki-client on console-ams.rpki-client.org