Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File:                     Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier:          94n/a0cT0Srzmw3DEhRpBDfV1GBlaYIJP3zOH3PYb30=
Subject key identifier:   8A:4E:CF:3A:DF:BC:2B:91:B3:A5:77:2C:88:0C:D4:B2:CD:AC:6D:99
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer:       /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial:       018F3BF9F0DEB9F00189565A9AD49D36D583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number:          0F8E
Signing time:             Fri 03 May 2024 01:03:06 +0000
Manifest this update:     Fri 03 May 2024 01:03:06 +0000
Manifest next update:     Sat 04 May 2024 01:03:06 +0000
Files and hashes:         1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: wrdwmEtJqj737NZl6czCZPxh/IUggSzheQuX8oMRJB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:f0:de:b9:f0:01:89:56:5a:9a:d4:9d:36:d5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
        Validity
            Not Before: May  3 01:03:06 2024 GMT
            Not After : May  4 01:03:06 2024 GMT
        Subject: CN=8a4ecf3adfbc2b91b3a5772c880cd4b2cdac6d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:32:59:82:32:14:0f:3c:21:10:00:8a:17:
                    e9:69:4c:aa:73:f1:42:fa:0c:da:1d:62:76:77:53:
                    b8:06:98:bc:46:83:42:bd:71:5d:14:3f:a0:7a:a1:
                    09:63:68:83:e5:65:cf:02:54:66:70:1a:db:45:54:
                    1f:ff:0f:42:d3:7d:50:20:9b:73:24:b5:40:b0:47:
                    6c:71:21:71:f6:d6:31:a2:0b:54:e4:70:7e:be:c6:
                    87:b2:f7:5b:fe:2f:00:9f:41:a5:c1:55:d5:8b:88:
                    32:b7:59:ae:fd:af:86:fe:66:33:d8:7b:06:cb:6d:
                    61:71:47:1b:b5:87:7e:37:77:99:2a:50:6f:ee:c8:
                    30:34:e6:46:2c:81:b2:6c:69:1f:37:1c:d1:a0:9b:
                    de:e7:b8:3a:cd:85:23:a8:00:56:05:5d:ab:da:22:
                    73:5c:44:e3:2f:0f:08:35:b3:c2:6d:fa:cf:83:f3:
                    63:f3:80:75:d0:96:a8:6c:e4:56:d2:ea:28:5d:72:
                    6b:fd:c5:1d:2c:9f:85:44:48:e9:19:c4:00:88:f1:
                    e1:38:fb:1d:60:f0:90:b1:d5:da:d2:f3:cb:42:5f:
                    27:d9:98:15:2b:96:e7:8e:97:80:d6:5e:f9:fd:c1:
                    c3:01:25:30:a5:b9:c7:a9:b5:c2:e0:fc:dd:2e:41:
                    a4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4E:CF:3A:DF:BC:2B:91:B3:A5:77:2C:88:0C:D4:B2:CD:AC:6D:99
            X509v3 Authority Key Identifier:
                keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:de:4a:a1:96:db:8e:69:77:dc:c3:5b:d2:13:10:ed:a8:25:
         49:1e:5d:3b:3d:cd:1f:de:ea:46:82:df:6b:ea:a5:19:34:39:
         d5:55:eb:3c:02:8c:8e:0b:c9:73:30:a3:d8:10:ec:1f:49:c0:
         25:42:24:c4:00:7b:63:f9:58:b7:4c:a2:d0:98:ad:73:8e:85:
         67:85:2c:1b:3a:57:47:9a:9f:08:55:27:ba:f0:63:2e:48:37:
         26:05:04:80:ba:bc:90:f1:61:f5:e3:1a:f9:83:e8:05:30:2a:
         0b:36:09:66:39:5f:86:64:76:5e:55:de:e1:70:0c:94:be:2d:
         76:d9:63:a5:f8:fc:9c:0d:b3:55:ac:ee:22:15:df:71:c9:4b:
         33:3d:90:ad:41:5c:50:a9:ad:89:d9:fe:3d:ff:7f:6d:54:57:
         8b:15:6c:57:83:22:02:f8:0f:45:dc:6d:0d:2b:64:bd:f1:30:
         4a:3a:28:48:0b:58:28:7e:a9:92:98:fe:1a:a7:91:22:8c:52:
         c5:c7:9a:37:0a:a0:98:2f:7e:54:2b:9f:87:5e:cc:a8:2a:3b:
         c6:57:a8:9c:64:af:db:12:84:fa:b4:6b:7b:2b:a9:ee:02:44:
         c9:39:fe:34:55:31:b4:ba:b8:a1:ba:44:26:f9:c4:d6:82:ea:
         7a:51:de:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+fDeufABiVZamtSdNtWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOGNlMGE2YWJiOGVlNTBkNDRiM2JhZTQyZDRhMjU0OWZm
YjgyNDAwHhcNMjQwNTAzMDEwMzA2WhcNMjQwNTA0MDEwMzA2WjAzMTEwLwYDVQQD
Eyg4YTRlY2YzYWRmYmMyYjkxYjNhNTc3MmM4ODBjZDRiMmNkYWM2ZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW8yWYIyFA88IRAAihfpaUyqc/FC
+gzaHWJ2d1O4Bpi8RoNCvXFdFD+geqEJY2iD5WXPAlRmcBrbRVQf/w9C031QIJtz
JLVAsEdscSFx9tYxogtU5HB+vsaHsvdb/i8An0GlwVXVi4gyt1mu/a+G/mYz2HsG
y21hcUcbtYd+N3eZKlBv7sgwNOZGLIGybGkfNxzRoJve57g6zYUjqABWBV2r2iJz
XETjLw8INbPCbfrPg/Nj84B10JaobORW0uooXXJr/cUdLJ+FREjpGcQAiPHhOPsd
YPCQsdXa0vPLQl8n2ZgVK5bnjpeA1l75/cHDASUwpbnHqbXC4PzdLkGkdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpOzzrfvCuRs6V3LIgM1LLNrG2ZMB8GA1UdIwQY
MBaAFA6M4KaruO5Q1Es7rkLUolSf+4JAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAt
YzQ5OTc1NWEyNjg5LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAtYzQ5OTc1NWEyNjg5
LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWd5KoZbb
jml33MNb0hMQ7aglSR5dOz3NH97qRoLfa+qlGTQ51VXrPAKMjgvJczCj2BDsH0nA
JUIkxAB7Y/lYt0yi0Jitc46FZ4UsGzpXR5qfCFUnuvBjLkg3JgUEgLq8kPFh9eMa
+YPoBTAqCzYJZjlfhmR2XlXe4XAMlL4tdtljpfj8nA2zVazuIhXfcclLMz2QrUFc
UKmtidn+Pf9/bVRXixVsV4MiAvgPRdxtDStkvfEwSjooSAtYKH6pkpj+GqeRIoxS
xceaNwqgmC9+VCufh17MqCo7xleonGSv2xKE+rRreyup7gJEyTn+NFUxtLq4obpE
JvnE1oLqelHeSg==
-----END CERTIFICATE-----
Generated at Fri May 3 11:06:55 2024 by rpki-client on console-ams.rpki-client.org