Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
File:                     cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json)
Hash identifier:          W1cz6ZI2EWo3T3A9EKA3lbt+TF4jn9YfRBCuR7xr3KQ=
Subject key identifier:   85:D3:39:4B:C8:47:2D:C9:73:32:8B:E3:52:D3:43:C7:04:69:06:2A
Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
Certificate issuer:       /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Certificate serial:       018F86A428B30622ECDD91049C713DE1ACD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
Manifest number:          0DFD
Signing time:             Fri 17 May 2024 13:00:56 +0000
Manifest this update:     Fri 17 May 2024 13:00:56 +0000
Manifest next update:     Sat 18 May 2024 13:00:56 +0000
Files and hashes:         1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: +N+eGctTqH9o+gD5w+bSre9Ok8fbB4W8iatMl3sgrUU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:28:b3:06:22:ec:dd:91:04:9c:71:3d:e1:ac:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
        Validity
            Not Before: May 17 13:00:56 2024 GMT
            Not After : May 18 13:00:56 2024 GMT
        Subject: CN=85d3394bc8472dc973328be352d343c70469062a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:1e:bd:2d:86:fe:fc:08:b7:36:17:f0:a2:
                    45:2c:36:8a:6b:be:be:69:62:8f:ea:99:8d:cd:f2:
                    65:93:9e:4d:d1:5c:ab:b2:ad:3e:61:10:94:da:8e:
                    2a:56:0c:ff:c1:41:b9:5c:80:96:14:32:0a:23:38:
                    21:ba:5d:42:e8:4d:70:7e:71:1a:04:44:5c:60:b6:
                    8d:e2:02:c6:81:e5:33:3f:42:e0:e7:3f:99:a5:f0:
                    7f:f3:36:54:c0:49:1a:db:ab:37:c6:8e:2f:14:8d:
                    a3:34:14:59:e6:4f:91:61:a5:30:6f:f6:58:bb:4c:
                    29:d3:36:f9:1c:10:d6:fa:7e:f4:35:dd:a9:e8:08:
                    bb:2b:bf:24:b8:28:6e:2d:65:95:1d:ff:47:3c:b7:
                    30:5f:22:8d:8c:06:f8:d3:fa:02:5f:17:9d:74:8b:
                    d2:16:d4:8a:15:cb:61:a3:14:21:b2:3c:9f:15:36:
                    bb:7f:82:af:8b:30:a9:f9:a0:98:db:a8:96:d2:2c:
                    f9:1c:c0:44:6d:95:94:f5:51:33:65:88:6f:fd:7c:
                    fa:4d:cb:a1:9e:2b:0e:39:c4:76:bb:c8:86:65:c5:
                    df:7e:cd:41:54:ef:a2:20:08:bd:e8:c4:3a:45:3a:
                    da:a1:91:19:ff:50:da:1d:61:dc:88:9c:47:44:c4:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D3:39:4B:C8:47:2D:C9:73:32:8B:E3:52:D3:43:C7:04:69:06:2A
            X509v3 Authority Key Identifier:
                keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:80:d6:4a:bf:d3:63:bd:f8:4c:12:5b:c9:21:11:0e:b5:3e:
         66:6f:2c:56:20:91:83:9f:71:94:d4:0d:56:f7:61:5e:82:68:
         6a:73:3d:a9:88:b9:34:4a:d4:95:2b:ab:a9:f1:d1:f7:58:da:
         fe:b7:7e:a5:72:4b:ad:9f:57:b3:81:cb:44:72:6f:93:de:58:
         af:c6:21:45:27:80:b0:ff:c5:15:41:60:15:9d:c3:3a:91:9c:
         20:57:5a:f1:b1:83:da:a2:25:80:8a:9f:5d:6c:46:84:38:35:
         84:48:3e:54:07:30:72:2e:e6:d9:4a:a7:2b:6b:63:2c:47:02:
         05:42:3f:1b:4e:47:b9:d8:74:5a:6d:24:0a:8e:d3:3a:77:87:
         04:e4:75:c8:bb:e4:16:e9:b6:72:e2:5e:31:51:f0:35:d0:e2:
         27:62:23:59:87:c5:25:90:d9:24:da:88:0e:b9:0d:58:72:c7:
         62:75:c8:39:96:66:06:43:34:c4:e6:72:2e:26:09:f6:21:8b:
         dc:4e:79:0b:5b:d9:40:1d:5a:01:6d:ba:03:e7:f0:74:ac:3c:
         d5:49:47:94:42:75:ec:9b:9c:98:aa:f4:2f:bf:de:a2:87:b1:
         3e:99:f9:9f:86:6e:cf:b4:7a:e9:55:35:6e:31:1b:44:82:62:
         6d:87:42:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:33:45 2024 by rpki-client on console-fra.rpki-client.org