Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File:                     4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier:          CRJKLR2WhfRESfHoYLmUUqWn9aBgpie+WSEZ5+VzoLQ=
Subject key identifier:   0C:01:14:C5:0D:80:90:08:6A:75:4B:CC:5E:79:90:23:43:77:B1:0E
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer:       /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial:       018F467BD08AD17900F48E78F35B37271620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number:          07D5
Signing time:             Sun 05 May 2024 02:01:10 +0000
Manifest this update:     Sun 05 May 2024 02:01:10 +0000
Manifest next update:     Mon 06 May 2024 02:01:10 +0000
Files and hashes:         1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: ZmunbMBPM8zWmKSN2CoZ3coAYZPZCpOo/DJdGWowayE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7b:d0:8a:d1:79:00:f4:8e:78:f3:5b:37:27:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
        Validity
            Not Before: May  5 02:01:10 2024 GMT
            Not After : May  6 02:01:10 2024 GMT
        Subject: CN=0c0114c50d8090086a754bcc5e7990234377b10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:d0:a8:df:80:64:24:c2:a8:0f:70:9f:fe:
                    b9:9d:41:18:c2:6a:93:25:59:48:12:b5:34:69:66:
                    53:20:c8:f7:88:04:86:73:3f:76:32:00:a3:06:6d:
                    c7:bf:3b:d4:fe:62:1b:d9:9e:fa:41:15:c3:b1:5e:
                    41:0b:a3:46:d6:d8:b2:a2:c5:23:8b:bc:4c:6c:9a:
                    43:09:7d:26:af:b5:fc:96:3e:1b:e4:77:a2:e6:79:
                    0e:7d:9b:48:b8:5d:cb:2e:be:f6:37:94:a2:9d:b7:
                    dd:04:6a:5e:c9:1e:4b:d7:bc:05:07:77:d1:94:56:
                    e5:ba:e0:9f:3b:08:83:4f:f7:14:a7:09:a2:9f:18:
                    d2:18:76:bc:74:96:b6:8e:63:da:47:e8:cc:3f:0b:
                    e9:58:25:9d:cb:d6:9f:cf:ab:7f:cc:2f:07:10:46:
                    48:c2:5a:00:65:0f:08:6e:a5:db:1a:3b:6e:8c:75:
                    7b:b4:e9:df:4e:f1:ae:f2:a6:d3:5e:0a:5b:94:e8:
                    e5:4e:8f:1f:db:f0:8c:78:bf:fa:32:17:bc:9e:f5:
                    00:ef:3e:1b:51:5b:b5:b5:68:68:77:3d:42:b8:c7:
                    38:a4:80:8e:e7:5f:2c:8d:7c:f5:47:38:bd:90:79:
                    9e:fc:49:27:a8:9d:c3:ff:f0:7a:6c:0f:13:e6:47:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:01:14:C5:0D:80:90:08:6A:75:4B:CC:5E:79:90:23:43:77:B1:0E
            X509v3 Authority Key Identifier:
                keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:f6:89:c1:7a:b9:c0:47:16:a2:0a:91:ef:45:85:21:aa:
         1f:fa:8b:2b:43:8a:e0:8f:bf:31:f5:5e:40:40:45:88:56:b7:
         76:8b:fd:2a:cc:26:61:e6:8c:5c:32:09:de:b0:c2:7c:19:94:
         2b:21:c0:ac:60:ac:92:ea:5d:0c:e5:25:41:4b:e6:e1:00:41:
         44:0b:3b:ee:d2:f2:d5:8e:09:1f:25:33:1f:ab:15:7f:c5:44:
         2b:54:f5:bf:20:07:2a:e5:c9:f6:eb:fc:29:8c:b0:e2:ed:5e:
         e0:56:26:fc:98:d8:66:cd:e8:df:96:f2:c7:34:42:69:9c:2d:
         de:ed:95:5f:1a:da:d6:c8:9c:76:3f:2e:a5:95:c4:de:61:57:
         79:1f:76:75:e5:c3:6d:a5:aa:18:97:9f:96:c1:3a:e1:e4:ed:
         29:33:d2:88:fb:a8:37:eb:26:f1:56:5c:4f:8a:ab:80:45:64:
         b0:2e:1b:72:d0:35:d3:1c:c4:32:a8:ae:28:31:29:71:76:e2:
         75:74:08:8b:83:78:8b:4d:c5:a3:16:28:72:4b:47:dd:eb:87:
         90:2f:be:8d:40:7c:8c:bd:5a:01:8a:95:ca:c4:cc:55:4d:87:
         7d:84:e1:2f:ef:df:12:a7:c1:3d:aa:bc:12:72:84:61:41:01:
         16:81:46:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:28:44 2024 by rpki-client on console-fra.rpki-client.org