Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File:                     3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier:          Mh+LzC1BgDdhwzsS67lq3M3a5mDkDy4ar7a0Wm7Vm8I=
Subject key identifier:   CB:74:A8:AF:A4:72:F3:5C:EC:2F:D3:E1:04:FC:6C:08:FC:CB:25:25
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer:       /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial:       018F5324C9C96F3093A634D5F7FBBBC21205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number:          0ABA
Signing time:             Tue 07 May 2024 13:01:10 +0000
Manifest this update:     Tue 07 May 2024 13:01:10 +0000
Manifest next update:     Wed 08 May 2024 13:01:10 +0000
Files and hashes:         1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: 4Ano1DwhZSXHbX4zbCTDMmNL65JVRbSGpvOjPIFLBAY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:24:c9:c9:6f:30:93:a6:34:d5:f7:fb:bb:c2:12:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de122d172c13b15291e41f945681525826fef892
        Validity
            Not Before: May  7 13:01:10 2024 GMT
            Not After : May  8 13:01:10 2024 GMT
        Subject: CN=cb74a8afa472f35cec2fd3e104fc6c08fccb2525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:67:ee:f8:86:96:86:29:dd:88:51:18:74:
                    cd:2e:8f:f3:f7:32:38:11:34:f7:d9:97:0f:7c:43:
                    33:87:f5:c9:27:de:21:fe:c0:52:72:fe:02:2a:8d:
                    54:d6:33:7a:e5:ae:fd:69:b8:84:06:c8:25:e7:5b:
                    ba:8c:18:ee:34:bb:3a:83:0f:33:32:50:f5:51:e0:
                    03:67:c2:0a:e0:2a:67:57:bd:55:77:08:12:36:7e:
                    bd:d6:82:14:30:a5:06:cf:c3:44:6c:b9:37:d0:dd:
                    a3:4b:a0:1b:87:78:91:49:3b:17:29:d3:84:bc:2c:
                    20:b2:50:3b:bc:f0:b2:47:0f:82:6e:99:e4:0e:9b:
                    84:34:8a:0c:18:e4:27:f8:8d:c0:5f:a5:5b:f1:25:
                    27:4f:2f:0a:2d:ae:44:c6:ce:d6:45:be:df:4e:cd:
                    c0:cd:c9:dc:3c:d2:a9:36:a2:62:15:05:45:79:7c:
                    3b:c1:96:f6:5d:c7:28:6f:f0:e3:7d:bc:8b:c4:dc:
                    c5:0a:f7:9f:8c:39:be:e1:20:b3:10:3d:f5:48:da:
                    ab:47:4d:93:18:9c:ed:25:25:ac:c1:a6:7d:22:21:
                    1a:f3:b7:2f:99:3e:8b:72:02:06:49:be:c3:08:2d:
                    d2:4b:a1:4c:3e:0c:9f:06:02:d1:fe:1e:af:70:6d:
                    7d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:74:A8:AF:A4:72:F3:5C:EC:2F:D3:E1:04:FC:6C:08:FC:CB:25:25
            X509v3 Authority Key Identifier:
                keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:26:35:61:d4:ec:97:44:fe:fc:2d:74:48:1d:94:73:6e:65:
         23:d3:84:ad:00:f0:f7:60:a7:08:9c:8b:a4:5e:66:03:52:4b:
         e2:b0:33:8b:57:50:c3:22:c6:08:d7:de:84:b4:55:aa:00:5a:
         97:f0:3b:4d:15:61:5f:92:d6:c0:ad:8e:0a:57:57:5a:03:16:
         3a:b3:b5:93:9a:ce:cc:f3:c4:27:da:d9:0d:76:26:30:d5:96:
         d3:6f:b7:54:db:c0:11:34:c8:c9:da:b7:90:be:a2:93:1b:8b:
         43:f3:1e:58:70:40:b5:05:a4:66:9d:88:06:c5:27:5c:f2:2a:
         09:6c:8a:79:d2:a2:f1:5e:95:3e:24:49:87:e7:79:fc:31:b9:
         e6:76:3b:31:4f:04:b7:6c:9f:8d:0a:67:5e:30:13:40:21:4f:
         f5:ea:f1:1a:80:47:3e:e2:df:fe:c4:92:b3:bf:cb:b1:1e:3f:
         b2:20:0b:ae:06:da:24:90:5b:c9:3d:9e:15:fc:bd:4a:cf:a5:
         9d:2a:09:b6:ea:f7:89:4b:fc:36:22:1e:78:3b:eb:30:e6:51:
         f6:74:75:3a:89:0a:86:8b:c5:e0:32:a4:ab:13:aa:9b:46:27:
         37:a9:02:53:12:b3:c1:57:22:47:ea:ec:04:61:4c:e2:4e:bd:
         de:e2:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:48:54 2024 by rpki-client on console-ams.rpki-client.org