Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
File:                     rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json)
Hash identifier:          56jdTz/DhtXQPwFaWFwj0KOYCH8aB8TPGEvba/rkkZk=
Subject key identifier:   00:9E:A6:6A:71:15:79:E7:4E:A3:0C:31:5A:3E:47:74:59:31:31:8F
Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
Certificate issuer:       /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Certificate serial:       018F86A38DE22CBC7C49E8E9A457ADF1DF78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
Manifest number:          1073
Signing time:             Fri 17 May 2024 13:00:16 +0000
Manifest this update:     Fri 17 May 2024 13:00:16 +0000
Manifest next update:     Sat 18 May 2024 13:00:16 +0000
Files and hashes:         1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: NKpnEe+ot5+gxZcX56jU3xfVcZhCX2MNJ/FaeCXhsXc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:8d:e2:2c:bc:7c:49:e8:e9:a4:57:ad:f1:df:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
        Validity
            Not Before: May 17 13:00:16 2024 GMT
            Not After : May 18 13:00:16 2024 GMT
        Subject: CN=009ea66a711579e74ea30c315a3e47745931318f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:07:97:1a:38:2a:d0:c1:b5:ca:b2:b6:6a:
                    9a:02:98:f2:b0:10:24:8c:ad:1f:ab:fa:9e:f6:d4:
                    c7:ab:e5:92:e8:94:1a:23:25:36:9a:ce:c2:32:06:
                    77:ea:dd:b1:d3:ed:27:35:08:0d:e0:d8:3d:c7:67:
                    6a:89:f5:9f:0a:94:e3:ac:4a:2b:50:3d:b9:ab:a6:
                    d3:47:62:56:1d:dc:f8:99:70:1a:b7:e4:a0:a5:22:
                    e4:79:8a:45:93:11:73:30:bd:88:4a:ab:75:99:be:
                    04:d3:bd:70:69:26:69:e4:1c:99:8c:44:50:e5:08:
                    5c:6c:e9:07:c6:9b:9d:bd:3b:ad:c6:90:bd:65:84:
                    59:a3:de:ca:f6:db:87:00:f7:98:60:cf:99:bf:52:
                    ec:ab:28:4b:58:32:e2:7e:78:e5:41:8c:e1:b1:d2:
                    fd:eb:8c:ed:7c:d8:e7:48:ea:76:98:6d:ba:ca:45:
                    2d:37:94:29:4d:fb:9f:cf:ae:ce:de:ac:08:2e:b1:
                    58:f1:78:fe:f6:70:5d:70:87:61:96:aa:de:a7:9a:
                    34:ac:b7:ca:5b:63:31:f0:6e:f4:88:09:06:4e:52:
                    51:53:0c:71:2e:c0:09:c0:6b:25:ce:92:e8:49:de:
                    7b:60:ce:40:99:75:30:ba:2a:36:cc:46:4c:02:fa:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9E:A6:6A:71:15:79:E7:4E:A3:0C:31:5A:3E:47:74:59:31:31:8F
            X509v3 Authority Key Identifier:
                keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:eb:85:60:98:3e:d1:cb:e8:6f:56:d1:ed:c4:e6:db:c0:03:
         54:a6:78:36:76:8c:c7:6b:09:f3:a9:e2:99:00:45:e4:2a:5a:
         12:ef:1b:a6:cf:91:94:55:31:ee:57:21:42:a9:2e:b3:72:ec:
         3e:ab:4d:1e:cf:a1:94:0a:71:dd:e9:a2:a0:fe:f8:b5:0b:1b:
         36:e7:e4:24:78:a1:8c:3b:06:4b:da:64:7c:e4:23:87:5c:a0:
         60:54:b5:93:b0:49:9a:58:7d:dc:b6:ec:7e:b6:68:7f:ba:d9:
         22:3a:4e:b5:a6:cd:d7:f8:62:4b:a7:76:9e:c0:79:f6:37:ef:
         3d:bc:54:81:1f:b1:8e:6e:bf:95:fb:18:91:cf:c7:af:a2:71:
         2e:33:6f:64:83:36:4a:0f:f7:5a:00:7b:9f:0b:7e:bf:7e:59:
         e3:fd:fd:9f:46:ea:80:5f:ee:f2:8c:dd:3f:ff:ab:8a:e9:43:
         96:0c:e1:93:d5:c5:1c:c3:87:a3:28:b2:43:b3:c1:fe:3d:8a:
         f3:13:d6:93:55:3a:ed:f9:ec:fc:b6:a4:f3:f5:d0:f1:d8:90:
         55:3d:01:78:75:13:4c:b8:5a:0c:0c:c1:b1:e0:c4:81:4e:a0:
         3b:40:2d:45:b1:f1:85:a5:ba:1a:e2:f6:c7:36:8e:63:7f:04:
         f9:ef:7c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:10:56 2024 by rpki-client on console-ams.rpki-client.org