Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File:                     Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier:          Z5UQa57GHVEKgn0GTJUcY0EX4KpaQLxu8zEOJw8Kd+U=
Subject key identifier:   E2:F2:2C:B0:47:76:82:A2:C1:88:BC:FA:54:DC:CB:2D:68:66:8F:F8
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer:       /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial:       018F362DDB3D7BE708CA95FBFAD00C805784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number:          114B
Signing time:             Wed 01 May 2024 22:02:05 +0000
Manifest this update:     Wed 01 May 2024 22:02:05 +0000
Manifest next update:     Thu 02 May 2024 22:02:05 +0000
Files and hashes:         1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: ccQgziDmPzqgy+SdFBlNArkbmmqKCq9GnhwMHUX88H4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2d:db:3d:7b:e7:08:ca:95:fb:fa:d0:0c:80:57:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
        Validity
            Not Before: May  1 22:02:05 2024 GMT
            Not After : May  2 22:02:05 2024 GMT
        Subject: CN=e2f22cb0477682a2c188bcfa54dccb2d68668ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:8e:d1:91:f7:6d:58:6d:94:a3:9f:b7:93:
                    a1:a4:f0:4a:f5:f2:9d:44:15:33:21:22:fc:8c:ef:
                    0c:0c:7b:68:be:77:2a:48:be:85:21:36:68:e2:33:
                    d2:4c:fc:a8:21:41:c3:bf:59:c8:67:e6:6a:be:c4:
                    6f:aa:4f:60:88:5b:3d:3d:25:3f:46:9c:e0:c2:c8:
                    70:4d:67:60:94:08:38:af:bd:d4:bb:13:dc:b0:55:
                    7f:0d:3c:96:d8:64:78:d6:c8:cc:e9:85:b9:04:75:
                    ee:04:c9:53:9e:79:85:1f:97:a5:15:d3:33:5c:2b:
                    6a:d7:c2:b9:0a:1e:4b:02:41:d6:46:95:8a:c4:4f:
                    41:56:16:5f:dc:1a:9d:80:bc:0a:ba:16:2e:26:ec:
                    41:ae:17:c3:72:66:b1:dd:5c:c9:10:3d:78:43:2c:
                    71:3f:a5:ea:5a:ae:16:48:c8:69:31:ad:f5:7b:31:
                    3e:45:5f:82:8c:ee:14:4e:6c:bf:20:cd:1a:b0:42:
                    86:e2:29:39:df:6d:ca:34:03:a5:e0:1f:c5:9a:ce:
                    ef:7a:ab:1e:f9:86:67:19:82:6a:1c:27:4f:f8:3d:
                    af:dd:54:f0:9c:a1:ce:6b:d6:9b:06:e6:33:b3:2c:
                    3f:ce:c9:3b:13:aa:97:94:68:97:52:2d:d7:43:4a:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F2:2C:B0:47:76:82:A2:C1:88:BC:FA:54:DC:CB:2D:68:66:8F:F8
            X509v3 Authority Key Identifier:
                keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3e:8c:65:f3:4a:c3:e4:2a:92:51:a9:e9:dd:29:0f:5e:50:
         fc:af:1a:a1:cb:d5:67:ee:18:ce:01:d5:7b:13:e0:21:cd:9f:
         3c:5b:86:8e:7a:3a:7a:6a:85:dc:19:af:f8:41:ba:db:ac:53:
         86:e1:90:b0:e0:34:e9:01:4e:e1:cf:a8:a5:13:81:39:c5:70:
         0e:0a:95:b2:67:66:e2:cb:33:f0:9c:02:8d:d0:3d:38:17:13:
         d7:81:e4:ad:38:2b:b5:ca:45:17:ff:de:7a:6f:54:c9:03:68:
         2a:04:7d:a9:c1:4c:12:cf:d4:25:27:c7:ad:87:76:94:18:c3:
         a4:fb:1e:a4:e7:d0:16:05:b1:f5:90:e8:74:3b:1d:12:54:18:
         ca:14:0f:fa:06:dc:36:58:bf:22:e9:7e:a2:5a:ad:e8:5f:a9:
         92:e2:9f:3b:49:7f:77:1e:73:e9:13:64:cb:f0:81:b0:bc:f3:
         f6:f3:54:ee:ea:22:4f:3d:18:74:47:b2:4c:ea:47:6b:7a:e0:
         31:c6:74:c0:cd:d6:f2:62:7e:f3:ea:53:f9:35:70:dd:31:15:
         4f:87:86:b9:c0:8e:7b:24:e8:75:8f:65:f0:2f:ee:cd:02:cc:
         2b:92:ec:30:4b:b4:70:63:75:37:2e:73:0c:c1:3d:e9:68:5e:
         02:33:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:27:44 2024 by rpki-client on console-ams.rpki-client.org