Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.mft
File:                     57oqYl6OZaspsIlfWd3_5Qp8vHU.mft (raw, json)
Hash identifier:          k8PekLeDLViFFOfRhhvMASpe7oDxS2E/6xhKwccf0rc=
Subject key identifier:   31:E9:68:43:54:AE:3D:FC:E9:1F:FA:DE:4F:97:46:F5:03:64:26:5D
Authority key identifier: E7:BA:2A:62:5E:8E:65:AB:29:B0:89:5F:59:DD:FF:E5:0A:7C:BC:75
Certificate issuer:       /CN=e7ba2a625e8e65ab29b0895f59ddffe50a7cbc75
Certificate serial:       018F3AAEFCC319EAF207070B7E0B54376D73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/57oqYl6OZaspsIlfWd3_5Qp8vHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.mft
Manifest number:          114B
Signing time:             Thu 02 May 2024 19:01:37 +0000
Manifest this update:     Thu 02 May 2024 19:01:37 +0000
Manifest next update:     Fri 03 May 2024 19:01:37 +0000
Files and hashes:         1: 57oqYl6OZaspsIlfWd3_5Qp8vHU.crl (hash: PTtCyX8BW/k47cC7SooXybPUasJq52r+B08PfpYq3nI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/57oqYl6OZaspsIlfWd3_5Qp8vHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:ae:fc:c3:19:ea:f2:07:07:0b:7e:0b:54:37:6d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ba2a625e8e65ab29b0895f59ddffe50a7cbc75
        Validity
            Not Before: May  2 19:01:37 2024 GMT
            Not After : May  3 19:01:37 2024 GMT
        Subject: CN=31e9684354ae3dfce91ffade4f9746f50364265d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:b0:df:43:d7:77:df:a9:a5:ae:0e:86:ad:
                    e9:2a:84:cb:d6:5d:9e:a0:d3:d2:8b:13:41:d1:48:
                    47:e2:7c:26:bf:9f:3e:8f:39:59:2a:52:5a:7a:55:
                    3c:b2:e5:5d:57:7e:e2:19:0e:a7:bc:cc:3a:66:fd:
                    58:98:e2:2a:e3:69:3c:6c:ae:eb:78:58:a3:c6:6f:
                    8a:0a:e7:52:63:1b:fd:e2:21:0b:7b:1a:c7:2d:7f:
                    04:30:96:aa:f6:9c:3d:2f:1a:e4:bc:b3:44:d4:7b:
                    38:5d:f6:ef:6d:f0:80:0b:38:d1:2d:29:48:f9:0d:
                    30:8f:db:72:fa:32:1b:bc:2b:e4:55:26:2a:a0:91:
                    97:f0:26:e3:6a:4a:06:5e:db:f3:de:9f:0c:d1:21:
                    b5:bf:f5:50:8d:4c:01:a3:62:21:e1:5f:bf:79:d5:
                    fa:6b:7e:16:4b:21:4b:7c:6c:fb:7f:38:98:10:23:
                    66:71:64:6a:d1:e4:8d:49:ba:f0:71:cc:e8:e6:70:
                    08:61:e2:4f:cc:21:74:6a:4c:20:df:8b:d4:70:e7:
                    88:1b:00:1d:79:45:df:28:6e:f0:45:f2:91:1c:64:
                    c5:31:f8:31:0e:ac:6d:5f:9f:b2:58:86:9f:f5:f5:
                    a6:f9:d3:59:48:1a:d0:fa:7d:c1:d1:72:cb:93:3c:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E9:68:43:54:AE:3D:FC:E9:1F:FA:DE:4F:97:46:F5:03:64:26:5D
            X509v3 Authority Key Identifier:
                keyid:E7:BA:2A:62:5E:8E:65:AB:29:B0:89:5F:59:DD:FF:E5:0A:7C:BC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57oqYl6OZaspsIlfWd3_5Qp8vHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:0f:45:bf:d0:ac:7d:37:08:68:87:e9:66:4a:bf:ed:3d:24:
         1d:44:fe:ab:0b:da:c5:84:ce:7d:ca:32:4e:cc:a2:4e:bf:9e:
         43:a9:3e:da:dd:c8:fe:01:d8:e1:02:c0:77:1a:35:57:af:8e:
         9b:a3:63:bc:0d:dc:4f:94:41:b0:8c:ee:b5:e9:6d:10:51:4d:
         ec:d8:9f:69:cb:27:61:2d:58:9f:5f:bf:9a:71:92:67:69:d4:
         07:11:cd:ab:ab:3a:52:ba:9e:14:ae:34:89:04:d9:b1:f2:a9:
         5e:46:1c:b8:76:b9:c4:29:0d:9c:c5:d7:d2:9c:b8:10:88:65:
         c7:38:79:d9:c9:31:dd:1a:a7:19:79:17:c0:d4:df:58:34:21:
         59:d8:e2:02:6d:0b:18:f2:59:27:8f:b3:8c:f2:bb:61:4b:d5:
         b1:31:b1:81:26:91:ff:4a:90:b1:b2:5b:4e:cd:a9:2c:00:df:
         19:1e:4d:a6:d6:9c:3d:c2:c5:15:ea:f1:e2:7b:c3:a0:24:1d:
         51:25:90:7d:4e:56:b4:d2:79:de:d1:54:d6:89:58:f1:10:db:
         e7:44:0d:fd:30:6b:89:a5:0c:4e:56:08:93:e1:b4:d1:4f:77:
         f3:fa:d0:63:40:77:7e:b7:d3:2e:dd:ad:56:1a:5f:cf:97:87:
         40:6b:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:43:40 2024 by rpki-client on console-ams.rpki-client.org