Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File:                     Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier:          vsRlIedhbavUHuXMoJCW8SVJxpImtzloWqqlQOaOjyw=
Subject key identifier:   1A:67:7F:BA:1F:95:C9:B0:58:05:09:45:49:07:ED:77:4A:44:8E:13
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer:       /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial:       018F3708A4BD2B0715C77B8784189DA22B20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number:          1141
Signing time:             Thu 02 May 2024 02:01:04 +0000
Manifest this update:     Thu 02 May 2024 02:01:04 +0000
Manifest next update:     Fri 03 May 2024 02:01:04 +0000
Files and hashes:         1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: LfFMeoG4G9DWKIO1xSd0M+Xxmldm/UvmFoa93haDDQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:08:a4:bd:2b:07:15:c7:7b:87:84:18:9d:a2:2b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
        Validity
            Not Before: May  2 02:01:04 2024 GMT
            Not After : May  3 02:01:04 2024 GMT
        Subject: CN=1a677fba1f95c9b0580509454907ed774a448e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d8:6b:a2:f7:20:ae:f1:d6:45:81:7e:73:c8:
                    6f:72:17:cc:0e:3b:27:53:68:68:46:41:17:92:39:
                    d9:77:e2:fd:c3:33:e2:16:f4:0e:65:f3:12:79:e1:
                    4a:16:fd:32:3d:3e:9f:36:e9:77:fb:37:90:c2:38:
                    04:70:f3:67:af:70:8c:3a:7f:82:37:b6:c3:8d:b7:
                    7a:cb:32:5b:0d:e8:bd:62:2d:f6:6e:dd:9d:55:c9:
                    f9:88:84:42:60:c5:cb:a9:cc:ca:b8:c9:e6:ec:61:
                    a9:f2:99:bb:b9:a3:94:e2:e4:83:94:f7:41:05:2c:
                    bc:1f:4f:b7:42:23:61:3d:51:08:94:0b:5e:70:f6:
                    55:e4:39:1d:45:00:1c:e6:76:60:03:c0:f6:3b:eb:
                    b0:3f:00:c0:f0:04:15:fb:95:49:2b:c5:81:46:de:
                    c0:d0:ce:dc:64:33:e7:d8:fb:d1:5d:02:5a:86:f7:
                    f2:71:69:c3:27:de:b0:1e:a6:71:a3:98:fe:76:67:
                    dd:86:9d:4b:4e:d4:f6:31:ee:7d:8f:05:66:74:2f:
                    15:25:89:07:ab:a0:a7:40:31:15:55:8f:04:10:1b:
                    97:d9:f0:c7:4f:32:51:f1:9f:55:75:a6:df:45:7e:
                    31:aa:40:1f:b5:7b:d1:8e:7f:c4:ef:56:fd:99:83:
                    89:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:67:7F:BA:1F:95:C9:B0:58:05:09:45:49:07:ED:77:4A:44:8E:13
            X509v3 Authority Key Identifier:
                keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6d:61:95:e3:4a:a9:5b:4c:99:d0:ef:e2:b7:ce:ca:38:2d:
         eb:68:1e:d2:e2:f4:83:0b:fc:63:d6:11:c1:ad:93:aa:11:69:
         4e:11:d4:47:0d:78:58:96:f3:4f:1a:a8:a7:15:d2:a6:29:1e:
         37:1b:88:c5:48:a6:de:59:fc:0f:97:a0:ec:93:77:bf:e1:62:
         2c:3d:48:91:5a:dc:8d:22:c5:51:49:20:a7:13:d0:ea:e9:16:
         28:f4:7d:ab:3a:58:2c:fe:70:de:04:5b:48:7b:4f:37:0c:70:
         d1:c8:0a:b7:c4:6c:68:9e:80:f3:df:84:69:a5:67:9b:f1:d0:
         f7:2e:60:96:e4:58:77:a5:29:00:c4:cb:d7:74:49:da:9a:47:
         a2:8e:80:be:c9:5c:03:d5:25:59:ac:8c:3d:fc:d2:32:9f:15:
         88:cc:de:1d:dc:a8:80:d0:80:c6:43:2c:c6:54:74:c6:46:05:
         62:df:67:72:70:f8:bf:86:fa:68:03:86:68:7e:e7:e4:d6:ae:
         1b:1a:04:80:ce:78:75:de:dd:67:a6:b8:0a:8a:7d:2b:e0:10:
         26:1d:53:d6:90:77:26:0e:43:7f:cb:d0:75:e6:90:46:ea:40:
         aa:5d:ef:08:ae:9a:6f:ee:cc:bb:58:4c:43:dd:ec:e3:40:f4:
         07:38:17:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:36:55 2024 by rpki-client on console-fra.rpki-client.org