Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.mft
File:                     OEAeWIkL8jDcrl0DBRGf8sK41DM.mft (raw, json)
Hash identifier:          XAe5n94A/yOB9G1YFHqQWi0HI81UcZg4gU4y7+yXsqs=
Subject key identifier:   CD:ED:E9:7B:56:93:7D:AF:2A:67:CA:11:1B:E0:E9:A3:12:4C:9B:4F
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Certificate issuer:       /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial:       018F87ED9887D1BD9BFDFE5D15C2D7DE1E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.mft
Manifest number:          1183
Signing time:             Fri 17 May 2024 19:00:46 +0000
Manifest this update:     Fri 17 May 2024 19:00:46 +0000
Manifest next update:     Sat 18 May 2024 19:00:46 +0000
Files and hashes:         1: OEAeWIkL8jDcrl0DBRGf8sK41DM.crl (hash: 5wWT5Qtqr7ZrtnPRB+vUlhpAT6Hs26To6wFuRgUD1pU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:98:87:d1:bd:9b:fd:fe:5d:15:c2:d7:de:1e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
        Validity
            Not Before: May 17 19:00:46 2024 GMT
            Not After : May 18 19:00:46 2024 GMT
        Subject: CN=cdede97b56937daf2a67ca111be0e9a3124c9b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:23:f9:8c:da:07:2c:24:ff:ec:a9:5b:77:
                    84:76:07:40:b3:a2:65:e5:73:55:c7:41:81:a6:30:
                    a4:00:ff:75:74:b0:ef:7c:ed:aa:81:fe:ac:09:2d:
                    40:9f:ae:0d:c5:7f:04:53:e2:25:46:a8:82:e5:4c:
                    62:39:1f:0f:37:03:0b:bb:9b:ca:c2:08:fe:24:ed:
                    29:e0:71:0f:09:6f:34:a1:93:53:5b:ea:a0:16:89:
                    7d:90:e0:2b:5f:e6:1f:d2:ab:49:f4:34:1e:0a:0f:
                    3a:a1:d4:0b:0d:cc:df:ef:a0:0c:35:08:15:ce:cc:
                    f5:24:55:9e:8e:b7:fa:a0:68:e4:22:19:0f:18:d3:
                    08:12:2b:1c:0c:1d:8d:17:76:7d:7b:85:19:5f:c5:
                    72:30:bd:c7:15:55:1e:6a:d7:aa:2e:4f:82:d8:60:
                    b7:fd:73:bd:ce:a9:fb:ab:9e:c4:2e:92:f0:0c:1d:
                    41:8b:ec:fe:92:bd:e9:87:33:a4:f5:ce:84:8f:db:
                    c8:1c:8f:52:c1:d2:3f:46:0e:32:2a:4a:07:27:40:
                    ec:2c:77:46:fc:65:33:30:73:6a:fe:62:4c:99:9f:
                    4a:72:da:81:22:06:3d:1d:44:f8:7d:3b:3f:93:60:
                    08:63:a6:24:63:f9:04:5e:a0:84:3a:9c:07:ad:12:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:E9:7B:56:93:7D:AF:2A:67:CA:11:1B:E0:E9:A3:12:4C:9B:4F
            X509v3 Authority Key Identifier:
                keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c8:8b:24:56:e2:73:22:71:91:b8:96:47:6c:b1:1e:2a:a9:
         6f:d0:87:e9:68:9f:c3:37:78:ac:f9:10:76:1f:59:2c:b4:3c:
         91:f9:6f:3b:e6:fd:48:6a:e1:81:82:43:22:14:1c:29:50:94:
         ed:12:ad:87:9d:6d:00:4c:5f:0c:55:c1:02:3e:cb:71:04:21:
         c4:64:9c:96:9d:4a:07:80:de:bf:78:0f:40:21:99:17:9c:08:
         6b:3e:79:34:b1:74:15:04:0b:2a:cf:67:0c:3a:7b:8c:1a:4e:
         61:39:73:9d:84:fb:25:53:4c:cc:f4:79:77:fd:e2:99:3c:23:
         b9:30:86:40:91:40:de:b3:7a:e9:ac:df:27:d9:30:1c:dc:8c:
         16:6e:74:e8:3d:22:ff:ef:b6:22:d5:7f:22:e6:f7:39:2d:14:
         4d:02:ce:a8:95:15:98:96:48:6b:14:66:77:10:ce:94:63:42:
         dd:e8:be:7c:27:d7:f3:4f:12:17:51:cb:32:2a:9d:38:37:c9:
         6a:c4:0e:68:35:70:4f:96:87:93:7a:ec:43:7b:8d:e3:f0:61:
         ca:be:0b:17:ce:91:b7:23:9e:0d:b5:99:08:a2:c8:7e:1d:0b:
         fd:e7:f5:1e:6d:8c:4f:c4:16:43:d0:42:4d:bc:5a:1b:fd:d3:
         bc:74:d6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:00 2024 by rpki-client on console-fra.rpki-client.org