Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File:                     1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier:          M5N5iwTTLzd5Ie5RnlUChJF54GEP3PGVBOYM3Vb1Lnw=
Subject key identifier:   0A:1A:85:1E:04:27:B3:79:EF:0B:1D:55:0D:0C:DD:50:1F:55:F5:81
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer:       /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial:       018F362E3AADF129BF6D5859A506D16D91DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number:          114B
Signing time:             Wed 01 May 2024 22:02:30 +0000
Manifest this update:     Wed 01 May 2024 22:02:30 +0000
Manifest next update:     Thu 02 May 2024 22:02:30 +0000
Files and hashes:         1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: 87c5L4dphnv3IInWtHPNSoSToBm1VHYCUsQzuIMMklA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2e:3a:ad:f1:29:bf:6d:58:59:a5:06:d1:6d:91:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
        Validity
            Not Before: May  1 22:02:30 2024 GMT
            Not After : May  2 22:02:30 2024 GMT
        Subject: CN=0a1a851e0427b379ef0b1d550d0cdd501f55f581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:55:d0:8c:82:69:c2:6f:4b:c3:75:a7:0d:
                    48:be:b5:12:d4:11:6a:4b:08:16:e4:93:71:af:35:
                    89:f7:49:c3:a5:b2:c0:5b:5c:2c:af:9b:d4:2b:53:
                    7b:ec:d3:d2:83:9f:12:f3:4c:8a:74:60:fa:d2:28:
                    ad:8e:77:08:03:03:1f:f9:4a:28:34:c3:30:d4:cf:
                    dc:07:a1:ec:67:27:e3:be:a4:9d:46:b2:f9:56:b3:
                    ae:21:16:52:da:9f:f1:84:03:e1:b8:8d:b9:29:b3:
                    54:e8:09:53:ba:6c:94:31:82:6c:27:55:b1:b2:9c:
                    c1:ea:95:5e:cb:c2:35:f3:1c:e4:a2:b4:99:5a:ba:
                    d7:cc:dd:af:d4:e8:df:b9:61:78:8f:7a:f6:17:90:
                    2a:64:7d:c5:e4:74:9e:a5:c0:45:93:1e:0e:a1:be:
                    1b:e7:93:81:c4:ed:38:a8:d8:72:96:2c:42:81:31:
                    6f:5b:c9:ae:f0:8b:b9:f9:d2:1d:da:82:81:78:e4:
                    bb:ac:a1:b8:5e:25:ba:d9:f8:44:ef:4e:58:19:8f:
                    3e:7e:7d:a1:9e:70:a1:3f:e6:fa:d2:eb:71:80:16:
                    24:83:4a:90:ed:0c:12:e4:a4:cf:e5:63:78:c8:2c:
                    10:69:4b:15:cd:28:27:04:64:8e:1f:83:5c:0a:4d:
                    a6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1A:85:1E:04:27:B3:79:EF:0B:1D:55:0D:0C:DD:50:1F:55:F5:81
            X509v3 Authority Key Identifier:
                keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:19:63:ae:84:82:64:20:6b:96:c5:f1:cd:f0:1e:f3:8c:2a:
         bd:58:34:84:14:c9:0d:57:75:69:e4:75:df:bf:7f:4e:e8:e6:
         99:34:10:e4:9f:47:b4:8e:f7:24:f3:4f:2e:7a:21:f1:b5:6f:
         55:6d:89:8b:7a:ce:6c:36:8c:e6:4e:ed:bf:e4:f9:61:0e:ad:
         51:e0:cd:74:5c:5f:e3:f7:92:4e:57:fa:54:aa:ff:84:59:0c:
         5e:10:53:49:05:f5:1b:aa:b5:b6:01:fd:d7:45:b1:e3:49:b1:
         10:48:91:b9:5c:55:bf:7a:af:6f:1c:7d:10:85:71:9c:7c:f2:
         ac:26:ee:f4:25:e5:e8:76:b8:22:fa:0f:8d:fe:8e:57:d5:c4:
         9a:d7:49:ba:d7:97:3d:be:6d:ab:95:95:dc:cf:7a:d6:e5:62:
         82:f6:17:cc:0c:70:da:18:92:8e:08:4a:a5:c8:c3:a8:76:5f:
         80:58:27:a6:be:2e:86:80:79:c7:d3:08:4e:85:90:1f:7d:49:
         e2:cb:cd:93:8a:ee:08:c0:47:77:4e:97:08:56:da:28:f4:18:
         6b:7c:1a:93:50:67:39:7b:7b:de:a3:23:1a:f6:32:9f:ec:32:
         67:fa:c4:01:0b:82:5d:a1:3e:b4:b2:c5:bb:99:1a:4f:4d:46:
         f9:05:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:56:38 2024 by rpki-client on console-fra.rpki-client.org