Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File:                     Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier:          z6ap4O7Yhc5STlewZdskoPAU/p6TteaV4TbqxssaxB8=
Subject key identifier:   16:12:EF:42:82:EA:F3:6C:E2:17:E3:2E:73:F2:B1:DA:F6:9F:02:6D
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer:       /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial:       018F43B1F14B3D312BE1FDF0F1DCAFB477AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number:          0C99
Signing time:             Sat 04 May 2024 13:01:25 +0000
Manifest this update:     Sat 04 May 2024 13:01:25 +0000
Manifest next update:     Sun 05 May 2024 13:01:25 +0000
Files and hashes:         1: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: pS/7QdvnFNdgeF5LW4P5pnS5TRHhoTGWqPxjBMbFV3U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b1:f1:4b:3d:31:2b:e1:fd:f0:f1:dc:af:b4:77:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
        Validity
            Not Before: May  4 13:01:25 2024 GMT
            Not After : May  5 13:01:25 2024 GMT
        Subject: CN=1612ef4282eaf36ce217e32e73f2b1daf69f026d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:94:78:df:e8:d2:6c:38:8d:ac:05:3a:a5:
                    b4:13:08:bc:18:5b:1f:98:8f:dc:44:25:cb:11:8e:
                    17:a6:d0:aa:ec:0d:35:e0:46:7a:9b:fe:c2:f0:fb:
                    13:2f:e4:45:4c:f0:8e:6e:93:74:47:b7:bf:80:f0:
                    91:be:01:82:44:1c:9e:e9:8b:d2:51:8f:78:d4:98:
                    70:fb:c0:6e:0c:85:17:08:81:27:87:2f:ab:f0:fa:
                    06:2e:dd:d8:d7:5d:c9:a1:1e:ce:0c:4a:9a:de:a2:
                    d5:76:19:68:ed:42:63:18:3a:75:25:e4:c6:45:a7:
                    8a:6d:30:5a:e0:73:4e:80:3b:69:0a:8a:d6:d4:8e:
                    50:ba:a7:56:13:c4:cf:c4:24:cc:11:9f:69:79:29:
                    85:49:44:20:cf:41:21:a8:32:cf:89:c3:e3:61:5d:
                    40:96:f1:68:90:c5:a4:7f:d0:cc:ae:cf:a7:94:61:
                    dc:9a:e4:db:27:d9:f2:0f:95:91:c8:11:87:43:89:
                    55:91:30:c3:02:0f:20:44:09:42:9b:75:f8:f2:ff:
                    dc:c0:0e:56:9f:ea:0c:5e:4d:59:64:ff:37:1d:64:
                    ab:3a:62:48:34:91:c8:7e:30:05:b9:5f:72:d4:94:
                    2e:a1:cd:a2:eb:d3:4e:f2:c0:7f:fd:d2:a0:4e:d6:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:12:EF:42:82:EA:F3:6C:E2:17:E3:2E:73:F2:B1:DA:F6:9F:02:6D
            X509v3 Authority Key Identifier:
                keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:54:fa:c0:36:0d:b7:06:f4:8a:96:30:f3:57:4d:d5:ef:d2:
         a0:62:08:bb:3c:7f:b1:90:39:c7:8f:dc:8c:53:a6:83:63:f6:
         d8:2d:6e:0f:ab:0c:32:a9:68:59:72:c8:7d:5e:2e:71:d4:6d:
         57:2b:c1:30:cc:b4:79:62:b0:8f:7b:e7:56:05:6d:65:2f:ec:
         a9:54:9b:8f:32:fb:b0:e5:2b:92:e1:ac:37:bb:9c:6f:e5:e4:
         82:07:bf:86:7e:84:aa:97:19:2c:ec:be:8f:87:d4:c0:07:b4:
         79:d2:9c:ae:c8:8e:ca:e1:b9:8c:5a:b4:46:c0:ca:c3:81:ea:
         69:06:1f:65:28:14:ec:dd:1e:9e:40:3f:42:18:74:84:98:f9:
         9b:ac:dc:5f:d2:fc:c7:c8:7c:f1:8d:9f:7f:0c:a6:eb:44:ba:
         c6:02:3b:aa:14:cd:6d:82:32:cb:2a:99:a9:7f:2d:44:c8:5d:
         c1:6c:9f:cc:66:3d:a4:d3:4f:c1:5e:a5:19:41:21:b3:d3:b4:
         34:e6:5e:bd:f5:6a:57:2e:00:cd:bb:5b:14:d0:dd:e2:fa:50:
         aa:d0:a5:1a:18:83:57:85:c7:c9:eb:5f:50:e5:e0:20:c7:7e:
         c8:30:98:84:c1:6f:08:8e:db:d3:eb:59:80:c6:74:fe:20:87:
         d9:42:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:33:39 2024 by rpki-client on console-fra.rpki-client.org