Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
File:                     B-jeamdMH-qtmpzNPOoi3yYXTyI.mft (raw, json)
Hash identifier:          VUD5lTCtygmjcGeLtWc3uVzZqOUrJ3JVy0W5n2sUDvs=
Subject key identifier:   AA:EA:8B:18:4A:38:E9:A4:7D:8F:E8:2B:F9:42:B1:49:63:0F:FA:05
Authority key identifier: 07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22
Certificate issuer:       /CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
Certificate serial:       018F4AC6C654EC3031D98FE897536D960627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
Manifest number:          1154
Signing time:             Sun 05 May 2024 22:01:31 +0000
Manifest this update:     Sun 05 May 2024 22:01:31 +0000
Manifest next update:     Mon 06 May 2024 22:01:31 +0000
Files and hashes:         1: B-jeamdMH-qtmpzNPOoi3yYXTyI.crl (hash: lNTlBcuG2/TsWNNfTmNiq7TgrxlJJcc2bahufMgxnss=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:c6:c6:54:ec:30:31:d9:8f:e8:97:53:6d:96:06:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
        Validity
            Not Before: May  5 22:01:31 2024 GMT
            Not After : May  6 22:01:31 2024 GMT
        Subject: CN=aaea8b184a38e9a47d8fe82bf942b149630ffa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:37:38:9a:f1:e6:d2:38:ad:b8:7e:f8:f5:ac:
                    fc:d7:47:2c:11:33:fa:86:4f:c0:94:12:06:fb:dd:
                    fc:c9:4f:ab:ec:6e:09:31:57:f3:12:cb:25:b2:ff:
                    c3:8b:80:09:e7:c3:8e:30:90:7e:b0:64:0e:5f:24:
                    08:95:6d:b4:1e:ce:13:f0:47:e7:a2:ce:5b:f4:17:
                    e4:26:7b:80:21:e9:f6:6d:9c:d4:25:7e:27:81:b9:
                    04:61:01:30:a7:55:1c:98:ad:4f:0d:dd:d0:38:70:
                    16:d9:29:66:47:98:6f:a5:3d:9c:05:3f:8e:e9:17:
                    25:2a:f4:22:63:d5:be:08:f1:23:09:8b:12:d5:e5:
                    0f:4d:28:a8:04:71:fb:30:ed:c7:86:8f:5a:72:11:
                    b4:8c:35:2c:d9:16:94:5f:0c:e1:78:8a:18:48:a6:
                    a7:47:b5:b1:53:18:d3:50:96:6c:a2:b6:a7:7d:28:
                    19:78:03:9f:30:d3:8e:c6:fc:5b:32:32:63:4b:ee:
                    43:0c:c4:d2:a1:3d:01:60:13:09:61:91:29:46:56:
                    df:fb:03:91:92:99:1f:1c:f9:86:91:7a:d2:76:81:
                    4e:1b:75:68:e8:1a:4c:d8:15:d9:27:72:5e:e3:83:
                    fa:82:39:a2:ea:89:e0:af:92:f1:50:25:17:f0:e3:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EA:8B:18:4A:38:E9:A4:7D:8F:E8:2B:F9:42:B1:49:63:0F:FA:05
            X509v3 Authority Key Identifier:
                keyid:07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:4b:db:17:88:29:39:31:ce:80:0a:53:b6:70:44:65:1d:
         b9:d4:b9:4e:41:d2:f6:64:0d:87:46:f6:92:e4:d1:72:f4:1f:
         a9:e0:eb:88:5a:4a:53:ca:22:d0:61:46:a2:ef:2d:14:bf:06:
         31:61:18:07:57:ba:df:70:fd:70:10:0b:aa:ac:f5:89:94:6f:
         ad:0d:3a:20:47:d1:b2:34:40:ea:48:f3:6f:a8:ce:0d:ca:fe:
         98:ce:e9:24:52:64:f5:86:48:03:68:5f:0d:7a:79:ad:58:8f:
         6f:fc:dd:39:03:f8:9c:59:6a:b9:2b:11:90:b5:ec:3b:b8:12:
         5a:09:36:97:f6:30:58:b4:76:97:5a:00:a9:ed:71:10:58:f9:
         7b:11:5b:f9:0e:8a:cc:52:a9:d9:8e:34:5f:60:b9:22:74:d9:
         80:e6:4d:24:bb:01:e5:f7:3d:cc:18:be:80:63:5a:b6:a1:e9:
         41:b0:1c:4c:e6:6e:1e:9c:7c:eb:41:50:d6:e3:4a:fa:fd:24:
         b0:93:77:ab:24:12:38:d3:9a:a8:96:e4:b1:2c:89:6e:36:a7:
         d2:27:f8:c1:53:5d:21:f3:6c:e5:af:31:b2:fa:65:4e:b4:0a:
         81:e6:56:f9:b5:fc:13:07:fc:ab:f6:de:e3:5f:10:e4:30:9e:
         d0:98:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:53:30 2024 by rpki-client on console-fra.rpki-client.org