Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File:                     C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier:          I5hzA2l5SLvlS6G2BZEM4kJeSSemqklJrcKUR0s6XYE=
Subject key identifier:   1C:06:27:C7:EB:EF:F3:FA:FA:8B:0A:89:12:C2:CB:F0:60:E4:1C:D0
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer:       /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial:       018F4D59CCE59A55E0E8E8A7F79EAEB8175F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number:          1157
Signing time:             Mon 06 May 2024 10:01:21 +0000
Manifest this update:     Mon 06 May 2024 10:01:21 +0000
Manifest next update:     Tue 07 May 2024 10:01:21 +0000
Files and hashes:         1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: lXI0a59i69d8ld8LNY8kd8i7to5lfyXLPchfYyQc+S4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:59:cc:e5:9a:55:e0:e8:e8:a7:f7:9e:ae:b8:17:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
        Validity
            Not Before: May  6 10:01:21 2024 GMT
            Not After : May  7 10:01:21 2024 GMT
        Subject: CN=1c0627c7ebeff3fafa8b0a8912c2cbf060e41cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:0f:2b:a2:d0:32:97:0f:67:be:3d:79:1d:
                    ba:90:a0:d8:41:de:c0:83:fa:20:da:e7:6e:7b:e1:
                    26:14:46:67:20:91:d4:eb:79:08:d2:1a:d5:7e:d1:
                    46:50:fd:ae:21:3a:39:36:5c:28:88:2d:eb:50:04:
                    5a:88:69:81:04:00:67:86:22:b2:90:aa:47:7d:44:
                    68:ee:5b:23:c7:fb:17:97:a1:ff:6a:a4:dc:0e:53:
                    e3:60:c5:16:70:89:76:ff:94:71:c4:83:27:e4:16:
                    fa:02:83:60:2c:7c:87:75:08:6d:ab:83:50:f6:91:
                    21:25:28:ef:64:54:88:2a:43:27:7c:10:d7:03:42:
                    5b:09:21:03:94:21:6f:b6:86:20:4b:56:47:c2:e5:
                    9d:2a:23:f4:01:18:63:a6:65:01:eb:68:f7:01:12:
                    21:d9:d0:ae:8d:9a:f8:58:c9:0d:62:46:3f:fe:97:
                    28:c4:78:f5:dc:2c:50:61:fa:07:86:eb:1e:7b:f7:
                    c5:6e:09:92:db:db:da:ea:01:fe:3b:f6:9b:4a:76:
                    06:47:1b:f8:d0:95:bc:1a:b5:01:9c:cc:ae:93:de:
                    7e:c9:be:62:24:99:4f:09:ba:4a:d5:10:84:e7:0a:
                    04:f4:ee:24:e9:ce:92:c1:9b:88:77:c2:18:a8:56:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:06:27:C7:EB:EF:F3:FA:FA:8B:0A:89:12:C2:CB:F0:60:E4:1C:D0
            X509v3 Authority Key Identifier:
                keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c2:4c:58:7e:01:58:01:43:74:3c:d8:16:cc:a2:32:67:2e:
         fb:b0:fa:e4:23:40:0e:06:fa:d8:d6:f8:47:b0:5c:d7:0f:00:
         a2:39:4f:ae:84:06:34:21:dd:4f:86:86:f3:53:3d:97:9b:bd:
         35:7f:98:74:f7:ae:f5:4b:c4:aa:e5:b1:1d:54:c9:6f:31:9b:
         94:0f:0d:92:ba:8e:7b:f2:35:5f:02:6d:de:a8:cb:5e:48:30:
         00:20:dd:2b:0d:1a:f9:ca:bf:a8:45:d9:e1:90:c4:32:db:97:
         4c:76:fe:30:65:4d:c5:fe:b2:95:a8:5d:24:66:4b:04:e6:e6:
         75:2f:95:a6:86:41:8d:cd:5a:b6:9a:dc:a2:19:fe:be:df:b4:
         6f:b6:55:28:f4:54:14:b1:03:0e:2a:5d:cc:49:ae:07:92:ce:
         b4:76:69:33:dd:13:6c:c2:19:07:4d:de:38:76:d1:56:e0:97:
         a4:38:12:28:5c:cb:14:b4:5a:e4:ce:0d:f4:b6:92:57:c8:16:
         27:08:c5:43:35:00:ae:d7:05:1c:ca:fc:fb:c2:72:28:26:e4:
         1f:59:e4:92:5f:9d:92:49:13:a6:c8:0a:e1:e8:a1:ec:17:a4:
         53:e8:3a:0b:66:8e:9b:7d:ea:7b:05:2b:50:fe:e5:e5:13:b9:
         80:b9:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:35:10 2024 by rpki-client on console-fra.rpki-client.org