Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File:                     7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier:          GrwgjsZUuJwORLoitXrCrQBYPj9uP5vRoymtW/1uvso=
Subject key identifier:   0C:4B:F9:B6:5E:81:C0:7C:0C:9C:04:01:A3:B2:F9:6D:FA:69:FD:2A
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer:       /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial:       018F4D5A7B51CA88C99FC73D40A1235241EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number:          1158
Signing time:             Mon 06 May 2024 10:02:06 +0000
Manifest this update:     Mon 06 May 2024 10:02:06 +0000
Manifest next update:     Tue 07 May 2024 10:02:06 +0000
Files and hashes:         1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: 1ZtRvEnsv127TC0FZBZUTrKnbsVyYknuEjn/Nt/mhw0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5a:7b:51:ca:88:c9:9f:c7:3d:40:a1:23:52:41:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
        Validity
            Not Before: May  6 10:02:06 2024 GMT
            Not After : May  7 10:02:06 2024 GMT
        Subject: CN=0c4bf9b65e81c07c0c9c0401a3b2f96dfa69fd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:4a:99:40:3a:c3:36:56:fe:6f:6c:fe:22:
                    da:56:c4:8f:3e:24:97:eb:2e:ab:54:d7:ec:ec:f2:
                    11:63:13:ea:d3:13:4f:48:7c:2a:6c:a1:b2:0d:0a:
                    90:a1:cb:2c:a5:22:93:4a:22:0f:ba:34:7a:98:20:
                    1b:5c:91:f6:63:8d:4a:59:55:66:8a:0b:ab:57:39:
                    7d:59:54:8c:51:4f:16:cf:50:e2:08:91:67:80:c4:
                    93:6f:5f:25:90:2c:d5:00:8c:05:fe:31:e6:5d:9d:
                    ab:68:73:71:de:a6:9e:1f:de:c2:2e:5a:b8:c5:86:
                    1b:7f:e7:95:47:22:4d:a4:b2:df:66:b5:ad:f1:7c:
                    b8:46:cc:e8:56:fa:10:5e:ba:80:e9:d3:67:c5:72:
                    95:3c:1f:7d:20:fc:cc:ae:d9:d7:09:80:ba:e2:11:
                    cb:ca:80:24:f0:00:a4:c7:c3:0c:25:44:4a:66:81:
                    42:eb:b5:bf:8d:21:b1:ba:d3:ee:02:b9:90:55:05:
                    bf:dd:a1:dc:64:84:66:7f:51:c9:cc:4a:74:89:79:
                    90:95:d0:7f:f7:9d:43:39:60:e8:0f:18:02:07:f3:
                    c1:62:5d:32:4a:e8:89:54:8b:40:a0:59:6f:3e:22:
                    0d:f1:6c:05:19:c8:af:34:59:8c:99:9f:f6:56:ac:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4B:F9:B6:5E:81:C0:7C:0C:9C:04:01:A3:B2:F9:6D:FA:69:FD:2A
            X509v3 Authority Key Identifier:
                keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c6:ed:26:b6:0c:2a:9f:0d:db:93:d4:0b:96:d3:cc:92:0c:
         7f:4a:df:5b:3c:a1:24:3c:00:2c:77:b9:80:bb:7e:1a:00:ad:
         00:da:f8:a9:3d:93:a8:0b:f6:34:63:90:e7:6d:55:4a:bc:a8:
         d6:97:03:1a:a7:07:11:b4:cc:fb:93:6b:cb:80:78:80:55:3c:
         74:a1:e2:89:b8:bb:33:69:ee:63:76:34:fd:3f:80:5f:68:98:
         80:94:ed:8d:61:a8:f6:0c:c2:02:fe:7a:49:90:cb:3c:5a:77:
         8e:d6:4d:4a:97:2e:93:31:02:eb:41:50:91:0d:0f:6b:48:ee:
         33:f3:9f:9b:1a:ac:d6:2a:b4:0c:7c:d8:f7:08:71:4d:bc:32:
         e1:6e:75:89:54:fd:05:c6:75:37:ca:a6:9f:92:9f:db:81:9c:
         54:f9:f4:fe:a2:7a:55:d6:f0:70:b5:71:70:e8:b3:11:28:c1:
         ca:71:3b:4d:cf:79:59:b5:41:58:87:94:f1:55:69:f5:a0:c7:
         64:2a:bd:97:1b:a4:09:47:4e:5c:60:93:20:3a:98:f6:22:39:
         82:2c:58:1f:fe:11:68:25:2a:43:e9:de:f9:63:f8:74:c6:c2:
         62:4f:dd:0e:2c:22:d5:01:54:71:76:6b:29:0d:34:d6:3a:7d:
         2e:38:33:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:45:47 2024 by rpki-client on console-ams.rpki-client.org