Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8f5620-f3ad-47c9-bd8e-54cd725b5809/1/t7DfHvtcktGk1LKnehK_sbROrRw.mft
File:                     t7DfHvtcktGk1LKnehK_sbROrRw.mft (raw, json)
Hash identifier:          aCq1rD/ek2VdutHVj7pK3FXCoxL6InDd1B/IyoBBIT0=
Subject key identifier:   9E:ED:6E:08:10:87:12:3C:DE:F2:DC:C7:24:FB:86:C7:A7:F1:C0:95
Authority key identifier: B7:B0:DF:1E:FB:5C:92:D1:A4:D4:B2:A7:7A:12:BF:B1:B4:4E:AD:1C
Certificate issuer:       /CN=b7b0df1efb5c92d1a4d4b2a77a12bfb1b44ead1c
Certificate serial:       018F8749ABDC21216BB9E82E021F42DF8C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7DfHvtcktGk1LKnehK_sbROrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/8f5620-f3ad-47c9-bd8e-54cd725b5809/1/t7DfHvtcktGk1LKnehK_sbROrRw.mft
Manifest number:          10C5
Signing time:             Fri 17 May 2024 16:01:43 +0000
Manifest this update:     Fri 17 May 2024 16:01:43 +0000
Manifest next update:     Sat 18 May 2024 16:01:43 +0000
Files and hashes:         1: t7DfHvtcktGk1LKnehK_sbROrRw.crl (hash: zO4ggqTDICynoREBShpAjcXVr7SFfIm87bQwehBtiYo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/8f5620-f3ad-47c9-bd8e-54cd725b5809/1/t7DfHvtcktGk1LKnehK_sbROrRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/8f5620-f3ad-47c9-bd8e-54cd725b5809/1/t7DfHvtcktGk1LKnehK_sbROrRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7DfHvtcktGk1LKnehK_sbROrRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ab:dc:21:21:6b:b9:e8:2e:02:1f:42:df:8c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b0df1efb5c92d1a4d4b2a77a12bfb1b44ead1c
        Validity
            Not Before: May 17 16:01:43 2024 GMT
            Not After : May 18 16:01:43 2024 GMT
        Subject: CN=9eed6e081087123cdef2dcc724fb86c7a7f1c095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:d5:05:2d:3c:b8:c9:7a:84:01:86:00:40:
                    4e:ac:a5:89:e8:90:a5:16:93:fe:32:38:bd:10:b6:
                    be:c4:a4:95:71:a6:89:38:4e:63:a5:2e:eb:b3:cc:
                    b9:bc:f2:cb:81:f9:d9:45:0f:c9:1d:d3:9d:d6:1e:
                    a0:19:45:ea:84:db:13:9c:5f:fa:8c:66:78:b8:01:
                    94:f7:a0:54:42:85:0b:46:c4:79:3f:e9:f4:f9:00:
                    60:2f:b4:eb:d4:e3:4d:bd:17:2c:b5:3b:35:6a:16:
                    fa:f1:07:18:5a:3d:48:97:83:60:86:ef:db:bb:79:
                    48:ad:ce:05:c7:c4:81:d1:a7:7a:b8:fa:ba:d0:a9:
                    78:68:84:8c:7d:ea:c0:0f:47:67:01:b1:b0:85:dd:
                    4f:cd:5f:5a:a1:30:c1:22:84:99:c9:f9:ad:e6:79:
                    0d:0f:43:dc:e8:12:fd:e9:e0:ed:0b:db:84:51:b4:
                    aa:20:1b:17:6a:28:58:83:63:49:0b:27:b2:d5:e2:
                    9e:68:e2:0a:9b:01:93:fa:1a:5a:03:60:92:52:5c:
                    34:1e:23:95:4e:07:d1:69:8d:83:94:e2:81:ca:2d:
                    2f:7b:fe:e6:36:ac:9c:7d:0e:00:6e:e9:86:ab:8b:
                    98:5d:ba:d0:95:39:20:69:20:fa:be:e4:3e:3d:c3:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:ED:6E:08:10:87:12:3C:DE:F2:DC:C7:24:FB:86:C7:A7:F1:C0:95
            X509v3 Authority Key Identifier:
                keyid:B7:B0:DF:1E:FB:5C:92:D1:A4:D4:B2:A7:7A:12:BF:B1:B4:4E:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7DfHvtcktGk1LKnehK_sbROrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8f5620-f3ad-47c9-bd8e-54cd725b5809/1/t7DfHvtcktGk1LKnehK_sbROrRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8f5620-f3ad-47c9-bd8e-54cd725b5809/1/t7DfHvtcktGk1LKnehK_sbROrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fe:76:ba:29:94:db:ec:a1:d8:67:3f:d3:65:b2:74:6f:0d:
         cf:2e:75:dc:b0:f0:79:45:e0:f1:65:58:4e:a2:cd:9b:dd:61:
         0b:b6:96:f1:50:9a:33:59:c8:99:7d:f9:c6:d7:d9:19:a2:6b:
         96:fa:11:01:d5:1a:25:6e:06:fb:3e:2a:44:74:3f:6f:e1:36:
         b7:30:9d:93:58:46:21:a9:f4:e8:f4:05:5b:3a:b4:c4:f3:2d:
         9b:32:5d:4e:bc:f8:03:bf:13:ca:60:7b:bc:57:42:ac:37:e2:
         8b:eb:d6:06:bc:8c:f7:3e:42:09:c5:19:66:8b:e4:80:38:11:
         6b:7a:6a:6d:81:75:ac:e1:f2:ca:ad:33:4f:1c:7b:a7:76:ab:
         7f:3f:b7:fb:18:35:47:fc:7d:20:b9:07:f9:94:fb:84:fd:e6:
         3b:14:87:9f:06:5d:b0:b6:76:53:69:98:ed:1a:3f:9e:50:61:
         87:71:f0:e1:c3:b6:6d:8f:b4:a7:83:06:0a:cc:db:5f:35:e9:
         cf:34:35:ca:f8:12:83:5d:08:11:cf:9c:f1:3a:53:9d:82:bb:
         e8:a3:f1:36:37:8a:ed:0f:45:84:77:36:01:69:f7:6d:78:94:
         b3:42:4a:bb:87:72:5f:4b:7f:bb:ed:e1:57:b0:82:51:f8:db:
         82:b8:6f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:26 2024 by rpki-client on console-ams.rpki-client.org