Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
File:                     DmuhOkKdJETI5sfYf-vxnVD-dQo.mft (raw, json)
Hash identifier:          Bhum0yXyfWw+QSxm3ZqCjBsjauRZce1zv8h24P/u2Og=
Subject key identifier:   C6:3B:02:67:E8:D7:F3:F6:77:18:3F:E4:76:7A:06:4D:AB:20:77:47
Authority key identifier: 0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A
Certificate issuer:       /CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
Certificate serial:       018F45A1EF6AEF89AB57250DC5D6116F3218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 22:03:11 +0000
Manifest this update:     Sat 04 May 2024 22:03:11 +0000
Manifest next update:     Sun 05 May 2024 22:03:11 +0000
Files and hashes:         1: DmuhOkKdJETI5sfYf-vxnVD-dQo.crl (hash: /Xd8n1hYPKVXJNkrmPUjUAHXOFKJnYSMxWQBzpj+5j8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a1:ef:6a:ef:89:ab:57:25:0d:c5:d6:11:6f:32:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
        Validity
            Not Before: May  4 22:03:11 2024 GMT
            Not After : May  5 22:03:11 2024 GMT
        Subject: CN=c63b0267e8d7f3f677183fe4767a064dab207747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:3d:d2:d7:30:c9:9d:dd:45:6f:43:46:e2:
                    81:c8:aa:ac:52:ff:7a:ca:3a:3b:80:a5:2d:fc:56:
                    1f:3d:9a:a1:a0:24:dc:a5:91:b3:a0:66:41:8e:d3:
                    20:df:f4:95:5b:c6:85:74:52:92:96:c2:f2:47:0e:
                    aa:8e:5d:6b:cc:27:d4:9e:c3:6a:ca:b0:ca:49:05:
                    fa:93:56:1d:90:72:af:14:72:ba:ba:c7:4d:5d:c2:
                    62:f5:4c:4c:db:a2:55:9c:f5:e6:28:51:62:24:6d:
                    8f:b7:be:20:9a:f1:4c:8e:57:ab:e2:92:5a:bc:30:
                    41:70:38:2b:56:ab:db:c3:e1:da:1e:b7:bb:c1:25:
                    fb:ff:15:f8:38:0b:58:4d:45:17:c2:0e:50:69:2c:
                    8a:2d:bf:82:a7:5d:73:23:80:1f:e4:85:c6:fc:60:
                    2e:b0:f7:47:84:1c:72:f0:c6:10:6e:1f:2d:16:8d:
                    43:e8:22:2b:a5:d6:b5:36:74:fa:ce:4b:26:55:26:
                    b4:4a:eb:06:fe:7b:95:79:16:d5:01:9e:a4:c1:7c:
                    28:f2:67:32:4c:e5:95:0e:e2:08:c7:ff:3b:8a:2f:
                    df:bc:9f:06:f2:3c:a0:90:2e:68:b0:bd:5a:ab:da:
                    9f:95:c6:28:f1:a2:41:c6:e8:4e:b1:40:83:ce:3f:
                    a8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3B:02:67:E8:D7:F3:F6:77:18:3F:E4:76:7A:06:4D:AB:20:77:47
            X509v3 Authority Key Identifier:
                keyid:0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b0:a6:84:4a:5b:ab:cb:d2:67:7e:a0:b5:52:3d:47:c0:4a:
         69:17:f3:de:47:13:85:9f:90:de:08:18:28:1b:0a:0f:e9:48:
         39:2a:17:75:25:34:c1:b8:a5:70:35:b7:2e:6d:5a:f1:ba:6a:
         c9:18:a4:b7:d3:8b:65:82:ba:93:22:8e:5e:9f:70:ff:10:72:
         75:49:55:11:7f:ca:dd:a8:db:08:13:f1:5c:81:0d:41:78:c2:
         1d:f8:7a:a5:c4:e6:16:65:8f:6d:43:71:bb:90:a3:0a:55:e0:
         28:26:71:d1:bc:2b:ee:d9:99:ea:91:58:a5:11:61:a7:0d:aa:
         e2:78:33:11:eb:de:8d:33:a3:42:d4:e5:5a:88:23:66:d5:b9:
         90:2c:49:6b:68:b5:86:bf:83:49:3c:3d:ff:c5:f6:38:33:eb:
         6c:bb:3d:0b:95:05:27:a1:ab:cc:9d:ad:cf:2c:bc:9e:c3:ed:
         00:6a:14:e6:e9:cd:b2:ad:72:eb:c9:b2:66:05:2c:48:af:09:
         68:3b:0b:97:93:6c:49:77:b2:6d:68:3f:a8:8e:ac:c5:9b:9b:
         64:45:f0:da:d7:2b:f7:db:c6:fb:e9:66:5c:ac:cd:75:51:9d:
         26:0f:fc:5c:1b:7b:13:b6:97:0a:c0:ed:ad:c4:2b:47:f2:76:
         da:d1:f7:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Foe9q74mrVyUNxdYRbzIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmJhMTNhNDI5ZDI0NDRjOGU2YzdkODdmZWJmMTlkNTBm
ZTc1MGEwHhcNMjQwNTA0MjIwMzExWhcNMjQwNTA1MjIwMzExWjAzMTEwLwYDVQQD
EyhjNjNiMDI2N2U4ZDdmM2Y2NzcxODNmZTQ3NjdhMDY0ZGFiMjA3NzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Q90tcwyZ3dRW9DRuKByKqsUv96
yjo7gKUt/FYfPZqhoCTcpZGzoGZBjtMg3/SVW8aFdFKSlsLyRw6qjl1rzCfUnsNq
yrDKSQX6k1YdkHKvFHK6usdNXcJi9UxM26JVnPXmKFFiJG2Pt74gmvFMjler4pJa
vDBBcDgrVqvbw+HaHre7wSX7/xX4OAtYTUUXwg5QaSyKLb+Cp11zI4Af5IXG/GAu
sPdHhBxy8MYQbh8tFo1D6CIrpda1NnT6zksmVSa0SusG/nuVeRbVAZ6kwXwo8mcy
TOWVDuIIx/87ii/fvJ8G8jygkC5osL1aq9qflcYo8aJBxuhOsUCDzj+o9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMY7Amfo1/P2dxg/5HZ6Bk2rIHdHMB8GA1UdIwQY
MBaAFA5roTpCnSREyObH2H/r8Z1Q/nUKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG11aE9rS2RKRVRJNXNmWWYtdnhuVkQtZFFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82NmI3N2UtNWEyOS00N2I1LWI1YTct
MDA3ZTA4YjNhZjhmLzEvRG11aE9rS2RKRVRJNXNmWWYtdnhuVkQtZFFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82NmI3N2UtNWEyOS00N2I1LWI1YTctMDA3ZTA4YjNhZjhm
LzEvRG11aE9rS2RKRVRJNXNmWWYtdnhuVkQtZFFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLCmhEpb
q8vSZ36gtVI9R8BKaRfz3kcThZ+Q3ggYKBsKD+lIOSoXdSU0wbilcDW3Lm1a8bpq
yRikt9OLZYK6kyKOXp9w/xBydUlVEX/K3ajbCBPxXIENQXjCHfh6pcTmFmWPbUNx
u5CjClXgKCZx0bwr7tmZ6pFYpRFhpw2q4ngzEevejTOjQtTlWogjZtW5kCxJa2i1
hr+DSTw9/8X2ODPrbLs9C5UFJ6GrzJ2tzyy8nsPtAGoU5unNsq1y68myZgUsSK8J
aDsLl5NsSXeybWg/qI6sxZubZEXw2tcr99vG++lmXKzNdVGdJg/8XBt7E7aXCsDt
rcQrR/J22tH3gA==
-----END CERTIFICATE-----
Generated at Sun May 5 00:23:40 2024 by rpki-client on console-ams.rpki-client.org