Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
File:                     I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft (raw, json)
Hash identifier:          50JlAK8NpcJhL+Fbw5njSCoUkrnvSaz4QO07yjzfUNs=
Subject key identifier:   0B:8E:62:15:95:8D:BB:99:CF:F3:0E:AA:04:6B:3A:66:88:35:F0:67
Authority key identifier: 23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
Certificate issuer:       /CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Certificate serial:       018F874909EEF7ECCA150F23E669B4B46C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
Manifest number:          0202
Signing time:             Fri 17 May 2024 16:01:01 +0000
Manifest this update:     Fri 17 May 2024 16:01:01 +0000
Manifest next update:     Sat 18 May 2024 16:01:01 +0000
Files and hashes:         1: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl (hash: ZdB0wme1Dizw4Qz0P1VA0tQiQBD1JDkOJzsDrjs5jMk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:09:ee:f7:ec:ca:15:0f:23:e6:69:b4:b4:6c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
        Validity
            Not Before: May 17 16:01:01 2024 GMT
            Not After : May 18 16:01:01 2024 GMT
        Subject: CN=0b8e6215958dbb99cff30eaa046b3a668835f067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:1b:36:51:f6:87:f3:9b:dd:5d:ee:55:a8:
                    04:91:e6:8a:e4:2d:71:f8:12:f3:72:e9:c6:ff:f6:
                    27:c5:1f:cf:e9:fa:ec:b4:a1:dd:90:aa:97:75:c8:
                    71:0c:91:40:c4:e6:db:d3:c1:17:cc:0a:cc:4e:55:
                    4e:2a:ff:5b:eb:df:14:02:03:25:c9:45:63:e8:f2:
                    2e:5f:25:f4:2f:e0:4f:5b:11:9f:0e:57:7c:c4:39:
                    93:9f:a3:21:ad:9f:77:3b:b4:8f:13:12:00:3c:af:
                    4f:b8:7e:5c:da:c0:20:af:a5:c6:45:93:09:82:31:
                    56:26:b5:a8:d3:d3:61:60:b4:cf:dd:18:05:11:4a:
                    70:6c:18:c1:0e:c2:f1:78:f4:06:85:56:83:3e:22:
                    04:7e:88:61:c3:5e:7c:5d:95:b6:4d:30:a9:08:fa:
                    82:54:fd:7c:fc:75:d3:62:c3:c1:73:c8:c4:b2:73:
                    7b:a6:86:88:6d:92:4f:b9:43:02:1b:2a:c1:a5:3d:
                    e9:cf:53:4b:76:53:72:c0:93:40:2e:7f:d8:73:1e:
                    f3:dc:fb:11:c0:50:07:b0:4d:74:53:92:e3:eb:72:
                    d6:9d:3f:1d:10:ca:fa:86:c7:8c:b6:bc:f4:3a:7d:
                    53:cf:10:37:7b:66:7f:a3:da:5e:20:13:d9:c0:79:
                    f1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:62:15:95:8D:BB:99:CF:F3:0E:AA:04:6B:3A:66:88:35:F0:67
            X509v3 Authority Key Identifier:
                keyid:23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:94:8e:82:ea:7e:66:7d:b8:9e:07:6d:6e:ef:08:ad:c8:
         3f:60:09:d5:47:1c:83:43:a6:79:cc:b6:a7:ee:07:1a:53:e0:
         25:45:20:b5:9c:95:b4:19:15:69:a2:1c:30:d9:30:66:8b:a4:
         cc:a2:f3:29:9d:51:2a:bf:32:a6:6e:13:bc:98:d3:33:4e:98:
         c5:e2:db:29:fb:5c:67:26:78:29:8d:43:de:0a:51:86:81:24:
         ea:14:7f:57:17:ea:58:e2:ed:26:63:9a:3a:a1:a0:ee:d0:09:
         22:12:b6:04:d8:a5:5b:3a:b2:c6:dd:07:0d:2d:cf:e1:be:8d:
         b7:9e:2c:38:5d:05:e1:e8:d2:25:08:3a:c2:cb:1e:cc:3d:6b:
         b2:40:4d:d7:9c:cb:bb:3c:7a:27:bc:76:96:16:16:82:b9:a1:
         00:2b:55:d3:b7:42:fc:bb:9a:e1:2b:17:57:c5:0a:ae:a4:6e:
         55:28:84:49:11:3f:bb:dc:dc:30:86:b0:70:70:fa:eb:a8:95:
         83:11:49:8b:ed:5d:78:6a:33:42:91:86:00:6b:25:c6:6e:ed:
         57:3c:7e:76:fc:b7:69:d3:ad:f4:22:10:1c:4e:58:60:88:49:
         fe:fb:3c:21:45:6c:d7:e3:ce:b0:77:93:ee:a9:e0:d9:ef:e5:
         66:10:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:38 2024 by rpki-client on console-fra.rpki-client.org