Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File:                     Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier:          WWwo8ps4wuF/iTuLxBhVVXqqJsOyq1pw7FR8SSm+/K0=
Subject key identifier:   2C:ED:FE:76:81:E4:A8:38:49:59:4B:2D:02:91:FE:7B:E5:2B:57:C0
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer:       /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial:       018F3A77FA9219BDA5FE67D814778BFAF4AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number:          114C
Signing time:             Thu 02 May 2024 18:01:32 +0000
Manifest this update:     Thu 02 May 2024 18:01:32 +0000
Manifest next update:     Fri 03 May 2024 18:01:32 +0000
Files and hashes:         1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: G4Aez7lObTgLrpm6AEr8SNm0L8dzlN91oO/dkge5o3M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:77:fa:92:19:bd:a5:fe:67:d8:14:77:8b:fa:f4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
        Validity
            Not Before: May  2 18:01:32 2024 GMT
            Not After : May  3 18:01:32 2024 GMT
        Subject: CN=2cedfe7681e4a83849594b2d0291fe7be52b57c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:ca:80:ea:39:ab:2c:12:59:9a:49:c2:2a:
                    37:4b:a3:01:c5:94:05:6c:28:b1:b9:79:33:d7:f0:
                    8b:06:c0:59:32:27:de:25:1e:30:19:5e:f0:8f:94:
                    6d:6f:16:78:be:80:ef:ea:75:38:00:cb:18:61:9e:
                    65:de:0a:ad:22:68:30:e0:b3:6b:8f:e3:78:c1:ec:
                    10:b8:cd:13:75:8e:d7:5c:cd:7f:09:63:f7:2b:4a:
                    4d:70:e8:68:cb:75:c9:b1:cb:57:11:2b:31:bc:62:
                    9e:71:66:61:9e:31:ae:78:1c:5e:3e:92:22:9c:f3:
                    66:60:92:82:cc:fc:a7:13:e6:9a:77:93:fb:5d:fd:
                    d1:ad:ba:02:bd:da:aa:8f:1c:98:52:1d:98:30:51:
                    95:51:dd:f3:3d:2a:a3:fa:bf:da:96:7e:b7:76:4c:
                    d5:be:9a:11:e9:9d:55:d2:29:6d:84:90:02:2b:d6:
                    7e:b1:45:5e:46:bb:f2:da:9f:8b:5c:bb:31:2d:89:
                    0c:fa:0c:83:74:35:9c:c8:97:47:07:9a:77:80:84:
                    96:b3:10:8b:f9:5f:dc:3a:fe:9b:06:ae:da:13:bb:
                    60:2b:44:2c:74:bf:37:cb:8d:99:50:4e:f6:9e:27:
                    69:56:2c:f9:6a:2c:b5:9d:78:77:8a:6e:8c:fa:82:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:ED:FE:76:81:E4:A8:38:49:59:4B:2D:02:91:FE:7B:E5:2B:57:C0
            X509v3 Authority Key Identifier:
                keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c7:fb:d9:3e:87:ae:02:26:b4:ba:bd:67:49:4e:85:3d:b5:
         58:0d:6a:8d:e1:bf:ee:d8:60:e7:65:02:82:49:15:53:28:20:
         df:3a:97:38:08:9c:96:24:80:e7:5a:4a:f6:0c:8e:e1:97:7b:
         e8:37:8a:03:c6:75:32:6b:88:f0:08:c3:29:5e:8f:6a:90:0c:
         78:93:bf:89:bc:98:a2:06:54:a9:df:62:24:1d:e0:61:06:77:
         5b:b0:ed:3f:d3:f5:b2:57:a0:99:6a:fc:44:18:01:78:bc:e4:
         ed:9e:b4:a0:3b:4e:53:b2:8c:53:d4:64:3c:0a:31:17:61:9a:
         77:c2:e1:2f:e2:38:b4:ca:45:4c:75:2c:dd:db:10:e6:b6:9f:
         66:a9:05:2e:d0:e4:7f:11:b0:ea:25:e0:3c:15:04:ba:af:cb:
         cd:ac:12:08:91:01:10:11:f1:95:e2:3a:c6:82:08:32:fa:c4:
         bd:8d:16:73:6c:98:04:b3:96:bc:3f:06:1a:60:58:05:aa:9f:
         1e:03:c2:0f:ed:4e:32:5b:85:e8:5a:3f:bf:dc:e3:e6:71:08:
         da:1b:4e:79:c5:5f:ff:22:ce:67:54:c2:8e:99:bf:98:53:4d:
         bc:0c:06:cc:ab:5d:49:bf:a1:0e:70:b9:ea:84:7e:ce:6b:cb:
         19:f5:74:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:21:47 2024 by rpki-client on console-fra.rpki-client.org