Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File:                     9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier:          iWv/ikaVCVLJTFWXIgI+16i7+Q73uOzb6yPG3heO5/Q=
Subject key identifier:   8F:E7:3E:B9:2C:1D:A9:A1:3A:88:8F:4E:1E:18:AD:76:19:21:48:74
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer:       /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial:       018F43B2A03CD2DE8893F2ACA04BB6CE62BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number:          0DE3
Signing time:             Sat 04 May 2024 13:02:10 +0000
Manifest this update:     Sat 04 May 2024 13:02:10 +0000
Manifest next update:     Sun 05 May 2024 13:02:10 +0000
Files and hashes:         1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: meuJbkfs1kbrp8Q8VJfZFW65JKCXMmbhKPqvo6KZRis=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:a0:3c:d2:de:88:93:f2:ac:a0:4b:b6:ce:62:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
        Validity
            Not Before: May  4 13:02:10 2024 GMT
            Not After : May  5 13:02:10 2024 GMT
        Subject: CN=8fe73eb92c1da9a13a888f4e1e18ad7619214874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:3d:3a:75:fa:4a:42:9f:bc:27:45:e9:6b:
                    55:aa:4e:ea:ff:f8:21:e8:6b:1e:4f:f3:68:3f:d6:
                    9e:40:df:b3:16:64:1f:3b:f8:b0:c6:45:ad:6d:76:
                    4d:bb:d5:b6:ad:90:43:cd:df:8c:15:78:8e:c1:8e:
                    aa:2e:c6:c4:bd:98:51:6e:f1:e8:e0:99:a7:d5:e3:
                    ec:1d:98:13:9f:6e:cc:52:e0:0a:9e:ac:4c:b8:ae:
                    af:11:8c:29:7d:24:67:17:fc:3c:eb:aa:8d:fe:de:
                    42:cb:8c:b1:21:03:c3:99:29:58:a5:03:b5:67:37:
                    26:d2:35:2f:72:50:30:a3:72:1b:f7:ae:02:06:df:
                    1f:2f:b5:eb:c5:19:2a:6f:f1:99:7c:a9:f8:c4:23:
                    32:21:26:d8:f7:ce:97:6c:bb:4f:c1:3a:45:36:e1:
                    a5:fe:a9:22:54:00:67:ab:42:99:72:29:37:42:9a:
                    bf:1a:91:d8:f4:4a:c9:19:14:ee:14:3d:d0:56:89:
                    4e:a3:3c:dc:75:f9:6d:8a:f3:d2:f9:48:56:c0:30:
                    aa:93:d8:1c:58:cb:b0:46:39:8a:fe:af:6a:06:9a:
                    b8:6c:84:aa:b8:08:bb:f1:26:54:6c:41:33:3b:15:
                    ea:b6:a2:b0:1f:eb:57:38:bd:fc:e2:71:1b:8e:9d:
                    e5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E7:3E:B9:2C:1D:A9:A1:3A:88:8F:4E:1E:18:AD:76:19:21:48:74
            X509v3 Authority Key Identifier:
                keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2a:a0:fd:f2:b1:22:46:8a:27:96:4d:f8:4e:73:b4:ce:d3:
         e3:fa:31:a8:51:03:d4:71:54:43:ba:41:b3:ee:1e:b5:91:16:
         4c:2a:85:92:5c:e2:e8:fa:64:57:7f:1d:07:95:ba:3f:2d:fc:
         a8:55:69:1a:19:34:ac:5d:56:41:74:94:f2:de:17:da:11:6d:
         e9:2b:f7:80:1d:a3:a1:64:82:69:24:63:46:5f:50:db:ca:96:
         2c:05:d6:bb:9b:1b:9f:8a:75:f3:fb:08:de:e4:c9:81:5b:7c:
         75:f4:2d:12:43:bc:eb:58:a7:cf:5e:25:47:a8:e6:8b:42:92:
         b8:9e:1d:ee:8c:4f:af:84:a6:f2:d3:6e:51:e1:0f:c2:58:75:
         e0:8d:e9:65:27:70:28:00:b0:69:ca:5f:f7:25:2f:0b:d3:e5:
         65:9b:52:08:65:d1:e4:4c:ee:e8:58:88:98:6a:ca:f8:fd:37:
         d7:e8:45:98:4a:53:8d:e2:95:a9:ab:9e:5f:59:e5:24:55:52:
         99:e6:d8:ab:f6:62:ac:ee:d0:97:c0:18:95:bf:2b:5a:9c:eb:
         88:52:6e:80:52:a9:3a:da:46:ab:53:15:92:38:83:09:fd:bf:
         99:18:66:8d:ae:8c:40:49:11:bf:75:28:30:24:ff:24:9d:bc:
         7b:84:02:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:11:55 2024 by rpki-client on console-ams.rpki-client.org