Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
File:                     2u6A610wBIVU0K79Q7zu0z791Kk.mft (raw, json)
Hash identifier:          L/d5NdmwYmZ94tU3SftKVlaaKkJUBhl0rKLdOlTsORI=
Subject key identifier:   AE:B4:B5:94:E9:49:58:DF:41:F2:7B:B4:61:FA:C2:58:BD:67:9C:68
Authority key identifier: DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
Certificate issuer:       /CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Certificate serial:       018F362EE343ACCD02246644B94BA20E4E9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
Manifest number:          0DDD
Signing time:             Wed 01 May 2024 22:03:13 +0000
Manifest this update:     Wed 01 May 2024 22:03:13 +0000
Manifest next update:     Thu 02 May 2024 22:03:13 +0000
Files and hashes:         1: 2u6A610wBIVU0K79Q7zu0z791Kk.crl (hash: secxOIwIEAIqa8mlSsOBbV9/9cKgIPjouLBN1qwXS5k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2e:e3:43:ac:cd:02:24:66:44:b9:4b:a2:0e:4e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
        Validity
            Not Before: May  1 22:03:13 2024 GMT
            Not After : May  2 22:03:13 2024 GMT
        Subject: CN=aeb4b594e94958df41f27bb461fac258bd679c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:9b:90:6c:0c:5b:49:a5:a2:90:2d:cd:b1:
                    4b:92:e0:68:de:23:b8:ac:1f:df:7c:d0:ae:f2:82:
                    96:9e:73:fa:30:21:91:8d:66:9c:fb:b5:83:e1:42:
                    58:bb:fc:6a:3d:37:77:d4:c1:3c:b0:f7:84:0e:34:
                    27:a3:1c:e2:a5:0d:59:dc:c7:b8:78:fd:a9:4f:d6:
                    15:fe:f9:c8:7b:38:56:97:4d:69:99:11:19:0c:cb:
                    5e:30:b4:bf:7f:0f:85:9b:09:2a:14:7e:48:18:74:
                    41:7e:dc:6b:cb:a6:95:a4:27:45:cc:7b:02:f6:f5:
                    8d:5e:5d:7d:f7:46:1a:41:55:6f:5b:0a:a5:36:97:
                    bb:6a:f2:e8:c3:08:34:3b:bb:1f:33:b5:29:ed:53:
                    d3:6e:c9:13:6d:71:bd:2d:2b:14:88:50:e9:b1:95:
                    81:9e:60:44:dd:cc:bf:15:22:93:fd:d1:d5:a2:af:
                    09:ca:7c:c6:50:d0:3e:ea:49:20:06:02:cd:9f:06:
                    2c:e9:e0:d0:6e:56:65:ef:94:8c:1b:fc:ce:86:e6:
                    fa:d6:a4:79:8b:b0:3c:eb:36:48:d1:b4:2f:fd:f3:
                    e2:35:4b:8a:34:65:42:6f:f4:9a:fa:d8:2f:5f:10:
                    37:0e:4a:36:38:ca:7a:30:f6:5a:6e:41:d1:90:79:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B4:B5:94:E9:49:58:DF:41:F2:7B:B4:61:FA:C2:58:BD:67:9C:68
            X509v3 Authority Key Identifier:
                keyid:DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9b:db:c2:6c:8d:c2:5f:ad:41:b7:10:09:d4:e3:21:50:c5:
         62:b7:48:7f:84:43:5f:88:37:54:d5:d6:42:f0:b8:02:16:b6:
         c0:16:ca:b8:be:89:74:b7:ee:8d:d2:7a:20:e8:6c:f7:7a:33:
         55:56:31:5f:8f:50:dc:42:f9:93:e3:ba:80:e5:0e:9a:ba:6e:
         70:b1:7c:6f:37:50:7e:bb:c5:49:0d:4e:82:63:ba:46:67:b7:
         d7:5f:b5:f7:44:df:22:26:0a:b2:e7:70:fb:83:72:f2:96:fc:
         ef:ea:c0:47:8f:ac:19:22:ee:90:c0:81:c0:5e:db:95:01:4a:
         df:0d:8b:50:db:38:67:54:60:be:44:c2:9f:25:e5:cd:ba:e1:
         32:ea:9b:b6:5b:2f:7e:b5:24:cd:7b:ea:15:90:77:39:2c:b2:
         bb:03:85:aa:f6:e0:51:6d:fb:8b:9d:75:59:6b:ff:a2:5e:d3:
         57:b4:18:24:89:89:c6:09:31:ce:0a:ec:f7:8b:f1:f0:e6:f0:
         84:d5:96:f8:6c:f4:ca:5f:9b:24:98:bb:9e:5a:1c:19:b8:5a:
         89:5e:3a:dc:d6:cf:01:8f:8c:0f:81:23:99:ea:c9:e9:21:20:
         de:46:cc:bb:c0:83:4b:69:ed:1b:cf:c8:18:63:a7:4e:35:0a:
         90:62:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:03:47 2024 by rpki-client on console-fra.rpki-client.org