Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File:                     xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier:          mPHjwnPQVS0Zc22RVfYhr/11xErWzrmQMEswSVFDJ90=
Subject key identifier:   5B:B0:69:11:B3:ED:B3:F8:0A:00:8B:14:AB:F0:C5:04:81:47:FA:8E
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer:       /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial:       018F88246EA54807104F7BC35AE15CE698F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number:          0C79
Signing time:             Fri 17 May 2024 20:00:39 +0000
Manifest this update:     Fri 17 May 2024 20:00:39 +0000
Manifest next update:     Sat 18 May 2024 20:00:39 +0000
Files and hashes:         1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: oyZWiMWpXjeOLuHUrI+MJ+TjziU+Hjkvn9lyK8ZXZH0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:6e:a5:48:07:10:4f:7b:c3:5a:e1:5c:e6:98:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
        Validity
            Not Before: May 17 20:00:39 2024 GMT
            Not After : May 18 20:00:39 2024 GMT
        Subject: CN=5bb06911b3edb3f80a008b14abf0c5048147fa8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:bc:c0:89:5b:b7:2b:85:fd:ad:ea:80:17:
                    49:60:ac:82:ac:86:89:bc:4c:88:89:ca:02:96:2a:
                    50:5e:14:9c:f6:48:08:05:83:b1:b1:ea:0b:99:14:
                    3f:4e:0a:c2:20:3b:fe:90:d9:9c:3f:57:54:44:0a:
                    0c:fe:cc:76:97:58:04:33:a7:5c:05:94:5f:05:b2:
                    cf:0e:6d:df:4c:f2:50:25:9b:5e:df:6d:f2:7c:04:
                    3d:fc:10:9d:d2:79:b7:fc:27:48:2f:b1:8f:93:31:
                    fb:07:f9:3c:2a:15:4d:f6:b8:c6:2a:24:af:a4:0f:
                    52:71:03:5e:20:d5:6d:b4:fc:fa:fe:47:c2:32:bf:
                    a6:e5:bb:21:f8:53:53:2b:95:e9:4b:22:9e:21:99:
                    ed:e7:32:0d:8c:22:a4:a2:b8:6a:c0:50:db:88:00:
                    c4:bc:02:68:92:f9:15:5f:26:8a:5d:13:cb:da:f2:
                    6e:ee:43:24:a7:8f:fd:9f:11:c4:04:6f:a7:ea:f4:
                    cf:b5:46:05:1a:f7:41:4d:ae:c0:52:e3:0e:ac:1b:
                    3d:e1:80:64:17:c7:d6:71:50:38:c9:f1:18:c3:94:
                    42:62:43:a9:4b:a7:39:2d:6e:cc:a8:5d:a8:19:ae:
                    dc:cb:01:78:d4:f9:3c:fe:f8:bd:7b:d4:8c:fa:c9:
                    e3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B0:69:11:B3:ED:B3:F8:0A:00:8B:14:AB:F0:C5:04:81:47:FA:8E
            X509v3 Authority Key Identifier:
                keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f5:d4:6c:d0:4a:17:82:2c:d4:7c:21:b6:78:69:b3:36:11:
         03:62:6e:5e:71:69:9e:6e:41:42:89:cc:f0:41:42:19:29:a2:
         bc:4f:c7:be:5b:8c:62:ce:4d:2c:e2:c7:e4:52:14:f4:64:d3:
         50:fa:ca:d3:e6:7e:02:00:ee:a2:2f:f5:46:43:29:8e:19:18:
         ff:e5:28:c8:04:a4:f8:be:77:7b:5c:88:7f:05:12:77:a0:16:
         16:06:e5:91:ac:6c:93:0e:f6:07:0f:06:fe:a8:05:51:37:eb:
         9f:9e:e1:71:55:36:b3:fe:a4:3f:b3:05:46:6f:8d:ab:ad:b7:
         f4:be:f1:d3:8a:34:52:97:94:26:67:c9:11:2c:39:f3:5e:cc:
         43:41:0b:00:29:d7:e7:a8:ec:26:98:1a:b6:9a:16:c2:a8:a8:
         78:b8:1b:32:37:6e:e3:83:ee:c4:27:e0:1d:a2:aa:72:f3:1a:
         7e:86:e4:1e:a9:2c:55:60:06:15:03:ec:74:6e:7d:69:d5:16:
         79:af:90:1a:dd:0c:d0:94:73:dc:c5:3a:1d:e7:fc:30:b0:7a:
         ea:d0:4c:83:73:47:a6:0e:14:73:e7:21:33:1a:b5:d3:e2:b8:
         e8:95:26:aa:fd:f5:80:bf:08:53:4a:40:d4:61:4a:cb:83:02:
         52:a8:dc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:04:56 2024 by rpki-client on console-ams.rpki-client.org