Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
File:                     0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft (raw, json)
Hash identifier:          Av+AjhFQ6C5CK7Pgc0TKDqgrvTJfYFzInLk/zK5VP1Y=
Subject key identifier:   60:8A:3C:9C:2C:D3:5C:F0:66:AC:ED:B6:28:B5:D0:22:84:53:DB:0C
Authority key identifier: D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B
Certificate issuer:       /CN=d02ea90148d4e688c9492d9467159cd10575591b
Certificate serial:       018F874A2FFC4291915BEBC792E8C2BD5725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
Manifest number:          02A7
Signing time:             Fri 17 May 2024 16:02:17 +0000
Manifest this update:     Fri 17 May 2024 16:02:17 +0000
Manifest next update:     Sat 18 May 2024 16:02:17 +0000
Files and hashes:         1: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl (hash: tWFnWM1bt97rhOfw1j2sWQgkuF2cGkJfMRAvK8j9wWg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:2f:fc:42:91:91:5b:eb:c7:92:e8:c2:bd:57:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02ea90148d4e688c9492d9467159cd10575591b
        Validity
            Not Before: May 17 16:02:17 2024 GMT
            Not After : May 18 16:02:17 2024 GMT
        Subject: CN=608a3c9c2cd35cf066acedb628b5d0228453db0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:42:4b:8c:4d:b6:d9:0d:95:9b:67:bb:90:5f:
                    87:41:bb:3d:98:c1:df:09:ee:fe:c7:86:9a:17:8b:
                    ac:87:bb:55:13:4d:1e:66:12:aa:0e:f5:59:ae:c7:
                    bb:ec:af:63:43:dd:fa:c4:12:cf:62:e5:9d:1a:da:
                    62:bf:2e:78:c5:8a:be:51:f3:9b:8d:91:a5:54:ff:
                    e2:68:e8:3a:99:03:7a:a7:53:40:1e:fa:0a:79:d2:
                    f7:02:75:0b:26:ad:59:ac:de:53:49:ef:f1:87:b0:
                    e1:c3:6b:31:80:ea:29:be:eb:f1:98:89:c5:0d:c7:
                    0c:14:64:05:a5:d1:37:45:3c:63:b5:ec:c2:48:92:
                    6b:ff:e1:cf:fe:c9:44:f4:94:5e:e7:f1:53:9a:33:
                    04:3d:10:8e:8c:d5:6e:99:74:61:ce:a5:06:b5:42:
                    dc:d8:c2:ce:74:7b:07:4e:1e:92:e0:fa:7e:99:10:
                    6e:bd:bf:14:e9:dd:69:2f:27:d7:3b:5f:ed:81:f5:
                    9c:42:28:70:85:0f:19:22:7e:86:33:f5:c8:ce:03:
                    65:70:53:e4:ff:20:bb:5c:9f:62:4f:0f:9d:ee:e5:
                    60:ce:0e:29:8a:39:44:3f:92:2e:fe:96:f1:5b:05:
                    02:6a:fd:cf:4a:ea:aa:ee:9a:5c:e1:0c:43:d4:69:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8A:3C:9C:2C:D3:5C:F0:66:AC:ED:B6:28:B5:D0:22:84:53:DB:0C
            X509v3 Authority Key Identifier:
                keyid:D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:8b:74:b6:6c:5f:91:76:77:ac:1d:c9:66:73:95:22:ad:ac:
         76:b6:9e:a3:e2:e9:c8:8c:6f:fc:0c:fa:23:31:4d:90:ba:1f:
         d5:25:3e:b6:20:f8:59:fa:90:6d:51:db:cc:72:10:8e:e0:f9:
         15:51:97:ab:49:90:57:4b:38:cf:73:61:1d:df:77:43:08:60:
         ab:0d:19:c7:53:fa:55:9e:fc:e4:8e:f8:52:0f:c0:42:cd:b3:
         d7:76:dc:17:f6:bb:10:f3:1d:61:8a:5d:8a:98:82:0c:7c:8f:
         63:98:10:7e:b7:02:62:a9:7f:91:df:bc:7a:8b:db:17:c9:bd:
         d4:0a:0d:86:44:1e:48:6c:c8:30:cb:13:0d:bd:b1:73:bd:e1:
         75:2d:c0:67:50:b7:e4:d3:04:10:d8:86:0f:c6:bf:a5:a4:22:
         83:59:fb:22:aa:a1:57:8e:49:b3:13:05:d1:fc:c0:11:da:1d:
         0b:fe:18:1b:85:9c:d3:11:56:3c:f1:8c:68:bc:17:b4:62:ca:
         49:32:ae:2f:d1:3c:e7:55:a5:19:55:80:d5:f7:86:28:2a:b7:
         62:a8:23:5c:15:5a:c6:88:4a:5f:17:df:e1:31:d9:c7:75:af:
         e3:99:f9:aa:33:2a:47:a4:f8:96:5d:aa:84:82:3f:86:26:d4:
         2b:cb:47:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:35 2024 by rpki-client on console-fra.rpki-client.org