Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File:                     Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier:          hT14y2FBhVoj+WZvtmTMnEcy2bwSh/wDvGsjwNdAbzk=
Subject key identifier:   4D:0F:43:9B:9A:31:4E:E5:06:1E:B8:BB:4C:37:B5:01:1F:D7:4B:79
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer:       /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial:       018F4DFE966D986FDDE53AD2B0EC7B38C85F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number:          1157
Signing time:             Mon 06 May 2024 13:01:21 +0000
Manifest this update:     Mon 06 May 2024 13:01:21 +0000
Manifest next update:     Tue 07 May 2024 13:01:21 +0000
Files and hashes:         1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: /2Kom6RGmThEZWjeGAl4qN+SMJ+zNUeHF75LnTbU28g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:fe:96:6d:98:6f:dd:e5:3a:d2:b0:ec:7b:38:c8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
        Validity
            Not Before: May  6 13:01:21 2024 GMT
            Not After : May  7 13:01:21 2024 GMT
        Subject: CN=4d0f439b9a314ee5061eb8bb4c37b5011fd74b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:98:30:27:f1:ad:a8:8b:75:57:2c:2b:52:
                    37:59:1c:d7:e4:3e:e7:49:d6:be:ff:88:f4:2f:74:
                    96:c8:29:54:5b:50:9e:4b:7e:65:06:db:e6:06:ee:
                    3d:02:db:37:d5:03:0e:ac:d8:28:99:7d:0a:37:4c:
                    08:de:f2:de:1f:75:f9:6d:e5:7e:2b:4e:d7:94:7d:
                    e4:fe:1a:47:b1:80:29:4e:3f:ca:ed:dc:84:16:35:
                    16:31:62:a2:99:69:8c:44:75:79:08:6d:d0:e7:3c:
                    64:48:a7:63:d9:dc:5d:6e:8e:72:b3:ba:9e:e1:ef:
                    4f:7d:e4:c8:a0:d9:d1:fe:07:32:4c:6f:b9:90:ad:
                    2a:b6:76:6d:c5:34:d2:77:98:a7:ce:58:cd:cb:27:
                    c2:05:18:1f:aa:fb:8a:a5:5e:ed:e1:b4:a2:2f:3b:
                    3b:ab:5f:eb:63:03:e0:11:6a:25:71:d3:76:da:cb:
                    7c:fc:1a:de:93:92:37:fa:49:ed:5b:6c:e1:b0:28:
                    17:78:fd:7d:56:34:a2:e5:f1:f7:98:8c:ca:14:6f:
                    77:9e:43:a7:e4:d3:ea:d9:a0:fe:23:06:f6:40:06:
                    62:43:9c:7e:87:37:3a:2f:d1:bd:8d:6b:20:95:99:
                    bc:b2:19:61:a8:fb:67:58:4b:71:c7:b3:7f:fe:50:
                    34:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0F:43:9B:9A:31:4E:E5:06:1E:B8:BB:4C:37:B5:01:1F:D7:4B:79
            X509v3 Authority Key Identifier:
                keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:5f:ae:52:1b:d6:d6:9f:0f:bf:08:9a:10:e3:d2:91:36:91:
         82:e0:18:84:9f:4c:a5:d5:da:1f:23:97:49:7d:a5:85:45:4c:
         e7:77:1f:cb:53:b7:5f:5f:31:e3:ce:44:5f:3f:bf:bc:1d:1b:
         d1:d4:5e:ec:3e:5f:ea:c3:72:9d:95:3d:11:49:d0:e6:d1:5c:
         e8:5f:7d:78:2c:e4:73:58:ab:80:64:51:6b:fa:98:f0:b1:94:
         0c:3a:c2:5e:d0:97:d2:be:12:8e:e1:03:90:1a:00:fd:ac:30:
         c6:31:20:00:09:e2:52:26:76:3e:7c:e5:bf:70:df:98:2a:9b:
         46:d1:b9:60:72:d5:02:2f:67:36:eb:03:b2:1e:20:01:97:f6:
         bd:7d:d8:5a:f4:79:5c:94:85:83:1f:be:83:e6:91:c4:4b:bc:
         ad:3d:a2:ae:e4:48:e2:44:24:bd:f0:b9:03:a7:c9:59:cb:35:
         f2:3f:bd:89:15:6c:12:15:b0:70:c5:56:a7:6d:3c:28:9b:89:
         89:c0:3d:18:cd:99:2c:ca:20:6e:d9:32:6b:7f:8a:c1:72:42:
         56:3f:c5:14:cc:0f:e9:39:0c:07:08:a2:20:25:c3:9e:6d:5b:
         14:77:98:f1:ec:ab:82:4f:19:0b:8c:66:ad:18:c4:b3:5b:4f:
         5d:5b:85:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:49:52 2024 by rpki-client on console-ams.rpki-client.org