Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File:                     CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier:          NgPpreKLaLe51PQfmn69Qcpx2qShscs16j0JjKaDuC4=
Subject key identifier:   15:49:07:9F:06:DE:BD:8D:9D:10:65:C6:04:93:66:C6:AF:98:19:0B
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer:       /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial:       018F40B0EB7EDC9D1C00BEA57C8103FA002C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number:          1150
Signing time:             Fri 03 May 2024 23:01:27 +0000
Manifest this update:     Fri 03 May 2024 23:01:27 +0000
Manifest next update:     Sat 04 May 2024 23:01:27 +0000
Files and hashes:         1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: 7q7vqPf/SZ6vy1nCZSnchzgYX/PvATGoCHAWaPjvJmg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:b0:eb:7e:dc:9d:1c:00:be:a5:7c:81:03:fa:00:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
        Validity
            Not Before: May  3 23:01:27 2024 GMT
            Not After : May  4 23:01:27 2024 GMT
        Subject: CN=1549079f06debd8d9d1065c6049366c6af98190b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:3f:18:e1:83:fe:c1:b0:83:31:02:e9:a0:
                    aa:3a:85:b4:41:d7:98:1a:73:ff:c2:a4:68:51:27:
                    07:2c:03:56:eb:91:9a:46:71:15:e8:6d:db:24:46:
                    31:29:44:d4:fa:a8:b0:dd:b4:9c:92:fd:ed:f5:50:
                    1b:7d:07:d0:e5:7c:4f:d1:d1:bb:88:50:8f:6f:d4:
                    09:f3:75:ee:4c:7c:9a:4b:b7:1a:cf:d7:39:76:91:
                    0b:3b:8d:b9:73:98:81:5d:0a:ee:09:f4:8a:95:c4:
                    64:05:aa:b9:1d:d9:73:d8:ba:b3:73:3b:31:4d:f2:
                    d4:dd:3d:64:c4:80:7d:35:fc:3b:df:5a:13:75:76:
                    f6:17:73:38:e7:b9:8f:93:2b:b1:82:e0:f4:7d:78:
                    04:dd:eb:22:87:b0:5f:55:f1:3d:0d:91:f3:6e:9f:
                    d3:0a:d5:b5:d7:14:cc:c0:a1:e6:9a:2b:4e:d5:1d:
                    b5:8b:cf:bf:62:d5:da:79:96:4c:37:ba:14:f8:9a:
                    43:91:46:f1:ab:b8:9a:4a:ca:c4:f0:56:97:2e:e7:
                    13:ae:7d:ca:9c:16:68:fb:41:86:0b:bd:7d:36:62:
                    bc:60:13:4f:3f:c4:55:d8:8f:56:e3:7b:0c:5f:f6:
                    0e:fc:1c:53:67:f4:4f:41:df:30:be:f6:f8:80:18:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:49:07:9F:06:DE:BD:8D:9D:10:65:C6:04:93:66:C6:AF:98:19:0B
            X509v3 Authority Key Identifier:
                keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:fa:92:0c:13:0b:48:56:4e:ab:78:a8:23:50:5d:25:7e:5a:
         de:2b:09:48:91:9f:2c:29:1f:15:9d:9d:e9:4b:e4:2f:a6:b5:
         ac:94:c3:c8:ff:a6:7d:1b:16:c9:f1:74:a1:c2:67:a6:6d:41:
         a4:65:fa:02:d4:5f:b2:0b:cd:96:b3:e7:cb:40:ca:f8:0e:92:
         81:a2:c9:49:be:a9:44:7f:84:f1:d0:6e:96:ed:a4:fd:be:33:
         8b:2c:50:e8:03:6d:4a:51:59:a2:65:38:9e:fd:25:5b:d8:25:
         8d:cf:01:2b:5c:58:7d:07:2c:8d:52:e8:63:eb:cb:c9:db:63:
         11:b2:6d:6c:33:59:7d:53:86:36:50:ee:3c:d0:27:17:8d:04:
         89:54:fb:e1:0c:4c:12:c8:d9:7b:06:92:4c:42:9a:95:f2:7a:
         cc:19:52:fa:c8:ec:3c:98:7a:98:48:e7:dc:5b:0d:cd:90:29:
         67:29:47:96:38:5b:a8:96:b9:69:33:7f:40:25:2d:54:0c:59:
         30:e9:fd:75:63:b5:9b:56:e3:58:bf:72:48:59:e5:82:c0:c7:
         7a:95:5b:55:dd:06:69:6f:b7:b4:93:ea:8c:16:00:13:a3:7e:
         8b:ef:0d:e9:4a:dc:c7:0e:b3:5e:b4:99:f9:99:cd:0e:07:17:
         bb:f7:8e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:20:50 2024 by rpki-client on console-ams.rpki-client.org