Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
File:                     DdgdNYjH4QqJmw0EgVZubZSNrdA.mft (raw, json)
Hash identifier:          1O9kZVtFqHhFhmpJsWMozeNxyT9cV1Zb5mN0ucT0JH8=
Subject key identifier:   2A:1D:EF:47:84:88:25:28:82:46:8C:27:D5:A1:17:EF:5E:01:CD:58
Authority key identifier: 0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
Certificate issuer:       /CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Certificate serial:       018F3D41988A02733D21C6D55D5244C45213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
Manifest number:          114E
Signing time:             Fri 03 May 2024 07:01:00 +0000
Manifest this update:     Fri 03 May 2024 07:01:00 +0000
Manifest next update:     Sat 04 May 2024 07:01:00 +0000
Files and hashes:         1: DdgdNYjH4QqJmw0EgVZubZSNrdA.crl (hash: i6yBmoX4vTuPkA4WuvfMS3imY9F8fAPmD/Zo5nK/4xg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:41:98:8a:02:73:3d:21:c6:d5:5d:52:44:c4:52:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
        Validity
            Not Before: May  3 07:01:00 2024 GMT
            Not After : May  4 07:01:00 2024 GMT
        Subject: CN=2a1def478488252882468c27d5a117ef5e01cd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:69:97:d0:38:54:2f:df:5e:97:46:6f:47:
                    34:ed:66:a2:23:fd:2e:16:10:14:a2:76:ab:3b:5f:
                    a7:b6:e8:8c:90:26:82:db:c8:50:d2:c6:97:fa:56:
                    c3:ec:c0:ee:ca:d4:ae:3e:16:b7:4e:95:f4:55:5f:
                    99:5c:a6:11:d7:81:d9:87:aa:7a:9d:63:e9:36:e7:
                    8c:a0:d6:55:cd:2a:78:23:13:f6:d6:d7:54:ae:de:
                    81:6c:04:fa:2c:c9:51:f1:dd:db:17:c5:e6:b5:9a:
                    f1:e5:21:96:36:d2:42:93:49:16:e9:6c:bd:b5:06:
                    a5:fa:91:94:b0:b2:ba:62:fd:9f:a7:03:b4:36:ae:
                    4a:8c:cd:2f:0b:9b:75:1e:55:6f:2d:69:67:de:d3:
                    c8:52:eb:18:fc:2b:31:49:bb:65:07:03:30:23:dd:
                    57:cf:83:95:40:29:f6:bb:78:71:18:ce:60:09:bc:
                    08:d8:4d:7b:13:45:dd:f9:25:37:ad:3f:06:97:82:
                    40:31:aa:aa:3b:30:e7:1e:0c:79:91:14:ba:4b:c7:
                    68:1e:ee:97:3e:b6:48:89:d2:00:14:91:81:85:37:
                    a2:96:d7:d3:d0:65:0f:9a:10:8a:cd:0f:f7:7c:c3:
                    ab:47:e5:22:4f:05:d0:75:b5:e2:95:90:a3:71:9d:
                    51:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1D:EF:47:84:88:25:28:82:46:8C:27:D5:A1:17:EF:5E:01:CD:58
            X509v3 Authority Key Identifier:
                keyid:0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:64:0b:38:42:3c:22:2c:3e:13:8a:f3:05:33:98:10:64:7a:
         24:29:31:f3:b7:76:e4:53:44:02:df:ff:06:05:9a:02:9e:02:
         a0:f4:b6:19:c4:a7:8d:fe:1e:ab:51:47:fa:23:27:32:34:9e:
         6a:d7:7e:f0:7f:28:05:ed:75:5d:a2:78:0c:36:30:99:90:e8:
         ac:38:7c:04:a5:44:ed:fe:8b:4e:80:94:40:13:ae:dc:9b:dc:
         11:0c:ab:88:81:3d:4f:ee:66:29:78:2d:dc:fb:20:06:c1:73:
         64:a2:0c:48:ed:e8:60:67:fb:22:ae:05:f4:d3:fe:bf:a3:25:
         d9:ae:f7:cc:4c:0e:87:bc:51:8e:7a:30:73:8b:ea:20:58:fe:
         cd:8b:b7:40:ab:c1:3a:66:03:4b:60:a7:94:86:86:5f:ce:f7:
         4f:7e:0c:19:12:df:1d:26:44:c2:58:b0:94:35:2b:8c:a9:03:
         7f:9f:e3:ef:18:44:0f:ea:3e:0b:7a:db:a1:1a:b2:c2:a0:44:
         a2:e3:a6:9a:78:86:f1:df:ee:ca:ec:0d:f2:b4:3a:2d:d9:f0:
         80:76:51:3f:0a:af:0f:9a:98:66:0c:a6:74:08:39:95:98:a1:
         50:34:ac:fe:c6:0f:fa:3a:73:13:75:a7:c7:a7:99:57:68:e8:
         5f:2e:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:53:29 2024 by rpki-client on console-fra.rpki-client.org