Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
File:                     2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft (raw, json)
Hash identifier:          U9FjVEfcn2OgHmpfvcMghJxW9eqiH1XsVESXrTH82Ps=
Subject key identifier:   B6:0F:41:E4:5E:E6:1B:AC:3D:C3:64:C6:35:FA:FC:96:51:BC:F1:74
Authority key identifier: D9:B2:28:11:DF:86:12:3D:71:AF:5B:99:8A:21:0C:23:EB:1D:5E:FA
Certificate issuer:       /CN=d9b22811df86123d71af5b998a210c23eb1d5efa
Certificate serial:       018F58F15A7B100C2899B4362223BAB0F453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
Manifest number:          0A9D
Signing time:             Wed 08 May 2024 16:02:43 +0000
Manifest this update:     Wed 08 May 2024 16:02:43 +0000
Manifest next update:     Thu 09 May 2024 16:02:43 +0000
Files and hashes:         1: 2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl (hash: /EfombiANHuM0hFAl/fok4Hz67q7xZ6oMW9LTbBaX/0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f1:5a:7b:10:0c:28:99:b4:36:22:23:ba:b0:f4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9b22811df86123d71af5b998a210c23eb1d5efa
        Validity
            Not Before: May  8 16:02:43 2024 GMT
            Not After : May  9 16:02:43 2024 GMT
        Subject: CN=b60f41e45ee61bac3dc364c635fafc9651bcf174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:03:5e:c8:4d:85:40:eb:d2:8b:8c:90:d1:
                    b4:22:47:e8:9c:00:7a:9c:12:cf:91:da:5e:7e:78:
                    44:99:0a:c5:ae:7a:6c:39:21:1c:29:a4:2b:2d:dd:
                    84:a5:44:b2:f9:ce:42:1d:7a:9a:bc:07:c4:55:07:
                    ec:3a:9a:43:be:6d:e1:dd:2e:47:f2:0d:9e:56:a2:
                    ad:5f:57:b6:03:42:ab:59:24:40:ed:49:95:87:2d:
                    6b:2e:6e:38:f9:55:90:ac:95:59:a2:d9:16:99:de:
                    16:4f:03:14:9d:ef:5c:00:f4:a3:9d:7e:51:d3:e6:
                    be:26:f1:23:cd:19:0e:a7:27:bb:18:a0:eb:27:62:
                    6f:3b:b9:08:49:ea:c1:1a:d6:13:52:00:25:a5:b5:
                    5f:33:49:8f:c0:de:28:67:a4:ca:ab:82:53:01:0f:
                    cf:69:08:61:fa:23:5d:3b:e8:e9:d8:75:5b:53:48:
                    d7:ff:9e:f4:3e:76:ba:6f:d5:b1:37:a4:a4:ca:45:
                    a0:bb:b3:1b:5a:16:a9:29:cc:14:ec:6d:50:15:ab:
                    ad:29:ee:bc:52:75:db:a9:a0:88:e9:e2:f8:a7:fc:
                    ab:ff:c5:69:d9:3a:44:b3:0a:ce:6d:27:34:1f:b3:
                    ee:90:50:ea:7a:f7:6d:dd:7c:27:0c:9c:7b:e4:53:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0F:41:E4:5E:E6:1B:AC:3D:C3:64:C6:35:FA:FC:96:51:BC:F1:74
            X509v3 Authority Key Identifier:
                keyid:D9:B2:28:11:DF:86:12:3D:71:AF:5B:99:8A:21:0C:23:EB:1D:5E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a5:05:80:d9:7a:86:9e:0a:1a:a8:00:ad:86:e4:95:f5:d2:
         06:f2:6d:2c:b7:84:50:5a:1d:6d:6f:3b:7c:67:ea:89:d8:11:
         fc:f7:fb:42:cb:c3:32:99:96:24:7f:41:2f:12:2f:70:42:ac:
         0b:b2:9c:dd:d3:2c:c1:ee:fb:05:aa:76:19:af:1f:e9:28:73:
         c3:e6:9b:64:a1:81:b6:fc:64:d3:6c:3f:b1:a3:0f:99:0d:20:
         a1:b6:9e:ba:09:8a:19:12:b5:65:77:f3:cb:47:a3:d9:fb:32:
         5d:4e:08:ad:6d:3f:04:d1:56:34:06:b2:0d:44:47:3d:6d:8e:
         d0:8c:c4:56:cb:86:3a:29:cf:e3:4a:3b:20:c2:0d:ce:fd:aa:
         a6:07:aa:b2:66:88:5d:40:dd:66:bf:fe:02:7a:9b:c1:f9:ad:
         7e:4c:0b:f4:f2:4f:eb:34:b5:5b:3c:90:22:c7:ca:40:64:29:
         f0:fc:c9:fa:49:f2:7a:07:0e:1a:6e:49:8a:8a:70:54:8e:2f:
         a9:4f:cf:df:38:bd:86:f2:91:d3:c9:bf:c2:de:26:58:88:15:
         ac:ab:ca:e2:70:8d:5b:07:64:27:7b:30:1c:ee:1b:31:c3:2b:
         69:6b:9b:1d:98:62:45:1a:fd:28:9e:4b:be:75:f4:2e:34:c6:
         57:84:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:49:57 2024 by rpki-client on console-fra.rpki-client.org