Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d1a78-984b-4abf-8536-5e86af418668/1/IEuv_DD54JETAwYv-cjuGcMJvhk.mft
File:                     IEuv_DD54JETAwYv-cjuGcMJvhk.mft (raw, json)
Hash identifier:          P+up1lP6Ar/HUj/K+4AkVIJElIQtJ86MX7knfpq5XGk=
Subject key identifier:   D8:EC:6F:91:DB:CB:53:B5:CF:BA:07:66:F9:0D:CC:5E:4C:13:D0:27
Authority key identifier: 20:4B:AF:FC:30:F9:E0:91:13:03:06:2F:F9:C8:EE:19:C3:09:BE:19
Certificate issuer:       /CN=204baffc30f9e0911303062ff9c8ee19c309be19
Certificate serial:       018F3BF82561C8B58527994B3D66CE060874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IEuv_DD54JETAwYv-cjuGcMJvhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6d1a78-984b-4abf-8536-5e86af418668/1/IEuv_DD54JETAwYv-cjuGcMJvhk.mft
Manifest number:          114E
Signing time:             Fri 03 May 2024 01:01:09 +0000
Manifest this update:     Fri 03 May 2024 01:01:09 +0000
Manifest next update:     Sat 04 May 2024 01:01:09 +0000
Files and hashes:         1: IEuv_DD54JETAwYv-cjuGcMJvhk.crl (hash: L3zraLVzpxdCSK4wZaXmEzytL56+9uVFx1yrbgTt9Sg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/6d1a78-984b-4abf-8536-5e86af418668/1/IEuv_DD54JETAwYv-cjuGcMJvhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/6d1a78-984b-4abf-8536-5e86af418668/1/IEuv_DD54JETAwYv-cjuGcMJvhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IEuv_DD54JETAwYv-cjuGcMJvhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:25:61:c8:b5:85:27:99:4b:3d:66:ce:06:08:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204baffc30f9e0911303062ff9c8ee19c309be19
        Validity
            Not Before: May  3 01:01:09 2024 GMT
            Not After : May  4 01:01:09 2024 GMT
        Subject: CN=d8ec6f91dbcb53b5cfba0766f90dcc5e4c13d027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:15:93:08:ab:82:fe:b7:1e:c4:ee:70:07:f2:
                    48:51:a5:06:11:84:f8:b9:0b:9a:ef:d4:ac:d1:33:
                    f9:27:d7:02:4a:65:7f:84:f5:8b:ca:cc:6a:25:c7:
                    12:35:ca:7d:1a:33:43:cb:c8:62:e5:05:5b:1f:5f:
                    9e:fb:99:a9:23:1f:dc:85:32:96:fe:26:82:42:2c:
                    50:73:41:27:04:ad:bd:8c:bd:db:c1:2f:d1:6e:fc:
                    24:49:77:56:69:95:ce:66:78:6f:9c:a4:fc:16:56:
                    72:11:38:76:e7:36:b5:78:66:f8:db:2c:f9:d8:fb:
                    4a:f3:00:3d:5f:56:ce:14:92:16:94:5d:c8:07:f9:
                    d9:b1:b9:ac:30:9f:fb:90:e2:c8:85:48:7b:12:e6:
                    60:56:28:ff:d3:e4:9f:d7:fa:11:49:d8:1d:d7:39:
                    f9:2b:61:70:4c:6f:29:2c:08:91:a3:10:bc:45:6d:
                    4a:0d:d0:82:10:40:b2:91:1a:1c:bd:c8:a8:90:d0:
                    e6:5c:8d:14:0b:fa:79:6a:e2:61:62:52:c2:09:a9:
                    6d:b4:da:d2:d8:9f:e7:8a:22:13:4d:1c:8e:1b:30:
                    13:f7:d3:3d:1c:d5:35:c2:25:49:13:e8:44:84:8d:
                    35:95:00:6a:e0:33:ee:f5:0f:fc:34:af:8b:db:02:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EC:6F:91:DB:CB:53:B5:CF:BA:07:66:F9:0D:CC:5E:4C:13:D0:27
            X509v3 Authority Key Identifier:
                keyid:20:4B:AF:FC:30:F9:E0:91:13:03:06:2F:F9:C8:EE:19:C3:09:BE:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEuv_DD54JETAwYv-cjuGcMJvhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d1a78-984b-4abf-8536-5e86af418668/1/IEuv_DD54JETAwYv-cjuGcMJvhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d1a78-984b-4abf-8536-5e86af418668/1/IEuv_DD54JETAwYv-cjuGcMJvhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e6:db:33:1c:d2:ad:42:ab:bb:fe:84:dd:48:a4:3c:61:81:
         9f:e4:a7:fe:89:d0:97:28:4d:a5:74:7c:34:db:e5:af:c6:cc:
         30:43:d8:63:f6:7d:39:a6:33:67:48:1c:ef:d3:30:41:12:e4:
         c7:a7:a8:5d:dc:31:d8:97:61:68:d8:a5:42:4b:bb:0d:7a:43:
         7f:8f:ab:41:4e:d8:dd:68:7e:a1:46:f4:ce:be:07:1d:f0:b9:
         61:28:cd:94:2a:f5:7f:4b:32:b8:18:0a:5c:bc:e9:38:76:cf:
         b4:78:57:71:8e:25:2a:d6:9e:5b:56:c8:5a:99:74:20:ba:40:
         d8:bc:c6:02:f4:fd:48:55:23:d7:57:a3:c2:fb:eb:0b:82:f4:
         39:11:4f:10:bc:1a:57:3b:1d:50:f4:47:77:f5:bf:48:a8:f0:
         e1:cc:8f:d0:36:e9:cc:9b:6e:73:18:2c:79:66:a2:a4:5c:4a:
         da:4a:24:58:ef:01:cd:99:cd:e7:86:71:ed:a7:57:73:76:b9:
         50:c8:c3:3b:68:b3:9e:63:a6:e3:e9:79:82:da:73:a2:0a:ee:
         2a:c9:9e:99:9b:5a:c5:ae:c8:1d:cd:8b:7d:b2:e8:cb:7f:f1:
         ac:ad:28:76:4d:25:3b:b9:43:b5:c0:81:ad:b7:f1:7d:ac:87:
         ea:19:d5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:46:29 2024 by rpki-client on console-ams.rpki-client.org