Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File:                     A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier:          Hf0UHKTo9yw105NxmSmnB6XLk4G3/FmgwS4pOAc6bY4=
Subject key identifier:   BB:9F:88:A4:F8:A8:24:49:00:7E:2D:AF:99:94:B8:BA:9B:8A:10:6E
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer:       /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial:       018F43B1C9AEE26B4FF0473B91B2AD93115A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number:          1152
Signing time:             Sat 04 May 2024 13:01:15 +0000
Manifest this update:     Sat 04 May 2024 13:01:15 +0000
Manifest next update:     Sun 05 May 2024 13:01:15 +0000
Files and hashes:         1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: YF00QJMIMR97TK+f74yxcMnDdilr3cNdz2TdBBtNTu8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b1:c9:ae:e2:6b:4f:f0:47:3b:91:b2:ad:93:11:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
        Validity
            Not Before: May  4 13:01:15 2024 GMT
            Not After : May  5 13:01:15 2024 GMT
        Subject: CN=bb9f88a4f8a82449007e2daf9994b8ba9b8a106e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:a9:e8:5e:1a:03:fb:ff:49:c4:aa:35:34:
                    6d:8d:83:17:36:e8:7d:d3:64:35:f9:d3:a0:6e:e6:
                    61:ff:82:e2:91:95:4c:e7:18:d0:fe:9f:b6:e7:16:
                    33:62:7c:52:f9:89:14:e3:82:d9:85:58:9b:1e:ad:
                    ac:eb:0d:fc:7b:ce:d3:56:23:f1:da:87:d6:0d:51:
                    cf:25:15:17:4d:95:dd:91:73:3f:de:89:80:21:6a:
                    1d:69:cb:6e:c4:ca:fe:66:19:c6:53:5a:ee:21:38:
                    73:c2:d2:c5:d5:8c:8e:f2:14:c4:14:ea:e8:ca:06:
                    f5:ca:40:d5:9f:5b:65:97:f9:fd:a4:cc:75:e7:02:
                    73:f2:b0:9b:2f:c2:d6:ba:79:8b:f5:2d:fd:7e:2d:
                    b7:09:c9:c1:e7:a2:3a:a5:4d:df:d5:3e:2f:6b:0c:
                    31:13:6c:04:f6:43:32:8f:e1:33:71:b6:e4:36:d6:
                    77:1a:1c:4f:c6:18:36:6d:5f:ec:88:56:de:60:03:
                    34:ef:f0:03:b9:12:79:10:07:26:b3:8c:a4:6a:4d:
                    85:02:f8:97:1d:fd:50:0d:86:c5:da:24:d2:d2:9a:
                    d9:94:b4:a2:ff:df:8e:59:09:c6:bd:b6:80:70:bf:
                    df:87:5f:53:8d:84:ea:40:12:cf:2d:66:08:27:ab:
                    fe:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9F:88:A4:F8:A8:24:49:00:7E:2D:AF:99:94:B8:BA:9B:8A:10:6E
            X509v3 Authority Key Identifier:
                keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e9:ee:f1:04:ab:fe:8b:d3:ff:25:7a:e5:77:0c:14:a2:72:
         19:18:60:5a:4e:64:b2:ab:78:6e:03:0f:97:8f:48:0b:b4:8b:
         5d:f7:91:6b:37:56:98:3b:72:4a:91:8b:d7:bc:ea:f5:b0:a2:
         2c:fe:a2:31:84:07:6b:e6:30:fe:a7:40:eb:77:9b:2b:67:cb:
         e2:06:74:79:b7:c1:67:6e:9f:47:53:8b:ef:41:07:cc:cd:16:
         8b:48:de:48:99:11:53:2a:02:16:f1:cf:ed:a0:f3:14:05:71:
         b9:af:95:10:17:68:22:cc:22:31:af:8a:e5:bb:ff:c3:dc:c1:
         8f:64:89:63:bb:e8:c8:9a:ef:48:3c:b4:de:77:33:4e:b2:6f:
         e3:71:d9:7c:91:cc:2d:49:e1:e3:f9:90:14:9c:9c:18:df:a6:
         c4:2d:f9:6d:54:50:69:b3:cc:3a:90:a3:c1:b3:c8:8e:17:f7:
         86:97:9c:38:27:d6:09:11:88:a9:44:6e:16:34:16:68:f0:26:
         fc:9d:7f:b9:aa:58:ff:32:0a:f5:d1:03:10:be:f6:26:81:d3:
         47:8f:80:07:79:67:c8:0f:14:8c:48:bf:15:53:69:88:ee:c3:
         cb:c1:9c:9f:fb:9f:51:a9:cf:7f:f4:d9:14:f4:d8:b2:b6:90:
         5d:ca:be:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:53:23 2024 by rpki-client on console-fra.rpki-client.org