Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
File:                     DghyLSZ7Tv9ER6STM6AlqFICCpg.mft (raw, json)
Hash identifier:          LS5iv80bBEc2IafdYo30k+8ybq2sdX01rxFqCkgPngQ=
Subject key identifier:   01:CE:AB:45:E1:3B:B8:56:08:9C:D6:91:11:24:72:BC:3C:8F:62:5C
Authority key identifier: 0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
Certificate issuer:       /CN=0e08722d267b4eff4447a49333a025a852020a98
Certificate serial:       018F49EB42707E58D5B3ADC534371030459D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
Manifest number:          0449
Signing time:             Sun 05 May 2024 18:01:45 +0000
Manifest this update:     Sun 05 May 2024 18:01:45 +0000
Manifest next update:     Mon 06 May 2024 18:01:45 +0000
Files and hashes:         1: DghyLSZ7Tv9ER6STM6AlqFICCpg.crl (hash: E1LF0lPsBW8C/moP3trtzSC/jzoxM9FRr1cnfTM+X64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:eb:42:70:7e:58:d5:b3:ad:c5:34:37:10:30:45:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08722d267b4eff4447a49333a025a852020a98
        Validity
            Not Before: May  5 18:01:45 2024 GMT
            Not After : May  6 18:01:45 2024 GMT
        Subject: CN=01ceab45e13bb856089cd691112472bc3c8f625c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:fa:92:de:fb:80:a7:36:4e:e4:1c:92:48:
                    a0:59:df:e0:2e:68:8e:71:cd:0f:97:ca:37:3d:ed:
                    72:ec:83:7a:fb:e9:40:06:bc:96:0b:8a:c0:39:63:
                    c6:a0:2a:46:2a:00:33:c4:ac:ff:ad:cc:c7:9f:ce:
                    97:01:fb:c9:ed:63:cf:ca:dd:db:0b:b3:c9:9e:30:
                    97:37:d6:9b:ff:11:13:bd:7e:08:a7:14:58:03:01:
                    5e:fa:99:9b:a2:07:35:6a:6b:f9:61:17:a6:2c:fc:
                    e4:e8:e6:9a:c4:c7:14:44:e8:ae:27:28:5b:14:de:
                    58:1d:5e:f3:15:c2:ef:5f:76:b0:cd:34:39:ce:c4:
                    e8:7c:d5:a4:20:9f:18:e7:9c:69:44:22:f4:c7:5f:
                    9b:ec:68:76:d3:65:6b:a2:6c:89:56:21:a9:b9:c5:
                    a6:91:1a:e8:92:03:7a:7d:dc:eb:f3:26:3c:36:86:
                    3c:b5:b2:30:1c:cd:0e:2b:23:9a:59:1e:e1:ac:17:
                    f2:78:f4:43:4b:61:af:e7:01:27:10:b4:b4:1f:84:
                    d2:33:bb:8f:40:5e:9a:41:3e:1a:32:85:dc:6f:92:
                    a6:5a:95:94:1c:73:3d:b0:e2:d4:60:cf:3c:55:9c:
                    b1:12:c9:63:03:98:83:1d:6f:65:cb:eb:4c:1c:d0:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CE:AB:45:E1:3B:B8:56:08:9C:D6:91:11:24:72:BC:3C:8F:62:5C
            X509v3 Authority Key Identifier:
                keyid:0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:db:d7:5f:c9:29:fc:d6:bf:a3:b7:ad:7b:b6:42:a6:71:0d:
         e9:ec:01:51:ff:d6:bf:50:47:ac:81:cf:33:d1:8e:71:19:7c:
         be:5f:9c:16:9d:3b:1e:d6:75:0c:0c:2d:35:48:75:42:4c:f5:
         dd:7d:25:0e:c2:6d:a8:45:46:67:e4:17:3c:58:ec:07:83:4a:
         f0:c9:4c:1a:06:78:12:e5:c7:99:c9:57:0a:a7:4d:16:89:3b:
         e4:c6:e8:53:bb:5b:b3:fe:0b:5e:5b:21:30:12:42:59:ab:07:
         54:19:1c:2a:53:eb:d4:60:ec:58:25:55:19:48:cc:3e:2a:f4:
         b8:03:ca:d1:50:43:2d:99:ae:53:2b:be:12:02:1b:28:72:ca:
         5f:45:fb:03:07:ec:9c:99:50:01:99:6d:8d:97:b7:f5:52:22:
         01:58:cf:6f:4f:5e:8b:02:d9:70:db:8e:f5:36:9c:ca:58:d3:
         05:64:ca:9f:4d:d4:52:25:38:30:c0:b9:a2:5c:91:90:f3:56:
         1f:02:31:81:3b:6a:4c:64:98:b2:41:24:24:71:fe:5a:95:f6:
         ea:3a:89:49:4b:fd:56:bf:ba:bc:2e:96:0c:9f:5e:7e:ba:ef:
         b8:12:91:76:38:f6:96:12:5e:7d:5b:92:bc:dc:74:8b:d4:3f:
         2b:3b:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:17:12 2024 by rpki-client on console-fra.rpki-client.org