Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
File:                     9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft (raw, json)
Hash identifier:          ZBpO/awsGjdH+vStCJGKUeNtGe6QYTeyayK136EzA1U=
Subject key identifier:   75:44:46:74:1E:90:DD:28:26:0B:39:1D:99:78:7A:09:8A:73:33:A6
Authority key identifier: F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84
Certificate issuer:       /CN=f70592c90b4cb245e54718d7c5799b47d419a684
Certificate serial:       018F546E58A2E459E7798975A740CD486ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 19:01:08 +0000
Manifest this update:     Tue 07 May 2024 19:01:08 +0000
Manifest next update:     Wed 08 May 2024 19:01:08 +0000
Files and hashes:         1: 9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl (hash: 1G3riryZ+uZzQ+st4dMcWt6UGD0FmmS+L8xlaAxuwsE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:6e:58:a2:e4:59:e7:79:89:75:a7:40:cd:48:6e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f70592c90b4cb245e54718d7c5799b47d419a684
        Validity
            Not Before: May  7 19:01:08 2024 GMT
            Not After : May  8 19:01:08 2024 GMT
        Subject: CN=754446741e90dd28260b391d99787a098a7333a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:4d:69:e0:5e:58:0c:9a:34:ed:da:95:2b:
                    31:44:e1:4a:88:fa:b4:f4:81:8a:5f:6f:bd:d7:5a:
                    2a:db:62:f6:6f:35:39:b9:45:40:7a:51:17:63:32:
                    4e:1d:41:85:d4:90:a5:e6:53:a1:f5:5a:05:0a:a2:
                    d6:32:8f:d5:15:70:2c:b8:9d:16:d0:80:33:cc:00:
                    33:d6:25:c3:83:42:ed:55:53:b6:aa:79:4b:c5:97:
                    5d:53:1b:2b:bf:79:76:64:6b:20:c4:59:41:10:71:
                    06:38:66:7a:a6:9a:d5:e8:d2:32:8e:aa:cf:a9:ff:
                    e6:fa:ce:d4:84:f9:6a:6c:1c:1c:99:27:02:c4:ea:
                    94:e0:0b:29:52:23:53:63:1c:3a:bf:f1:c3:f7:1a:
                    70:2b:36:61:ed:c7:a4:40:2d:dd:fc:03:60:00:2c:
                    e9:9e:2d:58:b4:31:5f:d1:2c:56:10:b7:c6:d1:fe:
                    c4:1e:36:65:7e:05:08:fa:47:66:71:27:ee:62:92:
                    44:88:62:f9:99:ac:a1:66:d6:ac:51:02:b2:f4:6a:
                    34:44:6d:6b:75:a1:68:f7:08:6f:9d:95:ab:eb:d0:
                    33:68:af:25:24:0a:99:f8:95:9c:75:29:0c:55:fd:
                    10:10:04:62:6d:4a:a4:13:73:51:1c:89:3a:11:c3:
                    b7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:44:46:74:1E:90:DD:28:26:0B:39:1D:99:78:7A:09:8A:73:33:A6
            X509v3 Authority Key Identifier:
                keyid:F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c5:70:f9:19:40:f5:3a:db:ff:f9:16:a0:18:3b:20:2c:93:
         16:91:12:7a:c9:5f:df:2a:99:1d:8f:6c:d2:66:6d:57:7a:e8:
         c4:00:00:03:5b:ed:42:2e:9c:14:93:6f:89:d3:98:3c:87:e5:
         ae:55:87:d8:2b:72:40:06:b9:c0:d2:b4:35:c6:34:ab:fd:ca:
         63:be:d2:9c:cc:94:67:c7:0e:62:c7:ae:34:a0:e4:1e:aa:6a:
         79:26:6c:b5:5e:dd:86:4f:53:77:7f:e3:ed:0e:3e:93:cf:bc:
         97:d5:33:e3:11:06:ae:e9:c5:82:86:c5:ff:34:20:3d:38:ec:
         a0:2b:dc:88:9f:07:67:eb:08:94:47:3e:38:35:18:bf:4f:eb:
         e9:85:35:65:39:a1:89:01:a3:39:60:d4:1d:b0:de:e7:92:29:
         41:77:26:d7:9e:7b:47:f5:38:29:7b:55:1c:67:4c:ca:6b:11:
         bc:1d:ec:53:99:1f:e5:6e:13:70:f3:05:60:5b:b4:fa:0a:2b:
         4a:0f:dc:b9:dc:60:82:4a:ed:2c:6d:39:09:16:72:52:c3:80:
         ae:1a:4f:70:c4:c4:15:03:b5:60:dd:07:64:a9:cd:30:f9:8d:
         0b:9f:10:7a:7d:91:a6:d7:d0:40:06:3e:d0:e4:da:a5:0b:49:
         93:36:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:59:07 2024 by rpki-client on console-fra.rpki-client.org