Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.mft
File:                     4XwlpvL7M1SdKfdNcDPvISEEXII.mft (raw, json)
Hash identifier:          MVaX+aGGGI6GuhfgVlDpmJ8i9grFiu6xDEHYTTFkhRQ=
Subject key identifier:   81:71:80:D6:4F:1D:AF:9F:9A:45:77:02:8D:5B:94:4A:5A:E9:69:9A
Authority key identifier: E1:7C:25:A6:F2:FB:33:54:9D:29:F7:4D:70:33:EF:21:21:04:5C:82
Certificate issuer:       /CN=e17c25a6f2fb33549d29f74d7033ef2121045c82
Certificate serial:       018F358897A57181FFFDB25C5D84EAA7A93F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XwlpvL7M1SdKfdNcDPvISEEXII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.mft
Manifest number:          0E3F
Signing time:             Wed 01 May 2024 19:01:35 +0000
Manifest this update:     Wed 01 May 2024 19:01:35 +0000
Manifest next update:     Thu 02 May 2024 19:01:35 +0000
Files and hashes:         1: 4XwlpvL7M1SdKfdNcDPvISEEXII.crl (hash: +OyEsyiAQe/LHjU/6vbldO9yHF/0KLgtnHZWltO8U4s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4XwlpvL7M1SdKfdNcDPvISEEXII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:88:97:a5:71:81:ff:fd:b2:5c:5d:84:ea:a7:a9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17c25a6f2fb33549d29f74d7033ef2121045c82
        Validity
            Not Before: May  1 19:01:35 2024 GMT
            Not After : May  2 19:01:35 2024 GMT
        Subject: CN=817180d64f1daf9f9a4577028d5b944a5ae9699a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:41:3e:14:de:e0:0a:f2:8a:ff:a1:f9:67:
                    e0:87:b8:65:84:ac:98:1e:04:cb:e9:79:a3:2e:5e:
                    c8:e4:ac:42:73:7b:ce:c8:f8:10:4a:a3:12:48:df:
                    f0:4b:ce:62:a5:0b:1e:0b:ab:12:9f:4f:e6:d2:9d:
                    dc:ba:11:b4:61:ef:fc:9a:fc:ce:40:eb:59:9c:2f:
                    c9:0a:a8:71:df:d9:04:96:b9:f1:e1:e9:e8:25:e5:
                    34:45:97:c1:7a:6b:6a:16:f4:2e:5b:a8:da:96:41:
                    59:0e:ff:54:94:09:1b:38:28:ce:aa:0a:8a:41:25:
                    7f:06:77:41:ee:57:e9:80:a1:02:d4:92:64:eb:b9:
                    f1:4b:46:92:4e:59:2c:d5:39:3c:bb:19:bd:10:b6:
                    e0:c7:58:c0:b9:dc:6e:b0:0e:e4:16:36:0a:07:17:
                    3d:53:97:92:e3:88:fd:85:4a:b5:b7:62:bc:ee:7b:
                    48:42:28:44:17:16:f8:9d:43:e9:85:8a:33:3f:a6:
                    f1:2e:70:a2:e9:61:da:8a:bf:65:7a:e9:81:a9:23:
                    03:a0:c1:70:28:4b:43:30:39:dd:24:21:15:d0:9d:
                    1e:7a:4f:b1:14:5b:8e:4c:5c:56:94:de:a2:3a:27:
                    dc:76:67:5a:17:4b:c1:54:fc:af:90:55:73:7e:7c:
                    6a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:71:80:D6:4F:1D:AF:9F:9A:45:77:02:8D:5B:94:4A:5A:E9:69:9A
            X509v3 Authority Key Identifier:
                keyid:E1:7C:25:A6:F2:FB:33:54:9D:29:F7:4D:70:33:EF:21:21:04:5C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XwlpvL7M1SdKfdNcDPvISEEXII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a271fc-c34b-4366-a086-dd11a49cae2d/1/4XwlpvL7M1SdKfdNcDPvISEEXII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ea:3d:ed:92:3e:10:cf:43:0c:29:40:22:20:65:e2:af:43:
         29:55:f2:45:22:53:c5:bd:3d:d7:61:a1:5f:5a:93:1c:1b:7b:
         01:20:07:aa:c6:46:f9:d0:bf:4e:b0:ef:fc:00:8c:3f:0a:c2:
         ca:5c:c8:a9:86:b2:e4:46:be:37:b7:c9:b7:ac:e1:6e:ed:04:
         a8:67:60:4f:77:cb:56:e5:d6:8a:6d:08:94:ca:8a:58:d4:d6:
         91:ce:28:60:97:44:f4:ef:8f:b6:f8:28:2f:5c:ac:21:26:1f:
         9e:d3:ea:58:fc:e7:2c:fd:29:8d:0f:c8:d6:6b:72:19:9e:fa:
         40:d0:4c:8e:0c:00:c2:f7:7f:f4:c7:28:be:a4:50:b2:45:89:
         9c:37:b5:4d:11:7c:4f:79:c0:ee:33:8d:79:50:18:d9:24:1e:
         bd:93:f4:9d:f3:04:35:a4:1b:21:a1:19:41:19:a9:f3:ab:3c:
         73:b8:28:39:1e:af:dc:c3:ae:e9:88:07:0b:b0:07:f7:e5:33:
         b4:c1:28:39:fc:7b:93:f5:76:cb:e6:67:75:ee:1c:c9:59:1d:
         dd:1f:03:11:60:8b:51:bf:6f:55:4b:d9:d6:1c:fd:50:b1:e9:
         a1:68:77:89:24:6b:be:9a:d6:5c:33:1c:74:f9:95:7c:f2:19:
         9a:94:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:12:00 2024 by rpki-client on console-fra.rpki-client.org