Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File:                     duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier:          HGcIR/W/0X6qjYyb1G3t26NvcRgByf/+W/kIcaB7Apo=
Subject key identifier:   C5:69:D7:67:37:16:04:E5:D3:15:0E:2E:43:D3:66:77:03:33:7A:FA
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer:       /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial:       018F8824349F3CB50FEC0810B0FE9E0DD876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number:          1106
Signing time:             Fri 17 May 2024 20:00:24 +0000
Manifest this update:     Fri 17 May 2024 20:00:24 +0000
Manifest next update:     Sat 18 May 2024 20:00:24 +0000
Files and hashes:         1: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: ilL+512HqKc6i+lKnR1SjHF1gKw9vp3MnI6xgUse0RY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:34:9f:3c:b5:0f:ec:08:10:b0:fe:9e:0d:d8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
        Validity
            Not Before: May 17 20:00:24 2024 GMT
            Not After : May 18 20:00:24 2024 GMT
        Subject: CN=c569d767371604e5d3150e2e43d3667703337afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:24:b9:0e:42:8b:35:b4:8d:27:1b:e0:49:
                    4d:29:1c:c6:2f:66:5c:5b:dd:bc:ef:ca:b5:fd:fa:
                    e6:40:1c:20:ae:95:d5:ab:87:da:51:8b:cf:21:d1:
                    7d:cf:02:e9:62:2e:35:09:88:21:91:4a:a7:10:c4:
                    3a:22:19:c4:8f:01:d9:61:9e:45:d4:64:f3:cf:61:
                    40:36:63:07:2e:f6:5b:b3:eb:a9:f4:5d:01:dd:d1:
                    77:0e:d5:36:7f:fc:93:c1:ff:b2:36:69:25:5c:65:
                    61:ff:b0:f7:25:5b:74:24:29:eb:99:72:62:f9:9d:
                    a8:17:5c:7d:d8:cc:bf:78:18:d2:f1:41:c6:69:99:
                    35:1d:4a:b8:49:d6:c1:a6:a3:a0:08:e9:62:2d:bd:
                    a2:60:ae:67:94:2a:8f:47:50:fe:51:c7:60:2e:06:
                    68:d1:36:d4:8b:94:90:0e:77:05:01:cb:48:1f:3b:
                    2b:79:c7:d9:8a:0d:df:37:96:97:12:4d:15:af:93:
                    7a:b8:50:f5:47:f0:23:03:1b:07:0e:ee:b6:82:15:
                    2c:d1:80:f0:e9:bd:bd:7e:1a:39:ee:b2:84:9f:37:
                    34:0d:19:2f:a0:98:b0:06:26:1e:bf:19:80:95:50:
                    ab:40:dc:98:11:14:df:53:e2:b3:15:23:f0:33:9a:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:69:D7:67:37:16:04:E5:D3:15:0E:2E:43:D3:66:77:03:33:7A:FA
            X509v3 Authority Key Identifier:
                keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a5:48:bf:f8:ed:d0:96:58:a6:ed:0e:5c:06:48:ab:f1:78:
         f4:44:ad:9b:69:39:f2:6a:c7:c3:f5:16:a4:4b:dd:36:bc:74:
         7c:29:e4:41:5e:cf:bc:e2:bd:b4:9f:e2:7f:cb:80:f8:f9:ea:
         91:b5:e7:97:6e:15:2f:60:71:86:60:7d:a7:3d:71:dd:1c:1c:
         b7:86:9c:bb:d7:69:68:0f:2e:2e:59:aa:b6:c7:0a:b6:93:26:
         18:c7:f4:5f:15:2c:77:9d:cc:b0:5c:a1:05:72:28:22:39:be:
         6e:9e:92:3b:bb:cc:0b:a1:be:aa:f6:e6:2a:84:72:9a:6b:d7:
         23:05:1a:b1:27:e9:0d:03:41:e3:9b:62:0d:84:0c:bc:25:c1:
         80:3c:92:86:1c:d2:f0:45:a0:cf:94:8f:16:31:1a:14:f8:80:
         91:90:ea:0e:44:35:44:3a:a3:7d:a7:92:8f:43:40:53:bf:a7:
         84:bd:c3:d1:8e:e0:17:8b:08:93:1f:cd:4f:4d:18:dd:7a:49:
         a4:e1:6a:41:19:55:98:4b:9f:72:91:64:76:86:8a:82:33:f3:
         ea:b9:05:17:b4:b2:33:d6:20:28:d5:ff:d8:ee:87:b6:9a:35:
         22:d0:0d:89:9e:84:60:a7:eb:8f:72:2c:1e:f0:7a:e2:a1:fa:
         16:11:43:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:53 2024 by rpki-client on console-fra.rpki-client.org