Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/910313-ce10-4d6f-827c-5c55ec221e12/1/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.mft
File:                     OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.mft (raw, json)
Hash identifier:          7NCbUZIzUJBFfpk6rGfFj3r8F5hRu1FHaGcV+B2PkRI=
Subject key identifier:   2A:CE:7F:58:BE:33:EE:C3:13:75:A0:27:06:69:21:EE:B1:D8:98:77
Authority key identifier: 38:9D:D4:12:6F:8B:E0:7A:F4:54:49:7C:A0:F5:66:52:95:48:2A:D5
Certificate issuer:       /CN=389dd4126f8be07af454497ca0f5665295482ad5
Certificate serial:       018F8748DC037B757B3BB9FA3684AAE41A49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/910313-ce10-4d6f-827c-5c55ec221e12/1/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.mft
Manifest number:          D4
Signing time:             Fri 17 May 2024 16:00:50 +0000
Manifest this update:     Fri 17 May 2024 16:00:50 +0000
Manifest next update:     Sat 18 May 2024 16:00:50 +0000
Files and hashes:         1: OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.crl (hash: s8BFC1BvxahMthsIJ7fIZY11JFMUysXymxo7bkag4i8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/910313-ce10-4d6f-827c-5c55ec221e12/1/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/910313-ce10-4d6f-827c-5c55ec221e12/1/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:dc:03:7b:75:7b:3b:b9:fa:36:84:aa:e4:1a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389dd4126f8be07af454497ca0f5665295482ad5
        Validity
            Not Before: May 17 16:00:50 2024 GMT
            Not After : May 18 16:00:50 2024 GMT
        Subject: CN=2ace7f58be33eec31375a027066921eeb1d89877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dd:00:94:9c:78:68:19:8d:a1:9f:84:ea:73:
                    6f:dc:d2:01:b9:9c:f9:9c:e2:f7:9f:35:3f:d3:a7:
                    d7:a7:f0:99:87:6d:05:e6:c0:d1:40:a4:e6:9f:87:
                    5c:b1:48:36:c6:9e:8f:6d:4f:84:4e:e3:3e:b2:e4:
                    0d:7e:e9:d8:3b:9f:07:67:17:07:df:aa:30:55:44:
                    8d:e7:3d:b0:24:ad:e9:c5:94:78:f1:30:aa:d8:45:
                    2a:ce:6e:0d:d2:55:94:fb:ab:e1:b3:b0:df:aa:b1:
                    0d:4e:59:80:08:e3:49:52:0f:fd:be:23:e2:1f:fb:
                    ef:8b:54:fd:0a:19:ca:fe:0b:eb:e4:74:fe:4c:ab:
                    ed:42:f2:e2:ad:b6:60:d9:5b:6c:d0:35:3a:77:e5:
                    cb:65:a0:c3:3c:78:43:fa:dd:eb:fd:55:27:6e:a0:
                    42:ed:f5:0b:25:48:87:46:d5:48:56:9c:96:0f:25:
                    40:2b:d1:f1:8e:13:b5:4e:e5:4f:a8:bf:d1:36:d5:
                    27:e0:2c:9b:a5:90:36:d0:be:2c:c9:7c:0a:5f:0f:
                    4c:e6:f0:31:33:db:18:07:d8:a2:52:97:64:ce:ea:
                    e0:1b:e2:73:c6:c4:01:7d:3c:c6:14:06:e9:7e:ae:
                    82:fb:14:6c:c6:86:2e:34:c5:31:33:e4:79:6f:5f:
                    c9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CE:7F:58:BE:33:EE:C3:13:75:A0:27:06:69:21:EE:B1:D8:98:77
            X509v3 Authority Key Identifier:
                keyid:38:9D:D4:12:6F:8B:E0:7A:F4:54:49:7C:A0:F5:66:52:95:48:2A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/910313-ce10-4d6f-827c-5c55ec221e12/1/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/910313-ce10-4d6f-827c-5c55ec221e12/1/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f7:e3:86:7e:60:6e:48:7a:26:34:c8:1d:52:68:0e:d6:f1:
         ac:33:69:84:f4:df:e9:9c:9d:64:eb:4e:39:db:82:a5:a5:50:
         26:ee:15:0b:8f:ef:43:ea:d1:ca:be:b6:39:d7:4e:3a:3b:65:
         cc:51:24:14:c6:fe:49:a8:d7:82:f1:a4:8e:fa:e7:78:bb:74:
         c2:1c:56:5e:51:9f:53:7f:2d:12:9a:7d:31:50:27:ec:93:8c:
         33:ad:a2:0b:4a:44:32:e6:e6:5a:40:30:83:11:69:f4:5b:0a:
         35:68:3c:13:26:6d:4a:2c:f7:0d:1c:c7:3c:d8:15:dd:6c:32:
         04:32:78:87:50:41:9f:7d:c7:e2:28:4e:32:c1:43:aa:36:39:
         df:c3:4e:03:d3:d6:c6:0a:55:3c:5b:d3:47:03:db:08:f3:f4:
         27:8e:68:13:d2:62:30:2b:75:0d:8e:ad:a2:ee:2c:f5:21:7f:
         c3:ce:8c:be:87:1e:45:51:4f:26:2b:9a:54:34:88:5e:84:0f:
         f9:a5:5a:89:6b:5f:0a:22:fa:04:f7:7a:38:de:cf:b3:0d:dd:
         78:48:b3:a8:44:d0:80:b5:e0:fe:ac:fd:69:a5:07:de:3b:4d:
         23:19:fc:09:9f:e4:62:d0:2e:69:0a:43:c3:7b:e9:7a:4c:09:
         87:c2:40:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:47:00 2024 by rpki-client on console-fra.rpki-client.org