Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.mft
File:                     4nU_G2NrgnPqljlhlJFoohUfd4k.mft (raw, json)
Hash identifier:          RffR2+ChxKtIIuEQ3hsLz/EWpo9Yu1o0fh24fDVTCb4=
Subject key identifier:   AD:FC:EF:D3:F6:DC:42:35:D5:40:74:41:36:94:C4:65:C4:37:38:A1
Authority key identifier: E2:75:3F:1B:63:6B:82:73:EA:96:39:61:94:91:68:A2:15:1F:77:89
Certificate issuer:       /CN=e2753f1b636b8273ea963961949168a2151f7789
Certificate serial:       018F460E12966342D0ECCFD52D6D4395D1AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4nU_G2NrgnPqljlhlJFoohUfd4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.mft
Manifest number:          05AA
Signing time:             Sun 05 May 2024 00:01:18 +0000
Manifest this update:     Sun 05 May 2024 00:01:18 +0000
Manifest next update:     Mon 06 May 2024 00:01:18 +0000
Files and hashes:         1: 4nU_G2NrgnPqljlhlJFoohUfd4k.crl (hash: 3u+pPoc7b5fJEitV1xseazQkvtJ3Ss1Gz5Zypp/7dKg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4nU_G2NrgnPqljlhlJFoohUfd4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0e:12:96:63:42:d0:ec:cf:d5:2d:6d:43:95:d1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2753f1b636b8273ea963961949168a2151f7789
        Validity
            Not Before: May  5 00:01:18 2024 GMT
            Not After : May  6 00:01:18 2024 GMT
        Subject: CN=adfcefd3f6dc4235d54074413694c465c43738a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:a7:cc:e5:7f:95:76:56:89:07:19:c0:2a:
                    f6:64:94:d7:62:3d:cd:36:33:ff:78:38:ee:a2:2e:
                    62:c6:83:33:53:3f:e6:c8:32:e5:42:4e:15:33:dd:
                    1f:6a:46:97:2c:74:37:77:ce:eb:0b:a7:ad:7c:2d:
                    dc:e4:e2:e2:a2:d2:cd:83:ab:01:95:da:1c:8e:d5:
                    e8:af:8a:aa:77:70:9f:17:82:a5:11:da:2f:ff:62:
                    ce:b2:06:5c:4e:5f:de:f5:81:2b:bb:c2:42:9d:11:
                    e5:dc:9d:a9:c9:b1:32:2d:51:d4:11:08:58:5e:8d:
                    d3:47:cd:fd:3d:d0:2e:a4:78:27:e1:50:db:6a:7a:
                    a0:0d:25:ae:59:4f:4a:a1:52:a5:d9:4d:fb:fc:76:
                    26:da:73:2e:d0:91:75:95:f7:8e:f9:d5:e1:d4:e7:
                    65:3f:22:fc:59:41:9d:44:51:42:4b:2c:44:8a:62:
                    8a:fa:e2:93:c7:32:aa:2a:db:6c:b8:a8:97:38:6a:
                    db:07:d4:e5:a8:c9:55:78:cc:fe:91:b5:56:83:61:
                    1e:19:41:9c:5a:4d:14:38:7d:ab:bc:80:b2:2e:5c:
                    1f:7f:83:27:8b:d8:f6:e7:01:18:b3:96:43:87:21:
                    c7:00:55:bd:0b:df:a7:a9:14:50:c5:b5:8d:b9:4d:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FC:EF:D3:F6:DC:42:35:D5:40:74:41:36:94:C4:65:C4:37:38:A1
            X509v3 Authority Key Identifier:
                keyid:E2:75:3F:1B:63:6B:82:73:EA:96:39:61:94:91:68:A2:15:1F:77:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4nU_G2NrgnPqljlhlJFoohUfd4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7a:a9:63:3b:23:4b:d5:57:b5:32:17:80:ff:aa:8e:a2:1d:
         50:e7:26:4e:af:05:f7:2c:cf:f4:ae:38:94:2f:28:52:93:2f:
         70:06:90:5f:d2:2b:4c:02:b3:80:52:95:25:a4:ea:b7:2e:91:
         e1:78:8f:62:d4:41:3b:aa:1b:23:10:aa:9b:29:47:66:e4:02:
         24:34:3e:97:ec:7d:ce:57:18:bc:9b:c2:ca:39:d4:52:40:de:
         06:43:90:29:2d:f8:18:5f:92:d0:db:da:d7:c9:17:47:b3:ca:
         1d:7d:2e:1d:79:40:81:68:57:30:0e:b9:5c:15:3d:b0:9d:3e:
         69:73:18:9d:c2:18:f0:3a:eb:b4:10:ff:cc:29:da:a8:df:da:
         d6:b5:54:f2:e0:33:a0:5d:c8:de:bc:f1:28:76:e6:b7:25:c4:
         10:52:da:e9:c5:b7:31:89:10:28:fc:f6:22:bf:96:7f:37:2d:
         6d:41:7f:f4:23:93:02:86:1e:fa:7c:78:e8:01:c0:fc:83:a9:
         49:d6:63:1b:5a:f2:84:32:65:11:21:e8:45:04:1a:fa:d4:84:
         68:ec:88:a7:01:a2:75:53:81:27:05:08:72:54:fd:a5:0e:9a:
         33:e9:f2:d0:82:ad:cd:db:33:28:67:88:49:04:84:b0:dc:f2:
         68:2b:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:32:35 2024 by rpki-client on console-ams.rpki-client.org