Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/58afe1-4c81-4f91-b8d8-0a287fbebe11/1/SjwbFVuMvQfjctm_DO2eIH6I_0U.mft
File:                     SjwbFVuMvQfjctm_DO2eIH6I_0U.mft (raw, json)
Hash identifier:          mP/GzDboITOq34aFqrQsufNBDSxbWOeprpkkWJqTHD4=
Subject key identifier:   73:96:C4:A5:31:16:67:FA:3D:07:58:86:8A:09:C0:85:A3:D6:15:37
Authority key identifier: 4A:3C:1B:15:5B:8C:BD:07:E3:72:D9:BF:0C:ED:9E:20:7E:88:FF:45
Certificate issuer:       /CN=4a3c1b155b8cbd07e372d9bf0ced9e207e88ff45
Certificate serial:       018F97292D51D903455E56517F4E92667908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SjwbFVuMvQfjctm_DO2eIH6I_0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/58afe1-4c81-4f91-b8d8-0a287fbebe11/1/SjwbFVuMvQfjctm_DO2eIH6I_0U.mft
Manifest number:          109D
Signing time:             Mon 20 May 2024 18:00:08 +0000
Manifest this update:     Mon 20 May 2024 18:00:08 +0000
Manifest next update:     Tue 21 May 2024 18:00:08 +0000
Files and hashes:         1: SjwbFVuMvQfjctm_DO2eIH6I_0U.crl (hash: vLd+aMnvYJ+u7hO9kXgaanTpf/VxTZev5GW6IW+cteo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/58afe1-4c81-4f91-b8d8-0a287fbebe11/1/SjwbFVuMvQfjctm_DO2eIH6I_0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/58afe1-4c81-4f91-b8d8-0a287fbebe11/1/SjwbFVuMvQfjctm_DO2eIH6I_0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SjwbFVuMvQfjctm_DO2eIH6I_0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:29:2d:51:d9:03:45:5e:56:51:7f:4e:92:66:79:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3c1b155b8cbd07e372d9bf0ced9e207e88ff45
        Validity
            Not Before: May 20 18:00:08 2024 GMT
            Not After : May 21 18:00:08 2024 GMT
        Subject: CN=7396c4a5311667fa3d0758868a09c085a3d61537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:09:86:dd:5b:46:08:2c:e3:49:f9:c9:4a:
                    00:6d:de:4d:04:27:d4:e3:97:1c:95:88:8e:bb:9c:
                    36:32:5a:6d:fe:dc:cc:64:e0:da:ca:c5:3e:3b:8e:
                    65:8d:fe:31:bd:e4:ce:39:7e:ed:12:5f:01:66:a0:
                    91:dc:20:e9:f3:0d:ef:25:15:43:a7:f2:89:17:43:
                    94:3f:30:5e:e2:b1:34:92:6c:32:4f:90:d9:d1:8f:
                    52:a9:b1:77:c8:fa:ba:5b:e7:8a:01:22:54:df:a8:
                    00:e9:ba:e9:e1:69:70:07:11:7e:f9:68:19:e4:50:
                    dc:28:a7:d3:ea:69:87:88:b5:a4:5f:4c:2c:ff:bc:
                    d7:a9:fc:98:c1:e3:05:dd:f1:a3:55:c2:07:bb:4e:
                    8b:44:a7:00:32:0c:ee:fb:d9:6c:d7:ab:19:7b:61:
                    e2:27:07:95:85:3b:40:c3:d2:94:4b:05:19:d9:d5:
                    a6:ea:6e:bb:3a:ff:1a:9b:0c:b6:17:40:6a:3f:78:
                    c1:12:89:dc:29:45:88:78:ce:26:c8:4f:b6:4a:46:
                    0a:d4:8b:64:2f:06:9d:a1:b0:41:80:e1:1b:45:bb:
                    d8:45:f7:43:6a:8d:5e:5f:f6:c0:6f:13:f6:ae:09:
                    dd:1c:34:dc:78:0c:19:15:1f:bd:a8:2e:cf:15:a6:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:96:C4:A5:31:16:67:FA:3D:07:58:86:8A:09:C0:85:A3:D6:15:37
            X509v3 Authority Key Identifier:
                keyid:4A:3C:1B:15:5B:8C:BD:07:E3:72:D9:BF:0C:ED:9E:20:7E:88:FF:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjwbFVuMvQfjctm_DO2eIH6I_0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/58afe1-4c81-4f91-b8d8-0a287fbebe11/1/SjwbFVuMvQfjctm_DO2eIH6I_0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/58afe1-4c81-4f91-b8d8-0a287fbebe11/1/SjwbFVuMvQfjctm_DO2eIH6I_0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d2:04:2b:dd:bc:0a:2e:7a:1e:55:8d:2f:75:74:89:a7:a1:
         67:fe:1d:eb:11:8a:13:3b:6b:02:ea:58:a5:0c:42:e0:e8:59:
         16:a6:9a:f5:bd:35:77:ac:11:ae:9d:46:75:e2:98:1b:03:8c:
         df:04:4c:fd:41:c3:31:a0:0f:59:65:de:86:f3:5c:fc:ce:40:
         60:e2:62:83:37:b6:13:39:bf:70:8b:cd:b3:9c:eb:45:95:fc:
         3c:f1:d3:33:58:8f:bf:17:94:4a:9b:0c:6b:de:5e:88:7f:f4:
         bb:0d:12:02:8f:a7:33:4d:97:4f:58:96:1c:99:26:2d:3c:90:
         79:d9:65:56:a1:7d:29:52:59:8e:b0:ff:4d:47:22:32:0c:c5:
         63:63:5b:00:88:b0:eb:f9:12:d3:54:15:ea:83:f7:a3:49:04:
         84:ff:cc:a0:07:54:46:40:92:5b:18:90:02:4e:e7:3c:c5:24:
         c1:69:83:cb:5b:28:48:81:9c:e3:ae:b4:5c:79:20:de:bc:f6:
         41:90:a2:2f:f1:2f:02:d6:86:cf:41:71:61:8a:54:5d:d7:c3:
         71:be:20:14:41:05:77:b0:cc:70:6d:e3:f0:20:86:af:7c:18:
         3e:e4:b5:83:89:3d:13:b5:5c:11:85:cf:1d:54:1a:45:97:34:
         36:87:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:39:42 2024 by rpki-client on console-fra.rpki-client.org