Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
File:                     1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json)
Hash identifier:          KdzhYpMSFfNoHz4eGGeWktTI+B2Ftcfteg8dyGThKOU=
Subject key identifier:   30:82:3F:7B:77:E1:86:6E:98:EB:73:A0:FA:D8:B5:E3:D3:3C:99:F9
Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
Certificate issuer:       /CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Certificate serial:       018F20EEE8A883A2C532EFF5CBD929117083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
Manifest number:          03A7
Signing time:             Sat 27 Apr 2024 19:01:18 +0000
Manifest this update:     Sat 27 Apr 2024 19:01:18 +0000
Manifest next update:     Sun 28 Apr 2024 19:01:18 +0000
Files and hashes:         1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: HqK5PKDdEdiWzX4g7l4Ne2P9S1XSd2RH/FSvkrCxYeo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:ee:e8:a8:83:a2:c5:32:ef:f5:cb:d9:29:11:70:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623
        Validity
            Not Before: Apr 27 19:01:18 2024 GMT
            Not After : Apr 28 19:01:18 2024 GMT
        Subject: CN=30823f7b77e1866e98eb73a0fad8b5e3d33c99f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:c6:ff:ee:0e:95:d1:72:08:ce:b1:87:c2:
                    8f:63:bb:fb:36:82:06:d7:7e:a2:42:85:fe:57:aa:
                    53:75:55:81:4b:cb:75:72:99:75:ee:22:58:a8:50:
                    08:f3:bf:10:99:24:a5:18:a8:b3:ba:00:db:05:91:
                    79:ff:36:e6:61:13:62:90:a2:fe:0f:3b:0e:33:e1:
                    4d:e4:6c:65:eb:eb:c3:a2:82:cd:95:94:5c:34:eb:
                    ce:e6:af:1d:2e:fd:ac:3a:27:f1:3d:1c:ea:25:2c:
                    fe:fc:6f:6f:0f:f9:ce:19:0f:44:cf:3b:93:d6:43:
                    24:7f:98:c1:36:09:e8:93:06:33:f5:5a:94:70:66:
                    9d:6e:17:bf:fe:9b:17:f0:94:87:ba:83:e3:9a:35:
                    73:b1:be:f0:44:42:86:56:eb:2d:3e:58:a5:56:09:
                    4f:30:c1:b0:5d:16:94:ed:f4:4e:6a:12:1c:fc:ae:
                    be:bb:37:c4:92:09:d4:f9:5b:3f:16:2b:14:54:53:
                    85:b3:3f:e8:bc:5b:af:90:73:a0:b6:c6:62:1f:0d:
                    21:8d:d7:ce:44:8b:9a:b6:7d:c5:93:23:d9:d8:bc:
                    f3:14:27:0b:f1:2d:18:9d:dd:c5:b4:70:2a:51:3c:
                    c4:42:a1:16:22:75:ff:d4:a9:1c:f9:80:6d:ed:68:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:82:3F:7B:77:E1:86:6E:98:EB:73:A0:FA:D8:B5:E3:D3:3C:99:F9
            X509v3 Authority Key Identifier:
                keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1e:d1:b5:ce:e2:ff:46:88:97:9f:0a:0a:59:26:b1:33:c6:
         23:89:90:06:4b:64:d9:c8:a2:d5:10:ac:5c:70:10:1a:f0:42:
         97:8a:74:a1:58:79:fa:64:7e:44:54:c7:45:4f:de:6f:7c:bb:
         78:fe:2d:42:a3:75:aa:8f:fa:b7:17:84:64:f3:05:c5:85:e8:
         91:8b:d2:c6:f4:29:b8:f2:df:43:f4:cf:1a:a1:47:5b:be:02:
         6b:16:29:14:e3:26:c2:0f:dd:79:07:d7:e2:a8:90:cc:e8:d8:
         76:2e:dd:1a:01:9b:f0:b7:6f:1a:c2:7d:a3:2f:84:2f:e1:ee:
         9f:d6:17:07:85:b1:24:16:b6:e3:c8:6c:2a:0c:75:26:c9:10:
         f8:57:e6:6e:f1:ff:f4:62:53:5f:7a:d3:14:b4:c7:db:73:54:
         c7:05:6d:ad:80:9f:2a:e3:77:87:36:c5:10:7b:fe:44:af:03:
         5c:63:57:e7:46:7a:70:5b:ed:d8:d3:0f:60:fa:a7:9c:87:7f:
         fd:d8:8c:6a:6e:bf:a3:ef:9f:be:f4:97:75:be:bb:9e:c8:88:
         b8:b3:b3:da:5f:a6:69:53:28:df:a6:08:51:aa:50:af:26:18:
         4d:db:c8:58:50:1b:b1:21:82:69:b4:84:81:39:45:7f:2e:6c:
         37:af:ff:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 01:54:13 2024 by rpki-client on console-ams.rpki-client.org