Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File:                     z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier:          35H8tVQ83MHHahKbGCXokCJCKf2EpfU2aKZNChFcTFw=
Subject key identifier:   09:77:04:67:C8:64:4D:B7:7F:06:35:34:D1:5E:84:55:8C:14:22:BE
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer:       /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial:       018F8748E4CB51024822C9E9344E9CE6E79E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number:          0AD8
Signing time:             Fri 17 May 2024 16:00:52 +0000
Manifest this update:     Fri 17 May 2024 16:00:52 +0000
Manifest next update:     Sat 18 May 2024 16:00:52 +0000
Files and hashes:         1: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: n4JV4CdfsnnZ/bDeYfXo6nA2BQYrnnf/DydwNjAXVeM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:e4:cb:51:02:48:22:c9:e9:34:4e:9c:e6:e7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
        Validity
            Not Before: May 17 16:00:52 2024 GMT
            Not After : May 18 16:00:52 2024 GMT
        Subject: CN=09770467c8644db77f063534d15e84558c1422be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:30:aa:c1:20:53:d0:c5:57:91:09:e6:9d:
                    06:95:05:b8:d6:a3:93:37:69:0e:a9:4a:e7:90:1b:
                    ee:04:21:9d:50:a9:00:48:76:45:ff:68:d9:78:a8:
                    6f:1a:c6:bf:a2:ba:22:d6:be:40:84:41:b1:a7:2a:
                    57:07:e6:2d:4f:58:fa:af:fb:a9:75:a0:e7:86:77:
                    2c:ba:ca:50:14:41:bd:c1:11:fa:b5:6b:c3:36:d3:
                    40:66:5e:fc:72:76:14:5d:6b:0f:41:8d:3f:d1:6c:
                    58:57:04:ae:c0:78:94:2a:57:6f:68:36:5c:4b:e1:
                    48:39:f3:42:53:a8:f1:50:d4:79:2c:70:77:c4:44:
                    0f:cd:92:76:d4:da:4b:f5:f5:38:57:1b:f9:8f:a9:
                    4f:0c:c5:cd:36:5b:af:d5:e4:bc:ff:77:b3:92:f6:
                    cc:fa:fb:e3:6a:56:ce:3b:50:75:ce:80:2e:42:42:
                    ec:f3:3d:9b:3f:48:23:68:9f:07:d9:cf:12:44:6d:
                    17:4a:01:d8:47:7d:fe:9a:e8:71:bb:f3:9d:2e:4b:
                    47:fc:0f:49:9c:64:4b:47:ff:eb:61:d6:79:3f:68:
                    8b:0b:2a:3b:31:93:fa:d9:65:e8:e3:3a:03:5c:d0:
                    bf:93:93:04:ac:31:b4:95:f9:a2:06:2e:9a:f0:84:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:77:04:67:C8:64:4D:B7:7F:06:35:34:D1:5E:84:55:8C:14:22:BE
            X509v3 Authority Key Identifier:
                keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:96:d2:13:f5:0a:0a:19:7d:40:1b:e3:59:c1:39:75:5d:4d:
         37:90:3a:ae:f9:22:d7:18:eb:26:5f:c8:19:59:57:28:d5:c3:
         33:60:31:8c:b2:6b:93:40:bc:2f:36:3a:39:ab:13:48:03:dc:
         3f:6d:7a:4e:6a:6d:63:b0:99:b3:12:3b:a8:3a:83:9f:e2:64:
         e7:c8:82:d6:39:cb:19:c4:dc:28:5e:5f:27:c5:46:fb:84:5d:
         55:cd:52:b5:1f:4f:69:ac:ed:65:30:08:11:91:83:3b:f8:b1:
         90:3b:63:5a:54:d6:35:cb:7b:2c:22:ad:8f:2d:9c:df:3b:74:
         67:b9:50:12:c5:6d:3e:a2:9f:7e:ff:af:77:50:fe:30:ac:9e:
         e6:56:58:a5:23:a3:dc:fc:b2:4a:84:17:31:db:02:a8:35:05:
         8d:8f:42:5e:f9:89:a4:1c:e2:5c:ed:ca:0e:6f:d6:06:45:f8:
         8e:04:d2:cc:e8:f7:fa:95:03:88:e4:7e:21:02:40:4d:64:87:
         5b:d2:96:b0:f1:26:5e:c1:a2:08:72:13:5b:86:45:b9:9b:52:
         5c:8d:36:69:12:8b:f0:e6:96:69:83:32:e2:62:a4:b7:85:80:
         6e:58:e9:e4:8b:d3:ae:15:e1:98:5e:2f:e6:10:81:4a:72:b9:
         c2:3a:8a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:39 2024 by rpki-client on console-fra.rpki-client.org