Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
File:                     EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft (raw, json)
Hash identifier:          0xpZFgoAucHZ304Bv8LxB3ihMrOrVhZDUgpsGR/AkSg=
Subject key identifier:   B1:F9:84:90:15:C1:BC:3A:33:D4:8C:E1:8A:27:39:22:2C:9E:7D:95
Authority key identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
Certificate issuer:       /CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Certificate serial:       018F369AB1853B57E12BDC9E5A1C75B96886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
Manifest number:          114A
Signing time:             Thu 02 May 2024 00:00:58 +0000
Manifest this update:     Thu 02 May 2024 00:00:58 +0000
Manifest next update:     Fri 03 May 2024 00:00:58 +0000
Files and hashes:         1: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl (hash: IeXMPpCIUTMFqAKxq6z97m+/mZPtaWwjJziNPOEqkP0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:9a:b1:85:3b:57:e1:2b:dc:9e:5a:1c:75:b9:68:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
        Validity
            Not Before: May  2 00:00:58 2024 GMT
            Not After : May  3 00:00:58 2024 GMT
        Subject: CN=b1f9849015c1bc3a33d48ce18a2739222c9e7d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:3f:a1:96:0f:48:e4:57:4a:2c:ea:8d:09:
                    ea:c3:62:1c:20:72:de:27:df:f8:28:a0:a5:3d:2d:
                    68:fa:ec:7d:b4:1d:80:4b:bf:57:ca:86:16:28:32:
                    8c:bb:b4:86:f5:c3:ee:b6:20:95:1d:14:1e:27:90:
                    92:4a:88:3e:32:f8:5f:ee:96:bd:30:86:3b:44:ea:
                    cc:5d:15:1b:14:a9:b2:98:db:7e:ca:e0:d0:8b:35:
                    a5:f8:ee:77:10:4c:97:dc:23:1f:76:1a:51:e3:55:
                    e7:b1:56:81:74:4c:1d:ae:97:5d:2d:ce:4c:d2:ad:
                    36:22:f9:fc:41:89:3a:74:fa:d4:5f:83:a5:44:6b:
                    40:a8:f7:bd:4e:8a:16:de:b8:0b:9b:4d:e0:f4:ac:
                    94:18:d6:58:9d:7b:91:29:6c:71:c8:1e:fe:22:0f:
                    8a:f6:db:a2:34:a8:b0:09:8f:15:da:70:09:94:5b:
                    39:fd:bf:ca:e2:c0:54:1b:c5:6a:af:48:c1:c8:ea:
                    08:68:7d:0f:99:87:65:22:50:58:f6:f3:a8:83:6f:
                    a6:f5:99:62:62:e4:f3:38:52:89:09:a7:11:46:54:
                    e7:6a:c7:88:c6:70:2e:3b:32:01:44:79:0e:cb:b9:
                    32:ad:37:ec:ad:a1:4a:62:79:6e:d7:3c:0e:45:05:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F9:84:90:15:C1:BC:3A:33:D4:8C:E1:8A:27:39:22:2C:9E:7D:95
            X509v3 Authority Key Identifier:
                keyid:10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8b:fa:03:bc:10:57:68:3b:88:b5:76:86:4b:7a:fc:24:a0:
         bb:9a:b1:98:6a:e5:5a:1e:1f:16:63:ce:9c:7a:c0:8a:9c:af:
         8f:35:9c:83:7a:3c:fd:c7:a8:5c:ad:7a:d3:a1:49:14:5d:dd:
         d1:e3:58:37:b6:8c:19:ee:0a:c6:b0:3d:31:87:d8:d7:57:84:
         c1:57:2a:fb:14:dc:57:74:dc:9b:8c:0e:ff:68:71:3c:44:f0:
         dc:07:a8:f9:3e:6a:34:04:34:be:1f:3d:d8:54:68:7f:37:21:
         e6:4c:13:4c:15:9e:a7:99:1c:9a:e0:cc:bd:e6:d4:36:1a:e1:
         36:66:bd:f4:bb:99:b8:13:1c:46:44:b1:43:7b:62:f0:4f:1c:
         35:ef:b4:f5:8d:c1:53:00:83:1a:23:d2:80:a1:f2:92:30:92:
         5c:ff:14:02:4d:dd:44:56:de:28:75:c5:dc:c0:6a:57:44:29:
         70:d9:0e:2b:04:59:e4:f3:37:46:63:ff:c0:38:5e:ae:1e:56:
         9f:a9:53:d5:6c:6f:ce:ba:35:3f:7e:55:ee:90:a0:41:e7:19:
         40:46:30:d2:b0:e1:03:ce:81:fe:cb:61:92:10:e5:72:4e:03:
         21:c8:0d:6c:76:4f:95:4c:c8:79:1c:48:63:e9:97:82:80:f1:
         43:bb:05:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:58:24 2024 by rpki-client on console-ams.rpki-client.org