Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File:                     7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier:          9soz9SQC34fsKkSgA4/AvrUKmwfKY4lDkwQBUpmNmiI=
Subject key identifier:   55:13:BF:A5:86:DD:42:91:07:B2:D6:8D:85:9C:F1:4F:F5:F1:05:5A
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer:       /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial:       018F369AC793E47E7A50CEE85B20CB36D6CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number:          114B
Signing time:             Thu 02 May 2024 00:01:04 +0000
Manifest this update:     Thu 02 May 2024 00:01:04 +0000
Manifest next update:     Fri 03 May 2024 00:01:04 +0000
Files and hashes:         1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: YOC5nR6NDNbAaHRhYDImwlLKQp6pHX7ma3wSF+L8ReA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:9a:c7:93:e4:7e:7a:50:ce:e8:5b:20:cb:36:d6:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
        Validity
            Not Before: May  2 00:01:04 2024 GMT
            Not After : May  3 00:01:04 2024 GMT
        Subject: CN=5513bfa586dd429107b2d68d859cf14ff5f1055a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:1a:62:4c:a7:83:22:f2:73:bb:8e:7a:dc:
                    f9:3e:d6:0d:31:a5:4f:ba:f9:f4:e3:d8:a9:1f:bb:
                    2c:c1:7c:04:b5:c4:05:dd:2d:1d:4c:f0:aa:c1:4e:
                    78:b8:a9:5c:e6:2d:8a:b4:e6:01:76:e9:ca:1f:eb:
                    d5:f0:43:db:ac:3a:50:e1:dc:db:cc:b8:b4:1e:97:
                    36:5b:85:ab:ae:65:97:48:aa:9f:78:1b:56:45:8d:
                    e0:43:c3:9d:30:f3:14:3b:cb:7d:a3:bb:c7:36:01:
                    25:e3:5c:a7:ab:75:7f:b2:99:ad:7a:ab:df:86:1b:
                    9e:fd:41:43:5a:5a:62:fc:f7:40:2c:60:c2:84:c0:
                    59:47:73:94:83:5a:73:9e:66:7f:2d:ec:8d:83:b8:
                    30:29:0a:e4:31:ab:0d:1e:93:92:7d:3b:62:2c:91:
                    8f:e0:8e:c9:48:57:15:14:a1:cd:98:4b:91:a6:55:
                    5d:42:d5:21:b3:2c:6e:3e:27:39:93:58:58:dc:9b:
                    16:fd:d8:c4:3d:a1:54:31:84:2c:7d:dd:22:7b:63:
                    e7:6c:20:b4:80:6d:1a:c6:6c:e4:ed:46:9e:02:a9:
                    94:98:e3:09:6c:19:88:7f:8d:49:fd:ee:d9:cf:74:
                    e8:a4:2f:15:87:67:c9:b1:ba:03:c6:8b:f3:c9:f5:
                    5c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:13:BF:A5:86:DD:42:91:07:B2:D6:8D:85:9C:F1:4F:F5:F1:05:5A
            X509v3 Authority Key Identifier:
                keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:40:a7:2d:8a:24:46:c6:3c:63:6d:61:7f:cc:9d:00:c9:ef:
         a0:dc:5e:2d:f3:e8:b9:e0:4d:dc:b3:fb:e0:ef:cf:1a:ac:41:
         d9:08:06:d6:8c:a5:ab:83:99:34:24:9c:55:6e:40:1b:75:35:
         a4:8d:18:1b:2a:c9:6a:03:9c:86:b9:74:d4:cd:62:b7:81:38:
         49:d7:00:8f:e1:54:56:a9:45:c4:12:27:44:b5:63:98:6d:3c:
         7b:40:a6:dc:5c:79:76:ed:39:82:39:fa:f8:65:ae:f8:36:5f:
         1b:a7:42:9d:01:da:cc:76:b3:b2:35:9a:26:e7:d7:a1:ec:8a:
         d5:95:ea:2f:32:8d:fe:5e:ba:96:13:6f:e7:15:11:ba:5e:e8:
         93:f7:60:98:8e:33:55:f2:29:83:ab:22:5c:57:47:37:2d:2a:
         77:f4:a3:60:61:33:fa:16:43:a2:09:a9:da:18:20:4a:64:12:
         cd:eb:1a:77:3c:9e:d3:82:64:8c:d8:c5:3b:b0:35:c0:ed:01:
         0e:dc:dc:c2:b4:72:60:7d:a8:40:c6:55:54:44:e2:3f:8d:42:
         ff:25:fe:d0:53:f2:64:28:e8:c5:30:96:de:cc:2e:b5:b7:63:
         f2:2b:2a:cd:2d:ed:33:1e:4a:7d:44:4f:b8:21:fb:09:68:90:
         c2:90:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:59:55 2024 by rpki-client on console-ams.rpki-client.org