Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File:                     yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier:          MYaKyA5DncWttsrNAFi1PfMOB6z2E7KBZaq/Zx2MI1Q=
Subject key identifier:   CD:F5:79:F2:37:30:FC:8C:1B:27:30:45:05:AD:7A:FD:9D:EF:26:FD
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer:       /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial:       018F874B1C772C4CF1DD60E0E5424C6FDD55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:03:17 +0000
Manifest this update:     Fri 17 May 2024 16:03:17 +0000
Manifest next update:     Sat 18 May 2024 16:03:17 +0000
Files and hashes:         1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: P52lNL+/wlw71N+bndQluIld9LiO5rpwybWX99yim8E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:1c:77:2c:4c:f1:dd:60:e0:e5:42:4c:6f:dd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
        Validity
            Not Before: May 17 16:03:17 2024 GMT
            Not After : May 18 16:03:17 2024 GMT
        Subject: CN=cdf579f23730fc8c1b27304505ad7afd9def26fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:6e:54:33:88:67:9e:d9:71:d3:ac:30:b4:
                    15:02:52:1e:75:04:58:14:77:ec:8a:45:d6:20:c6:
                    53:cd:df:a5:7a:3c:f4:e0:dd:41:e5:e7:4f:9d:24:
                    95:a7:2e:8f:7f:a6:d3:42:82:ff:a4:63:bb:05:60:
                    d0:54:ba:80:37:9a:fb:f3:fe:24:fb:b6:5a:79:10:
                    70:9f:f9:3e:e1:6c:1f:75:8a:c9:88:6b:de:36:ae:
                    73:25:e3:20:69:2a:39:e6:3c:3c:1c:98:27:07:26:
                    3f:4f:6c:4f:e6:b3:93:37:ff:e6:ff:f6:c5:3a:a5:
                    f8:b8:83:ef:b5:76:dc:f4:02:fc:a6:c7:2b:95:da:
                    57:df:55:d8:25:e1:61:f0:ea:4e:bc:6a:0c:68:4f:
                    7f:6a:e0:19:ca:fc:8e:a0:2f:89:46:d8:ab:0c:04:
                    9b:b7:e0:6d:83:87:3c:10:de:d5:a7:e3:61:b1:75:
                    c3:b6:cc:93:89:84:ea:1c:e6:73:46:e4:db:26:d9:
                    10:87:30:f7:ca:46:ae:3c:a5:83:82:d3:57:88:b2:
                    73:a9:68:fb:a4:0e:fb:ed:df:b0:9c:7c:ab:de:e4:
                    90:84:7e:6d:9c:79:c4:7a:d6:9d:52:03:68:be:9d:
                    b1:89:09:6f:c2:1b:0b:95:6c:52:7d:2f:79:e4:f0:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F5:79:F2:37:30:FC:8C:1B:27:30:45:05:AD:7A:FD:9D:EF:26:FD
            X509v3 Authority Key Identifier:
                keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:83:a9:c9:c2:12:68:b2:2b:06:0c:91:6a:cc:52:61:8d:c0:
         40:1a:7a:4d:d2:d1:76:9e:43:ec:7e:75:30:40:8b:56:b8:ce:
         b5:19:ab:e0:19:13:88:4f:62:9c:f9:dc:bb:b2:8a:89:1c:21:
         db:9c:fe:62:9c:1a:90:e1:68:b8:ba:d0:88:f2:35:06:3a:9a:
         17:96:f9:5a:66:6e:88:82:d6:6a:e6:df:f4:6b:2e:14:7d:aa:
         93:3d:15:ef:06:0a:ab:08:c5:45:ac:ee:7e:bb:47:f1:6c:ee:
         39:60:91:82:26:fd:91:49:22:b5:6e:c2:c2:17:24:dd:e8:92:
         51:5c:cc:f4:60:5a:df:bc:18:68:c7:45:99:ed:32:e0:8a:6f:
         16:49:b8:9c:3f:3e:5c:bf:ca:e0:01:5d:67:de:10:2a:8b:48:
         29:8b:97:58:3a:69:16:80:05:e0:69:10:e9:a8:44:0e:1f:92:
         00:22:5d:e0:9f:39:e2:ab:2f:64:7d:ed:11:c3:ba:ee:95:88:
         2c:49:cc:62:72:e7:ab:d7:ae:6f:62:24:3a:17:93:36:8d:b9:
         e2:53:59:cd:e7:00:fd:86:a1:59:82:e8:80:4b:fe:9b:7e:2e:
         dc:1c:f7:ba:1c:65:54:af:0f:00:07:74:19:a3:b6:f3:aa:2f:
         97:a9:bd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:31 2024 by rpki-client on console-ams.rpki-client.org