Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
File:                     3Mx29__HFoYLOtY56_kdxN1hMAA.mft (raw, json)
Hash identifier:          QoV7FDmrI7YYJzxkt4D/sfvVpvEi2M/JkJQJYdzqmA4=
Subject key identifier:   5C:A8:04:84:3D:DB:EF:5C:0A:12:A3:D8:3B:05:60:96:8B:AF:14:44
Authority key identifier: DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
Certificate issuer:       /CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Certificate serial:       018F4F48A7D3A6B2997DEF1AAECF7FC5EAA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
Manifest number:          051E
Signing time:             Mon 06 May 2024 19:01:52 +0000
Manifest this update:     Mon 06 May 2024 19:01:52 +0000
Manifest next update:     Tue 07 May 2024 19:01:52 +0000
Files and hashes:         1: 3Mx29__HFoYLOtY56_kdxN1hMAA.crl (hash: BtALrzQmkrQHkcoudQv6ncjAYgeiqdJQCx7jf+VZNYQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:48:a7:d3:a6:b2:99:7d:ef:1a:ae:cf:7f:c5:ea:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
        Validity
            Not Before: May  6 19:01:52 2024 GMT
            Not After : May  7 19:01:52 2024 GMT
        Subject: CN=5ca804843ddbef5c0a12a3d83b0560968baf1444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:16:2e:70:64:0e:76:bf:e0:51:fa:63:3c:e2:
                    83:13:e7:b6:6d:a7:21:4e:57:7e:3e:ec:cf:44:91:
                    5b:92:a1:b6:90:eb:ad:ed:8e:f6:ed:48:cd:9b:2d:
                    f3:f6:3c:08:bc:d7:53:0f:fa:88:ed:92:64:3f:77:
                    28:6b:8e:c8:b3:dc:1a:c5:2e:60:1e:7f:d3:8d:2e:
                    54:52:e6:a8:72:4c:31:13:9a:51:14:12:2e:bb:40:
                    33:fa:f5:d4:2d:3f:14:fc:47:f0:82:95:5b:13:55:
                    c1:65:4d:8e:f2:b6:ce:20:19:41:90:30:b6:1c:68:
                    7f:46:85:e3:f1:c4:0e:39:4c:47:f3:b3:c0:ab:b2:
                    99:c4:98:0c:02:f3:cc:de:76:4f:17:4d:af:e0:b1:
                    ca:f4:cc:c1:d8:e8:a8:2f:4c:ff:76:89:78:c1:e6:
                    0a:21:8d:39:68:21:08:71:89:5e:35:eb:65:e9:59:
                    9d:12:e0:03:ce:f0:87:bc:68:5c:10:cc:d7:63:ce:
                    9b:41:c1:7b:76:89:8f:77:38:31:61:a1:32:39:39:
                    af:b9:8b:a0:50:e0:5c:c1:bd:a1:30:d3:24:ca:40:
                    55:a5:e9:cb:3b:57:38:95:1f:e2:36:a6:bc:85:ee:
                    dd:ca:10:6e:03:2b:35:2c:ae:a8:4c:0b:92:1d:06:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A8:04:84:3D:DB:EF:5C:0A:12:A3:D8:3B:05:60:96:8B:AF:14:44
            X509v3 Authority Key Identifier:
                keyid:DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e5:e0:27:e8:39:6b:67:38:e0:d0:80:b8:04:c6:a8:f7:aa:
         68:58:4f:6f:b6:cb:13:2f:7c:68:49:54:4f:9b:30:72:d8:60:
         78:82:a0:76:8c:f8:97:fe:7c:2d:cc:c4:49:ad:0c:d7:8e:00:
         ef:ed:76:ef:24:53:bf:0a:64:d2:bf:29:af:3c:a5:cb:a6:5b:
         1f:f1:c9:e8:b2:79:6a:81:77:22:68:2e:a6:f9:f5:1f:2e:c8:
         c0:6b:79:66:88:3c:4f:f0:9a:86:57:f0:b3:1d:0a:98:6c:dc:
         29:e9:d6:b6:69:77:7e:80:11:5d:dd:6f:76:61:5b:25:d2:3c:
         d0:ba:9b:09:31:34:b0:02:11:17:69:3b:3a:e9:ec:e1:6f:4f:
         e2:68:8e:1c:82:ec:d3:26:62:a4:96:43:ab:b1:b6:e5:1d:49:
         b2:2e:c5:31:1c:0e:de:25:9e:37:fe:2f:ce:ee:04:62:83:db:
         ba:b1:2a:15:c7:98:df:b2:e9:9e:79:bf:9f:ed:6d:83:35:5e:
         8d:78:9a:ac:91:fc:72:e5:58:da:fb:8c:b2:97:40:19:2e:da:
         7e:83:81:91:a0:1b:77:92:2c:da:23:4b:e3:61:f2:9d:a3:2e:
         63:4f:d4:06:4e:62:b6:23:53:a3:43:a5:5d:91:3f:1f:a9:a1:
         57:e4:12:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:42:10 2024 by rpki-client on console-ams.rpki-client.org