Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File:                     3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier:          y4a6IuBR8+cAV/w5Ls8YnSnD+7BOWte8fWvAuk60jYo=
Subject key identifier:   9F:E5:27:28:21:B2:0F:D0:FE:C1:1C:1D:C9:F4:7A:74:12:84:84:AA
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer:       /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial:       018F5513738137FF77575FE24948F14CB890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number:          0843
Signing time:             Tue 07 May 2024 22:01:29 +0000
Manifest this update:     Tue 07 May 2024 22:01:29 +0000
Manifest next update:     Wed 08 May 2024 22:01:29 +0000
Files and hashes:         1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: tQsh9KGRJ/s3rayQn+tC6ccumx5PAK7XtBeT5c8LSk4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:13:73:81:37:ff:77:57:5f:e2:49:48:f1:4c:b8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
        Validity
            Not Before: May  7 22:01:29 2024 GMT
            Not After : May  8 22:01:29 2024 GMT
        Subject: CN=9fe5272821b20fd0fec11c1dc9f47a74128484aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:38:d8:15:f1:86:10:1a:93:91:51:90:11:
                    1f:d1:aa:09:1b:ed:9f:45:ae:e0:89:43:9c:60:98:
                    d5:31:3a:e8:72:c9:29:9a:0b:0e:fd:02:08:d1:b4:
                    b9:9a:09:6e:17:f0:17:80:16:40:0b:46:23:31:48:
                    81:4d:ba:f4:3c:92:cb:9c:86:c2:90:ed:be:bd:0b:
                    a7:ab:4e:1b:11:f5:b4:20:cf:e6:70:85:5e:13:5d:
                    b9:48:78:20:d4:a3:77:68:ad:ff:45:a8:3f:56:5e:
                    23:0b:b4:19:30:f0:82:ee:49:9a:98:c8:13:08:9f:
                    8b:8e:11:f9:7d:32:54:6a:c4:fb:b3:d0:59:3e:69:
                    1b:d6:e0:a9:20:d8:cd:5d:37:58:7e:c3:ea:ed:51:
                    53:45:92:b3:c1:9e:a3:8b:d5:dd:e3:f7:f8:67:19:
                    04:82:67:38:bb:f7:d5:bd:e3:9b:c5:80:c5:a5:e7:
                    3b:76:75:66:c3:46:12:f4:e2:fd:a3:eb:d4:26:ac:
                    6b:82:3e:d7:a9:c6:1c:e9:96:9d:f8:27:0f:9a:89:
                    86:40:81:db:2d:f4:08:ea:4b:16:8c:0e:dd:d3:6c:
                    6b:ba:09:aa:84:bc:3e:f7:20:c3:32:82:ac:5d:bc:
                    77:ce:50:d5:c3:1d:88:5b:18:e9:6a:de:2e:88:72:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E5:27:28:21:B2:0F:D0:FE:C1:1C:1D:C9:F4:7A:74:12:84:84:AA
            X509v3 Authority Key Identifier:
                keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d1:94:55:2f:6b:8c:bf:2f:da:ca:b5:8a:65:bb:34:43:34:
         18:52:3b:63:42:80:33:ea:a2:0b:d5:6e:12:89:33:f9:f1:fa:
         2f:1a:df:08:9e:6b:d0:de:30:33:f0:3d:bc:15:ff:6e:12:26:
         49:74:00:36:92:58:74:10:25:42:3a:1f:df:7d:f4:22:d1:06:
         35:7e:34:2a:31:9c:b2:14:01:4c:27:71:2d:b2:c5:44:6e:0f:
         42:17:a6:0a:f9:98:4f:8c:a2:ff:3e:9f:e2:9b:d2:c2:db:71:
         7b:db:1b:46:91:83:cf:2c:dd:92:ef:62:d0:dd:0e:68:76:72:
         f8:4e:b2:44:2b:26:79:df:b4:93:fc:1e:b8:51:d6:d3:51:bf:
         ed:e7:1a:82:6a:ba:3e:84:76:10:99:e3:00:c6:9d:d5:50:76:
         ba:9e:19:ef:18:53:cd:d1:cd:d2:82:50:e2:37:e3:c4:5a:61:
         57:07:60:18:22:02:64:ba:b9:ac:c5:3c:5e:52:4e:c1:21:04:
         a7:04:74:99:4b:8d:d1:b0:46:b1:9f:00:75:06:71:4d:b3:eb:
         4f:b3:34:39:81:a9:46:0f:b5:46:97:83:d4:c0:91:e7:44:10:
         49:4a:0e:7e:a4:bf:b1:df:d0:d7:4c:0a:51:be:aa:32:5f:41:
         43:02:b6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:17:18 2024 by rpki-client on console-ams.rpki-client.org