Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
File:                     o_fz-CX46MJWXq77Zud0TJKV3Mk.mft (raw, json)
Hash identifier:          Xv8JLiRsZi3yErN+AHxgOPI7JXnhK/lcTLqZhe5EPRI=
Subject key identifier:   4E:AC:30:F7:07:E3:56:B4:C2:34:B2:F5:84:13:46:82:86:70:A0:0A
Authority key identifier: A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
Certificate issuer:       /CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Certificate serial:       018F874A84F48372DF61E337B5FD95808BBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:38 +0000
Manifest this update:     Fri 17 May 2024 16:02:38 +0000
Manifest next update:     Sat 18 May 2024 16:02:38 +0000
Files and hashes:         1: o_fz-CX46MJWXq77Zud0TJKV3Mk.crl (hash: /gtgP2QcRxRqq2i6tVHs80UpzxHxp0e3BjZswhwIhT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:84:f4:83:72:df:61:e3:37:b5:fd:95:80:8b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
        Validity
            Not Before: May 17 16:02:38 2024 GMT
            Not After : May 18 16:02:38 2024 GMT
        Subject: CN=4eac30f707e356b4c234b2f5841346828670a00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:6b:c4:db:d4:c7:c8:c6:ba:55:a9:b2:94:
                    4e:ae:e4:ae:44:5c:92:1c:48:98:11:f0:86:74:39:
                    3f:1f:4d:93:85:ee:b0:a1:98:0f:f6:15:93:1a:b7:
                    33:62:17:3c:e9:6b:eb:e5:ba:38:fa:25:35:0b:fc:
                    eb:d5:cf:bf:00:da:6f:ec:48:cf:cc:f9:53:15:80:
                    5c:f9:fa:f5:17:8b:95:fa:91:6c:90:f6:5f:a3:a1:
                    42:4e:89:33:64:fe:90:89:9d:f2:9b:34:ef:f3:1d:
                    d3:3a:06:43:89:5c:cc:94:09:20:b2:b4:40:18:bb:
                    63:3b:bc:1e:d5:fc:0d:8d:2d:ba:ef:d9:3e:13:9f:
                    21:e1:16:9d:55:1a:a3:1c:69:be:f7:c2:60:b9:f0:
                    b3:ee:03:89:98:09:de:4d:3a:10:cf:5b:87:99:32:
                    7f:ee:d5:25:ed:a0:43:dc:8b:54:84:c4:4b:cb:9e:
                    7f:a9:ec:f8:21:27:a2:c2:94:a9:ef:22:a8:0b:f9:
                    50:dd:3e:45:65:da:90:75:c6:84:08:b1:52:dd:69:
                    d4:d3:ed:98:e2:98:01:61:14:76:20:ef:f7:22:52:
                    32:f5:37:9a:1b:84:19:69:e2:21:20:89:57:fa:b9:
                    d2:7e:06:c6:f3:d4:87:23:e4:97:38:e9:19:97:77:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AC:30:F7:07:E3:56:B4:C2:34:B2:F5:84:13:46:82:86:70:A0:0A
            X509v3 Authority Key Identifier:
                keyid:A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f7:ef:02:3f:96:43:8e:31:da:36:d4:d4:ea:9a:24:f6:c5:
         1c:3f:67:b7:46:32:ed:63:bd:cb:31:7d:8f:4c:ef:f2:60:78:
         24:db:ee:ef:41:fc:0c:4a:49:91:cb:a5:6a:8c:c2:35:15:38:
         22:74:b6:06:cd:e6:89:65:43:f3:a4:36:d4:e5:f8:32:8d:91:
         78:3f:dd:b6:91:b1:3c:a6:19:1e:7c:8c:cd:0d:f1:ae:ed:f6:
         a1:85:93:31:c7:7e:22:88:84:f8:b9:e8:cf:0c:d4:47:a1:ae:
         5e:71:07:c2:50:23:c3:93:87:80:e4:d1:62:81:1f:a6:75:9f:
         dd:97:5c:80:7e:13:6b:e5:86:e6:4e:e1:b2:d3:4a:6c:8c:89:
         27:42:1c:f9:52:0f:99:06:58:3c:2c:25:47:80:e2:41:59:5f:
         1d:b5:7c:c9:51:db:d1:50:7c:2c:a5:7b:30:24:a8:d1:75:95:
         85:59:25:7b:c8:cb:b3:c1:bb:f4:f7:c1:d9:df:f4:44:de:19:
         46:03:38:47:da:6d:ae:f4:03:f3:38:27:ee:fc:44:58:b2:53:
         fc:a0:33:7b:b0:47:1c:49:0b:38:9a:a0:0b:33:c0:09:d0:c9:
         2f:37:29:6e:92:ae:8c:cb:1a:9b:40:ef:3f:33:ea:e7:8d:24:
         cb:df:67:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:46 2024 by rpki-client on console-ams.rpki-client.org