Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File:                     ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier:          Merm/NQnZQS98A4D9AUo4pW65XVdkzKgm7lxpaDIMuQ=
Subject key identifier:   2C:4D:F0:50:32:D1:56:53:C3:79:23:FD:57:95:90:32:FA:61:4D:52
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer:       /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial:       018F874B20B3C653EFBA8270889943C93EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number:          0C64
Signing time:             Fri 17 May 2024 16:03:18 +0000
Manifest this update:     Fri 17 May 2024 16:03:18 +0000
Manifest next update:     Sat 18 May 2024 16:03:18 +0000
Files and hashes:         1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: stnogUE4BBW0+P/1jidSG+943nmBkOIr6EZ4/oHDVf8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:20:b3:c6:53:ef:ba:82:70:88:99:43:c9:3e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
        Validity
            Not Before: May 17 16:03:18 2024 GMT
            Not After : May 18 16:03:18 2024 GMT
        Subject: CN=2c4df05032d15653c37923fd57959032fa614d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a6:0b:d6:54:e4:05:a0:13:d7:3c:7b:e6:96:
                    b7:c5:0c:1a:34:95:ec:13:d0:2b:b4:99:2f:90:19:
                    c2:4c:3c:73:03:21:9f:74:e5:13:2c:e4:e2:be:5d:
                    3b:47:3d:19:96:e9:54:fe:f6:b5:40:df:12:a7:fe:
                    be:9f:d5:b7:14:29:61:a5:7c:ed:ac:fd:60:81:36:
                    0f:ce:51:4b:7d:10:20:f8:c3:34:6a:09:1a:d1:62:
                    9a:24:4a:61:17:19:e6:c6:ad:8f:97:57:cd:03:8b:
                    81:24:fe:cc:7d:ad:1c:3a:c1:0f:72:45:52:e1:e1:
                    51:57:c3:c8:29:fc:20:04:7d:df:63:b7:41:d9:98:
                    3c:6a:c3:ce:a2:51:a6:84:b8:a7:eb:5b:91:eb:34:
                    5b:c6:69:ae:6a:9c:0f:f6:36:08:32:1c:42:80:ab:
                    77:c9:42:53:5b:8d:5d:aa:e3:81:52:64:11:88:3a:
                    2a:0e:d7:83:48:91:3a:e3:d6:9d:1b:3c:b0:24:99:
                    85:c7:34:1a:7a:e7:e7:32:ea:52:e2:15:f8:15:27:
                    c6:6c:4a:85:a4:78:cc:07:4e:6e:c5:a7:c0:2d:8e:
                    78:78:e8:f1:1e:6a:6b:d6:5b:91:c2:7b:b2:d2:55:
                    f9:b8:b2:69:71:fe:66:2f:ef:ee:9b:07:dd:29:62:
                    ec:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4D:F0:50:32:D1:56:53:C3:79:23:FD:57:95:90:32:FA:61:4D:52
            X509v3 Authority Key Identifier:
                keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:21:7a:f9:b2:22:0b:0b:2b:54:5b:83:a2:8a:c4:c2:64:f0:
         a3:0b:8a:0c:40:af:23:8f:91:5a:bb:e4:3f:c7:17:07:af:2f:
         00:be:00:6f:75:d4:45:54:f6:5c:de:aa:e0:1d:ab:c8:b3:8d:
         4b:a5:e5:1d:68:86:13:a1:f9:bb:d6:13:2b:39:16:14:46:00:
         57:ee:bf:47:26:30:c6:b7:f8:40:64:71:ac:dd:36:87:27:ea:
         ec:2d:65:3a:98:45:6a:2d:cc:7d:85:ba:bd:9c:c2:ee:d6:fc:
         e6:eb:22:1a:9b:6b:de:a3:78:da:b6:e3:e9:f1:1e:51:82:03:
         61:d1:44:50:32:d9:a5:65:4f:31:60:d3:6e:b9:eb:7b:e1:b1:
         7c:60:59:e6:be:d4:16:ed:50:c3:78:80:d1:77:3d:81:6d:2b:
         fb:95:89:c8:24:e2:8f:9b:ac:1f:9b:ca:ad:71:b1:72:42:19:
         58:52:75:6d:d4:9a:d8:ad:c6:c4:d5:ad:5e:2d:fa:15:ec:c9:
         70:cd:02:4e:47:c8:08:7a:c3:55:c9:d5:ca:6d:85:96:c6:ff:
         09:27:b6:2c:46:dc:58:9e:e4:9f:15:b1:c6:41:7d:c5:20:46:
         d2:31:ff:2f:30:e7:e0:d7:82:09:4e:f2:af:f6:0b:56:d4:9b:
         86:fa:02:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:26 2024 by rpki-client on console-ams.rpki-client.org