Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
File:                     ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft (raw, json)
Hash identifier:          8CK2hxzzCvHCgDSdJK3jvNL4NWJmfMwBhmNsVzOxxjI=
Subject key identifier:   3A:FE:F8:90:AA:FE:9D:F4:1B:D9:1F:FA:53:40:4B:FD:9B:AE:8B:6B
Authority key identifier: 72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2
Certificate issuer:       /CN=724f14189ab7105620375daf9baa814d6dd937a2
Certificate serial:       019238BA3CEBE86D33C541A0529DB32ABE5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
Manifest number:          044B
Signing time:             Sat 28 Sep 2024 13:03:02 +0000
Manifest this update:     Sat 28 Sep 2024 13:03:02 +0000
Manifest next update:     Sun 29 Sep 2024 13:03:02 +0000
Files and hashes:         1: ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl (hash: zj9gYFwTetPgWKd9yWIx7g+b73ecp8/kuAa6qm+8axY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:ba:3c:eb:e8:6d:33:c5:41:a0:52:9d:b3:2a:be:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724f14189ab7105620375daf9baa814d6dd937a2
        Validity
            Not Before: Sep 28 13:03:02 2024 GMT
            Not After : Sep 29 13:03:02 2024 GMT
        Subject: CN=3afef890aafe9df41bd91ffa53404bfd9bae8b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:ed:d8:21:9c:26:c7:2f:44:90:2a:f4:ef:
                    38:67:f0:b7:3c:e7:22:9a:aa:28:a1:0d:20:05:10:
                    50:81:28:c5:41:bf:dd:40:d7:a1:74:49:6a:9c:ec:
                    f0:12:95:5b:97:5c:1c:49:1a:51:0e:e2:a3:b8:94:
                    84:f7:e6:dc:b2:f1:df:44:80:49:e3:af:11:c8:86:
                    57:39:1d:73:af:47:e2:c3:40:48:09:03:cf:eb:2a:
                    c1:3e:23:f0:43:3c:99:46:4a:14:c1:96:59:8e:5f:
                    fd:c7:3a:9f:79:50:69:6d:33:09:66:6f:2d:22:ee:
                    9e:6e:86:5d:36:ce:ef:53:11:e8:f8:f0:dc:29:a6:
                    b3:ad:24:98:33:c6:e4:74:c7:3b:3a:b7:06:9e:22:
                    5e:40:1b:91:19:1a:19:f5:65:88:94:a0:29:44:a8:
                    07:74:f3:83:f4:02:34:91:d0:5f:34:c6:ae:d3:7b:
                    94:f2:99:68:99:78:8d:89:16:4f:7b:f3:3d:94:9f:
                    cf:b4:22:85:8f:2a:6e:e8:1b:84:3a:35:a9:32:22:
                    c1:e9:11:33:4e:af:74:59:29:85:cf:53:3e:14:80:
                    50:e3:ba:8d:8a:1e:8c:70:30:2a:e4:94:d7:3b:d8:
                    3f:40:ec:5e:c6:5b:b3:8a:99:94:a5:cf:06:1b:98:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FE:F8:90:AA:FE:9D:F4:1B:D9:1F:FA:53:40:4B:FD:9B:AE:8B:6B
            X509v3 Authority Key Identifier:
                keyid:72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:87:ba:d0:cb:3a:35:c9:22:4c:9a:f5:93:c9:ff:77:ac:a4:
         17:d9:f6:62:dc:3f:9f:9d:d9:78:17:29:6f:b7:f4:b6:90:b0:
         4b:78:be:b0:11:ce:8c:2b:51:fb:b6:1d:69:b1:77:d4:5b:c6:
         fe:31:b2:01:c9:32:4e:19:ca:19:b6:a3:e0:3f:0d:a3:83:fc:
         01:c5:c6:a6:ad:de:e9:02:8d:85:ff:ab:9f:05:33:b5:12:7c:
         c5:af:47:d3:e8:ee:49:d9:04:6b:20:56:84:9a:e8:88:51:e3:
         09:eb:92:02:b2:9e:8c:8f:e1:8f:5f:97:66:11:ce:92:33:d2:
         13:06:25:80:f7:a8:33:a2:f6:f1:34:ed:26:e1:e8:c8:6d:8b:
         81:27:02:26:3f:bd:fa:4f:ff:af:81:18:2c:1c:ee:f8:f9:ee:
         ad:c2:c1:db:90:73:ca:3e:5a:87:25:d6:2d:69:8d:8d:81:1b:
         f3:09:8a:a6:b9:ca:3f:a5:08:a9:48:e5:b3:38:4f:80:71:68:
         c1:13:8e:05:76:1a:37:f6:6d:01:aa:06:cc:2e:f9:df:13:03:
         8a:64:af:87:6a:85:e5:02:d9:1b:62:99:c9:a4:54:f6:eb:f7:
         50:4b:65:8c:04:fd:40:3c:ed:87:05:58:54:84:ad:e9:88:df:
         30:d4:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:15:28 2024 by rpki-client on console-fra.rpki-client.org