Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File:                     B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier:          aR5e43LYYsivKfkmEYm8gGM7FXg5hUD5l2KqaKHyytI=
Subject key identifier:   3D:4A:82:B3:8C:53:D2:1E:E1:56:F0:AF:95:FC:A4:9A:7B:43:25:8C
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer:       /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial:       018F3AE55B81C7C8EF4A7E84A7157426C253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number:          10DF
Signing time:             Thu 02 May 2024 20:01:00 +0000
Manifest this update:     Thu 02 May 2024 20:01:00 +0000
Manifest next update:     Fri 03 May 2024 20:01:00 +0000
Files and hashes:         1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: gB1PieRXc0UXAyvoizMnmzTSYPvE8oXXL4XJe6V4mWU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:e5:5b:81:c7:c8:ef:4a:7e:84:a7:15:74:26:c2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
        Validity
            Not Before: May  2 20:01:00 2024 GMT
            Not After : May  3 20:01:00 2024 GMT
        Subject: CN=3d4a82b38c53d21ee156f0af95fca49a7b43258c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6d:59:1d:07:40:4a:ae:fc:70:48:ec:9d:c0:
                    b5:dc:4c:7e:d6:ee:5f:98:78:8f:95:7a:f3:ed:80:
                    6c:d7:06:5d:ab:2c:28:a3:27:ae:49:88:ad:93:5b:
                    70:af:51:95:63:bb:fd:b6:a5:74:18:f3:2b:aa:6b:
                    c4:0b:9b:29:f1:d5:99:62:d8:3a:d3:ea:ea:25:cd:
                    84:fc:ae:96:27:d9:75:e7:21:2a:cf:e6:f4:c7:63:
                    ee:e1:29:06:9c:21:91:e0:2d:a8:ec:ce:31:b9:ed:
                    10:8d:50:21:1d:08:22:78:53:dd:94:06:49:63:e0:
                    5f:38:77:c9:f0:6d:59:00:5b:77:47:3b:6b:c3:6f:
                    81:16:c7:69:02:aa:06:f7:89:b0:34:fb:37:83:5c:
                    d2:55:68:85:fe:80:66:17:54:29:d3:3b:c6:18:59:
                    de:18:6d:ac:99:0f:86:c5:2e:f1:65:30:af:4b:3d:
                    e1:fd:83:d3:5d:13:79:a0:45:44:6f:95:0a:31:dc:
                    b8:84:95:9c:8a:f0:4c:98:15:f8:b9:da:cb:eb:e3:
                    52:a7:ba:3d:66:9c:20:c5:9f:2b:37:5a:1f:cc:c8:
                    88:c0:d9:45:d9:03:c2:5f:05:e3:8f:8c:d7:a4:3c:
                    af:b0:b3:6a:b9:0f:7e:77:e0:cb:a8:3a:f2:71:e3:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4A:82:B3:8C:53:D2:1E:E1:56:F0:AF:95:FC:A4:9A:7B:43:25:8C
            X509v3 Authority Key Identifier:
                keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d6:31:82:41:1a:b7:ea:57:83:7c:da:af:7e:f4:47:ab:3e:
         85:97:89:1f:3c:97:64:9a:ff:97:14:a8:20:45:e5:69:a7:bd:
         31:b6:95:0f:f3:b0:05:93:d1:c0:c0:f8:25:d2:0b:68:07:43:
         47:36:f5:52:c0:dc:48:76:8f:0b:ec:60:b9:e6:c2:d4:4a:27:
         9b:41:d3:18:e3:c2:4b:7a:c9:0c:fa:bd:ea:d1:48:ec:ff:d5:
         1c:90:00:cb:98:e7:8a:60:ec:2c:8b:68:12:80:2e:06:e9:fd:
         c7:59:10:df:c7:bc:e4:15:d0:71:f9:f8:bc:b5:a4:30:a9:b9:
         56:4f:d0:f7:01:4f:68:8c:c1:55:86:d3:d7:71:8f:f1:0f:e3:
         18:a8:c5:0d:7f:9f:17:2a:9a:8a:2c:ef:6b:0e:0b:fc:81:fe:
         e8:b6:ef:af:4b:48:c9:19:e6:95:ea:84:55:86:59:52:11:e3:
         36:41:44:ee:80:7f:23:c1:b6:8a:75:31:64:0e:31:49:e0:4a:
         98:3c:27:5c:c6:3f:a8:aa:0d:47:97:e7:e1:f2:02:e1:d2:67:
         a5:b4:5f:df:f3:27:ce:b7:e9:9b:7f:54:a3:33:62:de:71:09:
         e6:ce:94:43:6c:53:f8:da:04:69:28:40:22:11:20:ba:23:42:
         fe:23:56:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:16:52 2024 by rpki-client on console-fra.rpki-client.org