Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0506cf-4d17-440d-86a1-e7a54a6bec32/1/QIz5bm5Fp-fk9DU0qy32hijL2Rk.mft
File:                     QIz5bm5Fp-fk9DU0qy32hijL2Rk.mft (raw, json)
Hash identifier:          Fll1/DzNO2uHw4s1q23gL52qzu25crwYh8qfppfVwoE=
Subject key identifier:   56:EA:94:47:33:AB:A3:25:1C:6D:0B:BB:E3:54:03:49:B1:F5:1A:12
Authority key identifier: 40:8C:F9:6E:6E:45:A7:E7:E4:F4:35:34:AB:2D:F6:86:28:CB:D9:19
Certificate issuer:       /CN=408cf96e6e45a7e7e4f43534ab2df68628cbd919
Certificate serial:       018F874933307D7D839A610FBC44A5D8C1AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIz5bm5Fp-fk9DU0qy32hijL2Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0506cf-4d17-440d-86a1-e7a54a6bec32/1/QIz5bm5Fp-fk9DU0qy32hijL2Rk.mft
Manifest number:          0B61
Signing time:             Fri 17 May 2024 16:01:12 +0000
Manifest this update:     Fri 17 May 2024 16:01:12 +0000
Manifest next update:     Sat 18 May 2024 16:01:12 +0000
Files and hashes:         1: QIz5bm5Fp-fk9DU0qy32hijL2Rk.crl (hash: zs2/7IWVv9tG3QpcSu8ZafAOHlyCncEmzd8ELBPyNEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/0506cf-4d17-440d-86a1-e7a54a6bec32/1/QIz5bm5Fp-fk9DU0qy32hijL2Rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/0506cf-4d17-440d-86a1-e7a54a6bec32/1/QIz5bm5Fp-fk9DU0qy32hijL2Rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIz5bm5Fp-fk9DU0qy32hijL2Rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:33:30:7d:7d:83:9a:61:0f:bc:44:a5:d8:c1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408cf96e6e45a7e7e4f43534ab2df68628cbd919
        Validity
            Not Before: May 17 16:01:12 2024 GMT
            Not After : May 18 16:01:12 2024 GMT
        Subject: CN=56ea944733aba3251c6d0bbbe3540349b1f51a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:b0:1d:2e:25:92:59:d3:b0:5e:c6:59:00:
                    b8:ad:fa:5e:2b:c2:db:5d:5e:f4:c7:dd:a1:fc:d4:
                    5d:58:26:a8:16:a2:7f:58:37:d0:29:b3:21:3b:6b:
                    31:a7:f4:a0:92:4b:e0:f7:8b:e2:6e:a0:e1:72:57:
                    a1:0b:27:f8:4b:66:fc:98:11:c4:ad:dd:dd:a1:db:
                    73:0b:f1:c2:2e:9f:16:95:8d:33:a7:63:d8:14:b7:
                    40:fc:bf:9d:fd:7e:31:72:3e:1e:89:34:37:ad:2b:
                    5e:8e:6c:00:d2:5e:14:40:69:6e:a9:9e:20:fa:bc:
                    92:90:67:3e:3d:e8:8f:c0:c8:46:b5:a2:7b:f9:d9:
                    b3:53:ef:22:7e:05:ae:30:a8:49:59:60:b8:70:db:
                    c3:4e:fa:ed:ab:57:13:ee:18:58:2c:00:b1:bc:37:
                    0e:60:ad:61:ec:18:4f:35:5c:a1:f4:d7:ce:60:2a:
                    6a:4c:9f:c1:f4:b5:a0:7c:18:69:40:69:03:31:6d:
                    54:a8:13:1a:3b:94:d2:00:8f:4a:62:16:4c:a7:03:
                    00:a6:5f:b5:27:d6:6a:e4:59:d7:c1:3d:44:10:fe:
                    2c:10:66:92:23:11:89:50:98:32:6f:a5:78:75:ef:
                    92:4a:2d:c3:91:3d:1a:a3:0f:eb:06:17:cb:ce:97:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EA:94:47:33:AB:A3:25:1C:6D:0B:BB:E3:54:03:49:B1:F5:1A:12
            X509v3 Authority Key Identifier:
                keyid:40:8C:F9:6E:6E:45:A7:E7:E4:F4:35:34:AB:2D:F6:86:28:CB:D9:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIz5bm5Fp-fk9DU0qy32hijL2Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0506cf-4d17-440d-86a1-e7a54a6bec32/1/QIz5bm5Fp-fk9DU0qy32hijL2Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0506cf-4d17-440d-86a1-e7a54a6bec32/1/QIz5bm5Fp-fk9DU0qy32hijL2Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fd:20:78:1c:23:04:8d:3a:ab:0f:83:15:88:5a:03:f0:11:
         7c:6f:95:b3:49:c3:8a:22:84:18:0e:0b:00:a3:36:fa:19:99:
         ea:86:b4:8f:bd:c7:2d:be:e0:cb:32:7c:05:58:47:cc:a0:69:
         c7:e8:fb:49:64:d5:e7:7f:23:9e:4c:83:2f:c9:b0:c9:66:12:
         cb:44:22:11:2d:0b:fe:d6:79:f7:29:7f:d0:0f:eb:59:f1:9b:
         ff:bf:0d:64:e3:ba:7d:ab:0d:4a:65:37:64:dc:b9:90:cc:ce:
         16:2d:86:ab:2a:75:76:4d:dc:c1:6d:26:bd:2a:d7:9b:77:be:
         3e:5f:5e:8c:24:b9:6f:42:8a:44:9d:95:48:44:1a:8c:a8:9e:
         9f:1b:82:3b:2f:1b:6e:b2:a9:09:34:cd:2b:ab:36:22:cf:45:
         fa:bc:ac:cb:78:3a:4b:62:4b:f7:bd:e6:f9:f3:41:bc:9e:6a:
         76:b5:b2:bf:33:9d:9b:ed:2b:0a:fe:42:b5:58:74:0b:d7:9e:
         2d:a5:a2:81:31:b5:eb:8f:69:8f:a7:1b:75:8c:cd:89:00:57:
         6e:e0:62:54:80:5c:a3:4d:d6:63:e5:19:74:c5:89:cb:7a:2a:
         4e:1a:b6:7a:fa:14:4c:ab:e9:f5:23:e4:6c:eb:c8:a5:e9:37:
         9a:1f:af:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:38 2024 by rpki-client on console-ams.rpki-client.org