Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File:                     DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier:          Bx31tNpL4+oDij5QWM7QGR4rUfmojvUjLHJXGNfVkt4=
Subject key identifier:   0D:34:21:58:A4:7F:77:94:78:55:71:ED:4D:87:4E:AC:C4:21:3B:FC
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer:       /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial:       018F441FF1BD8E3671E9EE4094D200843567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number:          1151
Signing time:             Sat 04 May 2024 15:01:35 +0000
Manifest this update:     Sat 04 May 2024 15:01:35 +0000
Manifest next update:     Sun 05 May 2024 15:01:35 +0000
Files and hashes:         1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: jEm5G0f9DuoPBCMESqYkJ4RMqjIqGtwD1i38n60fDic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:f1:bd:8e:36:71:e9:ee:40:94:d2:00:84:35:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
        Validity
            Not Before: May  4 15:01:35 2024 GMT
            Not After : May  5 15:01:35 2024 GMT
        Subject: CN=0d342158a47f7794785571ed4d874eacc4213bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:f1:87:76:22:77:6a:98:4f:f0:0e:9d:80:
                    7a:1c:74:5f:10:34:17:db:e8:87:29:58:99:fe:24:
                    05:f3:6f:81:66:6f:f6:87:fe:f6:6e:36:79:29:9d:
                    5b:a3:a7:9b:e5:25:b4:f9:52:eb:63:13:4a:06:5a:
                    5a:ad:da:ec:92:e5:95:de:59:19:11:1f:6e:a6:ee:
                    f7:93:23:ee:32:e6:37:90:3d:53:ad:bc:4e:6a:e0:
                    57:c3:5d:21:8d:a9:52:40:2a:8b:de:1d:a8:47:75:
                    7e:62:7b:27:86:10:36:e6:7d:23:ff:f9:cf:4d:6a:
                    0f:b9:95:95:fa:8d:a5:76:36:26:f8:e3:76:11:d4:
                    ac:03:f7:4c:bb:c5:a2:9b:bc:ce:48:7e:7a:90:66:
                    a6:ea:55:e8:5a:89:c9:7a:17:c6:2d:13:4a:e5:d6:
                    68:b5:af:90:3c:5b:fe:20:06:70:98:8d:76:58:29:
                    8d:75:61:74:eb:bf:e1:75:f8:56:4a:bb:45:d4:e1:
                    dc:9a:3b:8b:c3:fa:6d:e1:b0:29:25:43:a4:ee:90:
                    0f:3b:7b:cd:b4:2d:ee:48:8b:61:86:91:c7:c2:22:
                    6b:77:71:81:5b:67:44:8a:32:12:ef:ff:be:23:96:
                    fc:cc:4d:a8:f6:4d:06:60:d4:6e:79:06:30:9a:02:
                    19:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:34:21:58:A4:7F:77:94:78:55:71:ED:4D:87:4E:AC:C4:21:3B:FC
            X509v3 Authority Key Identifier:
                keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:fc:5a:df:16:0a:24:5f:d7:7c:90:40:96:c1:e0:83:16:
         82:98:f4:4c:c9:bc:b9:1d:4a:bc:78:a3:b8:83:45:5c:50:3c:
         de:10:23:dd:6a:c3:9f:9e:ce:6f:d6:bb:8f:5a:d6:58:f2:6b:
         6d:28:3f:37:f0:13:23:cc:d2:2f:be:79:fe:f1:32:13:73:4b:
         e9:07:24:5f:42:02:de:ab:e5:62:91:19:cc:b7:e2:7b:0b:6c:
         3e:a7:db:9e:72:00:07:9b:ea:b2:e5:8b:1f:3b:bb:62:1b:6b:
         63:0b:b5:9c:da:48:09:86:f3:24:b8:f6:82:c2:ef:bd:95:e5:
         fe:a4:63:1b:65:a5:7d:99:15:bc:8b:5d:a0:9f:c3:7e:b3:62:
         e2:84:bd:6b:c3:9b:9c:f1:65:c7:13:b4:c2:f2:6d:81:a4:34:
         f0:4c:b9:6a:f8:58:1b:f3:96:39:75:8f:69:74:f0:80:85:92:
         33:31:b2:38:0a:9d:34:12:8c:a1:56:4f:a0:fb:0e:26:85:3d:
         64:e2:6c:26:14:b2:ee:c1:fe:e9:fa:81:43:b1:e4:f4:84:6f:
         02:0d:bd:c9:15:2f:33:53:24:ca:e3:3b:58:04:e3:c5:16:4d:
         4e:7d:fe:7f:fc:a0:8e:2e:1a:0b:12:47:8a:b5:1d:72:cf:fd:
         20:3d:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:52:43 2024 by rpki-client on console-fra.rpki-client.org