Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File:                     718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier:          Vle08aOovdyP+Db/reY6+ERfCO8aSGZd3MWqa1kWCtw=
Subject key identifier:   6B:43:52:4F:4B:61:91:BE:91:85:2C:63:8B:1D:44:17:D0:A1:A4:F5
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer:       /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial:       018F3BF9E241BC533EC27FBCD3794249F038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number:          0B49
Signing time:             Fri 03 May 2024 01:03:03 +0000
Manifest this update:     Fri 03 May 2024 01:03:03 +0000
Manifest next update:     Sat 04 May 2024 01:03:03 +0000
Files and hashes:         1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: YawFYKFwUPBBa8hq+Irm9hlBu2NKtZTK/LOZazGed74=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:e2:41:bc:53:3e:c2:7f:bc:d3:79:42:49:f0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
        Validity
            Not Before: May  3 01:03:03 2024 GMT
            Not After : May  4 01:03:03 2024 GMT
        Subject: CN=6b43524f4b6191be91852c638b1d4417d0a1a4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:5b:21:24:93:4d:36:04:cf:18:83:90:85:
                    ba:e8:75:8d:a3:54:57:53:aa:68:21:c8:58:90:fd:
                    2d:9f:d7:bb:d6:98:c3:02:ad:26:0c:70:69:4c:ac:
                    71:94:1f:33:e0:75:a6:2c:07:0f:c9:bb:ed:69:13:
                    f1:8f:8f:e5:6e:5f:3f:32:6a:1f:f0:11:a0:f6:ff:
                    73:da:de:96:77:ca:bc:d8:fb:f4:c3:54:a4:1c:21:
                    da:8d:4f:51:f2:d0:f5:df:5b:68:68:41:84:01:5c:
                    fa:a2:cf:2e:a9:c8:7b:1b:c0:32:29:1b:a8:26:40:
                    b0:ad:39:47:02:32:26:35:c0:31:f2:f2:1c:ee:1d:
                    ec:5a:bf:09:ec:f7:56:e3:51:fb:41:63:22:2d:0e:
                    ed:f3:57:aa:3c:b4:9b:cf:da:d7:b7:95:9e:48:f2:
                    d7:04:d3:24:45:f6:69:65:e3:07:f7:13:2b:40:c6:
                    39:60:b6:c1:7b:07:55:28:f6:03:2f:45:c2:7b:9d:
                    aa:24:58:a4:e9:81:10:ec:d8:a0:d9:04:87:5c:4a:
                    fa:ce:80:f0:ad:0a:af:56:bf:f5:b6:37:16:6b:1b:
                    f9:c2:4b:4d:a7:55:0b:d7:05:20:9d:aa:d7:90:17:
                    21:a9:50:37:6b:3a:ca:d7:c4:23:2c:c8:e3:20:ac:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:43:52:4F:4B:61:91:BE:91:85:2C:63:8B:1D:44:17:D0:A1:A4:F5
            X509v3 Authority Key Identifier:
                keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d7:79:22:c9:d4:8e:a1:4b:a1:90:ef:5f:87:10:b5:b3:5a:
         fd:ef:17:32:36:56:d4:68:36:b3:5b:15:e5:bd:33:fe:96:56:
         b9:c1:8a:e3:7e:76:82:f4:b6:29:06:71:aa:95:71:ba:66:cd:
         e5:f8:11:2b:00:7f:99:85:69:6f:bf:65:ea:41:59:22:5f:d0:
         9f:2b:98:90:93:c8:68:37:e0:d4:63:1a:53:1a:07:d8:1e:10:
         88:ee:55:0d:eb:79:a6:57:48:cc:f6:c7:e5:81:f5:ef:ba:0f:
         58:04:d6:12:31:e7:49:83:48:a5:30:f4:03:5e:99:a2:96:04:
         92:6c:5c:21:a9:a4:e5:c4:fc:67:31:20:55:b3:7b:83:ab:09:
         d7:d0:23:a6:f4:87:45:74:d7:ad:0a:96:ad:2f:13:53:40:f6:
         34:4d:4e:2f:6e:0e:88:71:4a:9f:be:fa:44:1c:c9:67:0c:43:
         40:0d:f4:90:fa:69:9f:5c:3b:5a:8b:58:9e:f0:23:3a:4e:f5:
         06:00:d3:c5:3b:6c:a0:28:1f:4e:a2:85:2b:ed:0a:4d:3f:a6:
         82:5f:75:cb:20:9b:ba:88:7d:1a:21:85:97:05:87:12:2c:69:
         75:e0:85:97:fc:6e:34:cb:6d:0f:80:8e:98:31:d0:1a:e1:02:
         3f:7a:45:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:12:39 2024 by rpki-client on console-ams.rpki-client.org