Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File:                     0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier:          EZhmbWuTS9wpYZwMwV8IUKbCH6q5S8RSAAcx43kNyQU=
Subject key identifier:   92:F8:28:E8:20:81:28:47:0A:A2:3C:6A:86:E6:FB:7C:7B:19:E8:98
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer:       /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial:       018F87B6195283E98378D472F4281B887C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number:          0137
Signing time:             Fri 17 May 2024 18:00:09 +0000
Manifest this update:     Fri 17 May 2024 18:00:09 +0000
Manifest next update:     Sat 18 May 2024 18:00:09 +0000
Files and hashes:         1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: /zlCWvHibmGBg0osQb6LUokZCHNheY3P8xqzoD4jNUc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:19:52:83:e9:83:78:d4:72:f4:28:1b:88:7c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
        Validity
            Not Before: May 17 18:00:09 2024 GMT
            Not After : May 18 18:00:09 2024 GMT
        Subject: CN=92f828e8208128470aa23c6a86e6fb7c7b19e898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:ce:48:fc:f4:00:f8:85:71:c5:8f:bb:32:
                    28:cc:06:bc:b2:63:7a:0e:d5:24:ab:bf:cd:0a:5d:
                    7a:00:91:35:24:aa:a8:84:f7:3d:9f:ba:93:d3:da:
                    1f:9c:d1:8d:c2:6f:c3:c9:96:e5:e1:79:58:2c:7d:
                    5b:57:cb:39:3a:95:b0:96:05:4e:50:b2:cb:73:6b:
                    fb:bb:8b:c2:94:08:5b:c1:ac:80:9a:55:27:7b:59:
                    07:54:86:89:d6:53:e6:8d:ef:90:95:47:4d:e9:1e:
                    27:e1:65:1d:6b:65:db:a6:8f:88:af:c2:bd:66:e9:
                    6f:f0:d7:ff:11:35:d2:6a:84:42:f2:de:43:99:5b:
                    a2:1a:e9:da:84:43:d0:30:b0:23:15:c0:bd:4d:7c:
                    a2:c3:82:cd:c8:8c:5c:4f:8d:7b:64:1d:12:94:a0:
                    db:54:98:8c:e5:10:29:d4:f4:37:ac:49:84:70:03:
                    08:17:9c:07:da:05:9d:c3:2c:58:30:2c:07:c3:d6:
                    42:33:25:46:fd:40:2b:fa:20:41:8c:4a:80:73:17:
                    44:3c:f3:7e:b1:4d:b4:43:f7:71:ab:38:c6:93:79:
                    65:a3:e8:99:c5:6e:42:d5:4f:b7:50:b1:ae:a2:0f:
                    db:02:5b:3a:8e:21:cd:88:84:82:60:10:72:a4:ae:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F8:28:E8:20:81:28:47:0A:A2:3C:6A:86:E6:FB:7C:7B:19:E8:98
            X509v3 Authority Key Identifier:
                keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:40:a7:e6:48:6b:e2:e5:20:53:91:e1:80:94:70:5e:69:9e:
         22:66:7c:70:59:47:71:5b:60:bb:4a:b2:eb:f0:9e:04:a8:ab:
         9e:9d:b9:4f:27:d0:ff:ad:af:22:ad:a8:0b:a5:65:02:a6:4b:
         a8:ff:08:71:59:8f:f4:cf:e9:eb:a9:39:76:97:34:ef:69:54:
         a1:32:68:63:fd:92:a9:09:72:9c:20:ef:21:36:95:15:65:e1:
         b8:ff:5b:39:3c:29:e8:28:16:fa:1c:97:ec:67:ea:fe:13:cb:
         3a:97:1a:00:c1:bb:f1:99:14:5d:76:fb:bd:16:64:6e:03:8e:
         80:bc:1d:3f:4c:a9:da:15:cf:b4:b5:9e:2b:d9:a5:33:a0:1f:
         2b:94:41:f7:18:ce:e7:ec:1f:bc:26:a1:a3:e6:ec:b5:39:4a:
         af:7d:b1:3e:7a:5e:75:96:69:85:f3:58:92:b0:96:a7:55:a9:
         8a:f1:ea:72:61:3c:39:7d:d5:3c:05:a8:23:ae:3c:2f:a4:0a:
         d0:9e:bc:a6:0b:6e:47:c9:f4:16:4a:a0:bc:fa:ef:7b:5b:47:
         b9:53:c3:79:29:d5:eb:6d:9e:ec:fc:d9:10:b8:74:2e:3e:22:
         24:ab:3e:2d:b4:cf:ac:f9:09:63:73:e2:41:ab:73:21:be:7c:
         cb:4e:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:39 2024 by rpki-client on console-ams.rpki-client.org