Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File:                     7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier:          fdEEAnqgBdx2rmabbgg33EqtRleYvFWrgtP2uHHLaZk=
Subject key identifier:   98:15:5F:1F:B8:1D:B5:57:28:F0:6C:B3:AB:5A:F1:38:B0:53:38:85
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer:       /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial:       018F4D5A1108F934A635CAE9366B2E261CBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number:          1147
Signing time:             Mon 06 May 2024 10:01:39 +0000
Manifest this update:     Mon 06 May 2024 10:01:39 +0000
Manifest next update:     Tue 07 May 2024 10:01:39 +0000
Files and hashes:         1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: Hn8KJ6q2sl8SvWYGSRcYOyvoBtcXpXPm4LqYVHI82YE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5a:11:08:f9:34:a6:35:ca:e9:36:6b:2e:26:1c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
        Validity
            Not Before: May  6 10:01:39 2024 GMT
            Not After : May  7 10:01:39 2024 GMT
        Subject: CN=98155f1fb81db55728f06cb3ab5af138b0533885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:83:84:02:85:9c:a9:b5:e0:cb:c6:49:3b:
                    eb:b1:55:c3:0e:48:9d:ff:00:80:47:6b:06:d8:d3:
                    94:e0:86:c7:c3:11:b5:c1:66:62:aa:19:dc:5e:73:
                    0f:16:ab:7a:f2:9a:3a:51:18:ce:a6:14:00:21:c4:
                    db:ac:6d:84:de:2a:ce:b0:9f:25:e0:5f:1d:fb:7e:
                    f5:dd:8b:b0:c9:bd:e9:ab:34:b4:ce:1a:26:61:8d:
                    de:70:be:80:2d:f1:de:fb:8e:5c:87:e3:57:5a:b8:
                    f3:a5:32:c0:26:b1:d2:aa:0c:a1:31:13:eb:67:a8:
                    99:5f:c4:23:65:5f:ad:88:71:a7:c1:ba:5a:5e:77:
                    05:f5:46:0d:98:5d:c4:ae:b6:82:b9:50:13:1a:b1:
                    63:5f:67:42:33:81:a6:71:36:0f:e4:0f:f7:6b:d1:
                    4c:5b:b1:0d:29:20:5c:34:f5:58:de:2d:e3:9f:23:
                    d0:20:26:23:27:4c:91:a3:e7:92:cd:3d:bd:08:e0:
                    8e:7f:17:44:60:8c:0e:b5:44:38:2e:d5:9d:5a:9f:
                    1d:b0:e6:53:67:be:ef:49:8f:6b:50:e4:ff:5f:2b:
                    86:81:4f:fe:e6:1c:3e:7d:86:a1:f3:3c:37:8c:c0:
                    7a:7c:b7:18:17:a9:9e:5f:0e:99:b9:ae:b6:65:49:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:15:5F:1F:B8:1D:B5:57:28:F0:6C:B3:AB:5A:F1:38:B0:53:38:85
            X509v3 Authority Key Identifier:
                keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5d:61:29:9d:1d:e2:e5:d1:db:22:b3:b8:69:3c:02:16:10:
         63:9a:5b:76:7d:5d:d1:4a:8c:bd:cf:43:87:a1:15:45:c2:8d:
         33:61:98:2b:ee:9b:55:4b:95:98:05:9b:85:f8:f9:2e:92:f7:
         19:ee:db:9b:e0:f5:59:21:0d:61:cf:41:67:6c:65:b5:cc:e3:
         e3:19:93:c5:3c:38:f9:4d:8d:47:ae:b7:f6:86:eb:60:35:b5:
         39:e2:f5:cb:e4:36:4c:07:02:d4:a8:b1:64:92:c0:63:3d:04:
         be:6d:68:48:73:07:6e:89:ee:c6:0c:ff:8b:4e:ed:27:c9:5b:
         23:2e:c5:d7:1d:2e:d0:ff:14:75:ae:4b:81:52:e2:58:a8:d3:
         a5:b1:ee:47:15:da:58:de:10:ed:a3:f3:c2:a6:60:6f:7e:e1:
         55:48:23:13:dc:c1:87:5b:09:9c:77:f1:c0:f5:75:68:26:3d:
         23:6c:e6:40:99:bd:5d:1c:e1:ab:82:1c:d2:44:2f:9a:97:83:
         cb:af:b3:96:ec:99:1b:94:70:d8:fe:5e:04:4f:6d:5d:25:af:
         02:80:34:64:df:ab:bf:b4:f9:70:a5:73:b2:b0:62:d8:ea:c3:
         0c:ce:64:ee:57:1a:e6:64:a2:6c:12:13:9f:20:a6:2e:1f:66:
         5c:c8:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 13:24:02 2024 by rpki-client on console-fra.rpki-client.org