Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File:                     7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier:          BwllBpeCAt4k7WMwkNQ4JIsPdpALsJeU5izkV90Jd9g=
Subject key identifier:   59:79:5D:6D:ED:95:52:4A:C6:93:B7:7B:99:D1:5B:B9:9F:09:DE:AD
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer:       /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial:       018F4B6E17242CD5737CC4AD2A96E0F56E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number:          04E1
Signing time:             Mon 06 May 2024 01:04:17 +0000
Manifest this update:     Mon 06 May 2024 01:04:17 +0000
Manifest next update:     Tue 07 May 2024 01:04:17 +0000
Files and hashes:         1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: ukYUE4xhWZuURIhu0R0n5s3HB1WtOVHjAJeviuDODXM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6e:17:24:2c:d5:73:7c:c4:ad:2a:96:e0:f5:6e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
        Validity
            Not Before: May  6 01:04:17 2024 GMT
            Not After : May  7 01:04:17 2024 GMT
        Subject: CN=59795d6ded95524ac693b77b99d15bb99f09dead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:3b:26:19:48:53:5a:61:83:04:b9:de:f5:
                    3a:31:e3:77:a6:43:0d:e6:d8:57:d1:62:1a:fe:d2:
                    e4:8c:df:64:74:b9:24:b7:51:c3:be:0d:d6:c3:83:
                    3a:c6:6d:31:55:a3:97:4e:60:8c:2e:0d:d1:81:e1:
                    0b:c6:dd:3c:e2:da:90:d6:56:5b:ec:93:5b:86:fb:
                    9b:9b:f5:6b:49:76:e3:4a:a6:76:38:f5:ae:02:bb:
                    64:2b:fe:bd:f9:33:54:72:56:6d:56:6c:f1:2f:36:
                    88:10:cd:47:d6:b4:52:d0:d9:bf:92:0d:16:fa:02:
                    ee:5c:a0:c5:e5:3e:60:84:84:c3:1a:ec:12:52:5d:
                    49:11:c9:0d:2c:f7:78:5a:d3:21:38:fd:e3:3d:da:
                    20:b0:39:01:4f:01:89:0b:b6:8d:6d:8c:80:1d:01:
                    73:f4:52:ee:d2:b1:00:59:b4:32:ad:da:56:2f:f9:
                    98:e6:62:b8:39:14:65:55:b9:82:5e:53:17:7a:30:
                    eb:8a:8f:b2:70:25:7d:42:ba:5a:5f:41:bf:56:e1:
                    db:29:db:ff:ae:33:42:b2:c0:61:f9:fb:40:2f:f5:
                    f1:e3:2d:4b:a2:0f:fe:b0:76:85:18:50:8c:1b:1f:
                    7c:e9:2c:47:bf:e8:ac:e3:0a:9a:5f:6b:b6:06:8f:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:79:5D:6D:ED:95:52:4A:C6:93:B7:7B:99:D1:5B:B9:9F:09:DE:AD
            X509v3 Authority Key Identifier:
                keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ae:74:b1:d6:69:ad:d1:2f:c3:bb:2c:2f:8b:d9:50:64:3d:
         69:40:b1:40:86:b3:8d:f7:b4:8b:64:d8:ac:25:fe:85:e3:24:
         2b:7b:9f:90:38:ea:6b:59:79:8a:01:d5:43:53:e7:fb:51:bb:
         08:17:ed:0e:f9:f2:39:fb:36:fa:9b:5d:6c:9e:bd:6a:fc:d1:
         db:b1:fa:2d:aa:14:56:65:0b:a4:18:89:cd:0a:49:89:0e:d9:
         61:f3:5d:f8:f6:fd:8d:6f:d7:50:a7:7a:f2:d0:91:4f:ec:37:
         fb:b1:0f:a0:a5:75:5f:95:22:5d:49:58:a6:61:12:41:70:19:
         a6:9d:8f:09:c0:36:bb:d2:14:91:05:34:a1:66:00:b3:d3:84:
         da:f9:c7:aa:bb:7f:06:b8:bc:8f:aa:67:2a:27:db:44:b3:74:
         92:6f:22:77:eb:7e:bf:b0:c4:ee:c4:f3:2a:d5:0c:8b:50:b2:
         7c:ba:ef:48:78:9d:7b:76:f5:99:14:06:d0:ca:c4:5a:58:4c:
         2e:38:c3:79:b3:7c:1b:16:61:36:52:b0:58:22:49:2c:b4:19:
         0b:5b:4e:fa:a1:56:3b:01:9e:06:8d:49:e7:58:0f:a8:a7:7e:
         41:31:30:2f:36:94:21:06:8c:00:80:f4:b8:4f:29:0b:11:19:
         d7:4a:4e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:45:37 2024 by rpki-client on console-ams.rpki-client.org