Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File:                     C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier:          3AgKKebgihra+FdU+WlMAl+lrLzK8w7ENwYfWNsvEFI=
Subject key identifier:   A3:D0:18:DB:E1:12:4C:05:A9:10:47:C7:1E:D4:A1:0D:46:35:69:A4
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer:       /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial:       018F43B490E106F2891C2DD4A2FD6D98D631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number:          10E2
Signing time:             Sat 04 May 2024 13:04:18 +0000
Manifest this update:     Sat 04 May 2024 13:04:18 +0000
Manifest next update:     Sun 05 May 2024 13:04:18 +0000
Files and hashes:         1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: BL/eBA+ftKe71QdVeeOG2eKWJb3xjoiY6F5xWU22rU0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b4:90:e1:06:f2:89:1c:2d:d4:a2:fd:6d:98:d6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
        Validity
            Not Before: May  4 13:04:18 2024 GMT
            Not After : May  5 13:04:18 2024 GMT
        Subject: CN=a3d018dbe1124c05a91047c71ed4a10d463569a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:db:4f:de:5a:c1:f2:65:fc:e1:d8:9c:e4:
                    03:a3:e8:db:52:cf:ab:d8:a6:82:2c:d7:bd:50:6a:
                    6e:aa:40:2f:14:f6:ea:87:9c:24:aa:80:33:69:ab:
                    6d:a3:f3:0a:52:55:9a:fe:87:8d:85:9c:77:a3:b6:
                    3c:1b:e2:5b:f0:e0:e9:42:40:88:b1:fa:b9:f8:35:
                    72:4d:ee:82:0d:b8:81:42:e9:5a:55:52:13:ba:41:
                    0c:4f:b4:79:a8:6d:ab:ac:a3:1d:10:63:9c:c8:94:
                    93:9a:08:9c:62:dd:33:90:01:38:7d:e0:70:d2:61:
                    07:76:36:f1:7a:bf:23:66:4e:e1:90:40:d1:4d:61:
                    c8:96:aa:fb:6f:fe:d7:45:8a:ad:d5:a6:0d:f2:c2:
                    d2:1d:c9:79:ca:a2:8b:e2:84:c8:71:5a:46:69:00:
                    51:da:d8:96:a2:14:94:bd:ab:f3:9f:ac:2f:ef:12:
                    c9:b1:a8:68:36:0f:5b:82:67:e8:30:5b:05:59:bb:
                    01:91:f9:98:5d:98:23:04:48:c1:97:90:10:33:33:
                    58:d5:bb:12:69:52:9a:59:25:14:99:0f:cf:c1:ed:
                    84:19:01:4a:00:e9:08:7b:b2:be:e2:1c:bd:f7:a1:
                    aa:e5:89:6e:82:93:20:c9:aa:44:d4:fc:5d:bf:08:
                    00:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D0:18:DB:E1:12:4C:05:A9:10:47:C7:1E:D4:A1:0D:46:35:69:A4
            X509v3 Authority Key Identifier:
                keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:fb:51:d9:bf:65:86:2a:d1:57:59:9d:eb:4d:0c:01:a6:
         54:88:5b:35:e3:71:e8:f7:0e:a2:6d:ed:fb:95:84:fe:47:0c:
         e2:b2:31:cb:40:10:fe:7f:fd:a3:00:10:d8:d5:97:2d:e4:76:
         8a:28:41:2d:4a:8c:ed:8c:cf:98:41:99:69:2d:48:cb:75:f6:
         8c:10:da:e5:ca:e1:8e:84:ef:50:59:a3:a6:20:d8:49:06:fb:
         a9:0f:e6:40:ab:cb:b3:f8:b5:35:6c:f5:f0:e8:64:a8:5e:2f:
         81:30:aa:ca:22:c5:18:98:84:84:6b:3b:c3:37:3c:d6:14:8c:
         fc:7a:90:0c:8f:08:e2:86:77:ff:ac:b4:99:75:15:dc:d1:e2:
         6d:85:bd:7d:78:2c:c3:d8:2d:73:7d:be:95:26:db:df:81:d5:
         ae:d4:7f:7a:95:55:41:d1:91:de:2c:60:87:14:ed:0b:e3:08:
         ce:01:d0:05:7c:70:2d:b8:52:89:34:77:1a:5c:2b:66:9c:c2:
         80:20:31:b5:89:32:fb:b2:6a:60:4c:1b:9a:96:87:c7:f3:6d:
         73:04:b9:68:bb:bb:5c:9a:ae:02:27:93:5c:40:03:de:34:5c:
         72:95:e3:3f:8b:20:97:d2:b0:37:9c:78:fb:8a:ac:fd:6b:f1:
         03:b0:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:42:28 2024 by rpki-client on console-ams.rpki-client.org