Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
File:                     moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json)
Hash identifier:          aZ577PTDcRUX5eZA7xeCFYEqVCZ1/5yfVtEobJb8B9A=
Subject key identifier:   CD:2B:53:5B:1A:D5:7F:5D:9C:6A:7D:D6:04:B7:46:67:5F:D2:92:F6
Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
Certificate issuer:       /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Certificate serial:       018F87B6B14116B12128F73AF17F57585F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
Manifest number:          01B0
Signing time:             Fri 17 May 2024 18:00:48 +0000
Manifest this update:     Fri 17 May 2024 18:00:48 +0000
Manifest next update:     Sat 18 May 2024 18:00:48 +0000
Files and hashes:         1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: Ij2AGO/oahatvvDBeMRC1lmLUILE3GOTNlIpTGXsnxY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b1:41:16:b1:21:28:f7:3a:f1:7f:57:58:5f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
        Validity
            Not Before: May 17 18:00:48 2024 GMT
            Not After : May 18 18:00:48 2024 GMT
        Subject: CN=cd2b535b1ad57f5d9c6a7dd604b746675fd292f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:f6:15:36:f7:09:d1:c4:7a:8e:cb:08:93:
                    19:ab:64:4d:e1:cb:3a:e9:26:92:89:4a:e9:7d:ec:
                    51:19:8c:d5:af:36:fd:1f:63:a7:60:d2:16:40:07:
                    36:e0:9b:80:29:a8:a9:50:79:1b:79:dd:64:8d:83:
                    0c:27:ce:c0:8a:de:d8:e2:0c:de:fa:4e:a3:89:29:
                    0d:7e:64:2f:99:7c:2a:46:b8:77:68:cc:7f:34:9f:
                    39:78:21:bb:ee:b0:2d:2b:6f:36:63:b1:95:4f:c5:
                    1c:03:7e:e1:bb:aa:ef:96:a8:bc:d3:eb:d2:fb:b9:
                    c9:03:71:2b:ab:bc:0e:27:bd:57:77:f2:10:a5:01:
                    f8:8a:59:0f:68:b0:d6:08:73:78:75:d2:39:d6:b5:
                    63:87:d2:06:6e:f1:ad:31:32:38:d5:c5:da:b9:9e:
                    d5:e4:78:8e:e7:c3:61:a5:e8:8d:27:17:8c:47:3f:
                    64:4f:c4:29:a6:4d:7c:3e:33:48:52:58:a2:5a:03:
                    74:fe:e7:85:4b:0d:5c:5a:81:3b:2d:56:e3:2a:05:
                    c8:31:f8:ae:7b:ca:4c:1e:ad:90:a1:45:8a:30:ca:
                    fa:7f:96:da:1a:c8:e1:5f:35:66:5f:e8:68:d5:54:
                    2f:de:9c:f3:5a:64:b7:cc:28:f2:57:ca:19:ab:ab:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2B:53:5B:1A:D5:7F:5D:9C:6A:7D:D6:04:B7:46:67:5F:D2:92:F6
            X509v3 Authority Key Identifier:
                keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:09:12:e2:be:e6:be:f7:fd:a5:e5:6d:70:19:b0:a5:e0:d9:
         44:25:97:e7:4e:e2:78:3a:02:fa:d8:02:2f:5a:7f:fe:b9:03:
         92:2c:98:b9:76:a6:13:56:be:08:ac:64:bc:2e:df:8a:cb:7b:
         34:d5:6a:3b:86:95:db:49:0e:e5:c1:7b:13:3d:da:9a:18:ef:
         f0:6a:ef:3c:b8:ce:10:25:e3:d1:a1:16:a4:2f:2f:33:3c:bc:
         c0:b2:23:1f:2a:96:27:59:7b:26:b4:84:50:21:25:d0:7c:ba:
         3f:e2:07:03:22:23:00:10:cb:ca:9c:83:30:33:bc:ba:68:82:
         ae:8c:f1:e8:24:77:b1:41:2a:d3:1b:18:02:f2:44:57:b3:cc:
         a1:98:e1:56:b8:f5:57:94:20:22:23:23:06:50:79:e5:c5:6f:
         52:1b:01:91:c3:b0:99:68:da:2f:28:94:5f:09:c9:67:19:3b:
         d0:92:bb:58:20:30:a6:e7:cc:7a:09:5d:56:76:ff:b4:72:90:
         34:ed:ca:70:65:e2:75:35:8f:57:50:e5:4e:0c:28:a3:e1:8c:
         f8:fd:d1:70:54:5a:f6:b5:ef:3f:50:94:07:1a:cd:29:e7:40:
         69:f0:93:ab:14:8f:a2:38:72:06:ae:c5:e2:79:dc:61:f6:22:
         6a:0a:91:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:57 2024 by rpki-client on console-ams.rpki-client.org