Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
File:                     ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft (raw, json)
Hash identifier:          7r10/KxZoJEpindFHWwrHkoodvO7e4QNLC99TCUEjZ0=
Subject key identifier:   C3:96:EB:78:B5:47:D5:17:22:BE:33:B5:18:A8:F3:7C:D0:D7:94:F7
Authority key identifier: 44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
Certificate issuer:       /CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Certificate serial:       018F87B637ADD0E02CE6E874A0B98E08A884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 18:00:16 +0000
Manifest this update:     Fri 17 May 2024 18:00:16 +0000
Manifest next update:     Sat 18 May 2024 18:00:16 +0000
Files and hashes:         1: ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl (hash: RfyXqofeupLQdZE5Z+H438rZ9kWhHc/1n3Oo5M6gluk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:37:ad:d0:e0:2c:e6:e8:74:a0:b9:8e:08:a8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
        Validity
            Not Before: May 17 18:00:16 2024 GMT
            Not After : May 18 18:00:16 2024 GMT
        Subject: CN=c396eb78b547d51722be33b518a8f37cd0d794f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e9:04:7f:d8:b6:e3:2e:28:40:a7:60:6b:78:
                    c0:14:ef:ce:fc:d1:46:f9:ad:bd:b3:54:09:d8:67:
                    92:47:8e:61:82:f0:30:d2:09:a1:94:c9:e3:f4:b5:
                    31:a2:78:62:c8:12:25:6e:da:b3:1a:4a:5c:22:aa:
                    67:f8:e9:d3:fb:6b:7a:b4:92:99:1a:85:eb:a5:6e:
                    8b:bb:7c:f2:f0:17:ad:f2:7a:15:ec:05:62:55:4e:
                    9e:6b:5a:ef:97:1b:71:09:30:37:68:3c:9b:64:8b:
                    19:26:a4:92:8f:4e:a0:3a:1e:33:bf:c7:70:86:05:
                    6b:a8:a5:13:cd:8d:9a:0e:e6:46:c7:c7:78:14:f7:
                    5e:6c:1e:05:18:27:a0:5e:22:e8:8d:25:1f:02:4f:
                    e4:26:04:c1:68:36:a2:aa:0e:8d:a7:de:bd:c0:40:
                    22:e5:46:26:c8:cd:38:30:71:1c:96:74:b6:cc:73:
                    6f:23:8c:0a:3b:af:e9:49:4e:1e:6c:42:97:30:b2:
                    d4:69:a5:a1:bd:0a:78:b0:61:b2:42:2c:66:0b:ec:
                    ba:1f:d0:cd:d3:a0:51:3b:66:7e:2d:b8:27:f6:27:
                    49:1a:d1:f9:ee:3d:a1:4d:f3:a4:91:74:2c:4e:f1:
                    f5:c9:86:0c:7a:e8:ec:e0:36:c3:82:b3:16:f6:72:
                    b8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:96:EB:78:B5:47:D5:17:22:BE:33:B5:18:A8:F3:7C:D0:D7:94:F7
            X509v3 Authority Key Identifier:
                keyid:44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:64:be:8e:f4:f6:fd:ad:a2:c7:8b:97:ab:12:c8:fd:eb:84:
         15:ef:ab:31:34:57:cc:bd:d4:ac:ae:06:2c:a6:72:86:a0:62:
         46:40:3f:bf:dc:d5:46:64:d6:ff:aa:48:ea:33:65:35:35:33:
         8b:26:7a:e6:0b:d4:80:f9:e1:08:95:0c:bc:17:1d:5f:8c:39:
         91:46:00:c5:76:be:db:66:45:c7:70:54:7d:34:5a:9b:a8:c1:
         e7:b7:e7:ef:62:1f:36:1a:c2:15:41:78:90:cd:52:8f:11:55:
         a8:e6:43:8d:97:f6:b4:e5:b6:59:e3:29:5a:83:a2:df:1d:ca:
         d8:fe:f2:2b:a4:c2:7d:9c:df:e8:c1:73:e1:3d:f9:c3:eb:02:
         6b:14:f3:2a:93:2b:c4:c0:c3:21:94:f8:39:d1:f1:b5:b0:6f:
         20:23:87:9a:d0:8b:49:31:49:7e:f0:4b:79:33:de:51:aa:9c:
         0d:de:2f:e5:2f:b4:98:b6:e7:94:43:a1:9a:dc:4d:21:24:fe:
         a7:15:be:c7:16:e7:0d:97:d8:cd:ba:f9:34:66:1d:4c:73:b6:
         3f:af:3d:6e:47:c4:38:13:ef:ad:f1:3b:7f:cf:d1:7a:fd:f4:
         8f:81:93:6c:75:92:79:1c:40:ad:64:3b:ae:cc:34:8c:d1:56:
         f2:b5:59:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:29:21 2024 by rpki-client on console-fra.rpki-client.org