Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fc050a-984e-4428-8e8e-0a4fe5336bee/1/1Dv9KsNqC7cUOwIDCetsEftIm4w.mft
File:                     1Dv9KsNqC7cUOwIDCetsEftIm4w.mft (raw, json)
Hash identifier:          i+jEj+R67KrnoTZjWqx0pLH+ABOPU+lMNq4BWWrdF9E=
Subject key identifier:   E0:F5:13:99:EF:E1:5A:0B:50:41:DF:C0:DB:8B:71:18:C9:D2:45:57
Authority key identifier: D4:3B:FD:2A:C3:6A:0B:B7:14:3B:02:03:09:EB:6C:11:FB:48:9B:8C
Certificate issuer:       /CN=d43bfd2ac36a0bb7143b020309eb6c11fb489b8c
Certificate serial:       018F3DE91671788BC49C03879CDA0C26F20E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Dv9KsNqC7cUOwIDCetsEftIm4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/fc050a-984e-4428-8e8e-0a4fe5336bee/1/1Dv9KsNqC7cUOwIDCetsEftIm4w.mft
Manifest number:          071C
Signing time:             Fri 03 May 2024 10:03:56 +0000
Manifest this update:     Fri 03 May 2024 10:03:56 +0000
Manifest next update:     Sat 04 May 2024 10:03:56 +0000
Files and hashes:         1: 1Dv9KsNqC7cUOwIDCetsEftIm4w.crl (hash: /y7flJTdQvLX6MffOUCkU6ro32bYy41OumBPNAceHl8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/fc050a-984e-4428-8e8e-0a4fe5336bee/1/1Dv9KsNqC7cUOwIDCetsEftIm4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/fc050a-984e-4428-8e8e-0a4fe5336bee/1/1Dv9KsNqC7cUOwIDCetsEftIm4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Dv9KsNqC7cUOwIDCetsEftIm4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e9:16:71:78:8b:c4:9c:03:87:9c:da:0c:26:f2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43bfd2ac36a0bb7143b020309eb6c11fb489b8c
        Validity
            Not Before: May  3 10:03:56 2024 GMT
            Not After : May  4 10:03:56 2024 GMT
        Subject: CN=e0f51399efe15a0b5041dfc0db8b7118c9d24557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:f1:61:a1:8b:1d:e5:a7:af:11:b1:b4:dc:
                    7d:a3:ec:22:b4:a3:2b:6e:62:64:57:22:a8:a7:8e:
                    5b:6d:ff:70:38:48:5b:1c:26:01:0f:87:4d:9f:14:
                    d0:33:83:8f:a0:00:16:b0:c4:c2:2b:b5:94:f8:f8:
                    c9:61:76:85:f2:00:4d:f8:83:0c:26:4e:95:27:5f:
                    3e:8f:c8:14:81:59:0e:15:b2:ea:ba:e8:19:77:13:
                    cc:0e:c5:e8:6f:61:a5:bb:4f:da:35:60:33:b2:cc:
                    e1:00:c8:2b:a7:95:2d:a8:07:8b:1c:59:ad:4a:cb:
                    16:f3:49:c4:95:68:0a:8b:fa:95:9c:58:e9:eb:ab:
                    dc:b4:e0:2c:bc:50:be:ec:b3:c2:f3:54:cf:27:b1:
                    44:53:91:13:10:d2:66:cb:74:46:9a:34:f6:95:35:
                    76:3c:88:49:08:a8:7c:3e:6d:89:69:13:e3:20:ef:
                    23:ec:9a:d3:da:da:fc:3f:eb:bb:a5:59:7b:d7:1c:
                    c3:db:83:4a:f9:cb:af:16:69:89:1b:28:a4:22:62:
                    c5:ab:53:61:32:4e:12:04:17:44:a3:33:21:4e:fb:
                    c0:69:d6:68:ce:70:b0:30:a6:20:fe:37:22:4c:9d:
                    a9:4e:c0:32:70:7d:94:bc:05:96:14:a2:46:cf:30:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F5:13:99:EF:E1:5A:0B:50:41:DF:C0:DB:8B:71:18:C9:D2:45:57
            X509v3 Authority Key Identifier:
                keyid:D4:3B:FD:2A:C3:6A:0B:B7:14:3B:02:03:09:EB:6C:11:FB:48:9B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Dv9KsNqC7cUOwIDCetsEftIm4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fc050a-984e-4428-8e8e-0a4fe5336bee/1/1Dv9KsNqC7cUOwIDCetsEftIm4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fc050a-984e-4428-8e8e-0a4fe5336bee/1/1Dv9KsNqC7cUOwIDCetsEftIm4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:2a:5d:6a:3b:68:ef:dd:09:09:2a:c5:17:ca:bb:0d:17:f1:
         53:ea:b4:c4:fe:c3:d8:05:7e:ad:59:7e:59:cc:dd:9c:d7:01:
         7e:2d:bd:fa:6e:e8:ac:89:dd:3a:91:dd:01:d5:89:9a:5d:1e:
         55:52:13:47:0d:e0:f0:e1:be:66:e6:b3:c0:f8:1e:78:b3:36:
         d5:4d:30:80:9e:6b:21:fb:82:33:cb:a0:5f:d6:00:5f:d7:33:
         7e:7a:f0:e5:27:e3:2d:d3:e7:5f:91:3d:46:3c:d0:f7:b0:d0:
         10:90:9d:66:c2:3d:72:2b:f3:ee:d9:04:52:05:6e:75:54:70:
         bd:86:a7:95:37:24:a9:56:5a:fb:04:e0:c8:86:df:96:df:a6:
         c7:be:95:7a:58:d1:d3:59:84:b5:c2:83:65:21:62:78:b0:c6:
         2c:b2:e4:b2:af:3c:25:be:dd:3b:25:f6:ea:67:35:79:ff:ad:
         d5:6f:e5:f1:b1:a8:6f:a5:dd:fa:b6:50:2a:7f:d6:a5:26:9c:
         c2:61:66:fd:f2:df:44:81:ff:f6:7a:e7:04:73:3b:ed:9f:f1:
         51:b5:f2:4c:91:89:0d:52:bc:f8:01:34:20:36:6c:d5:08:b5:
         ed:6e:62:74:e4:df:da:73:87:ce:07:1c:f2:72:85:09:52:d2:
         9e:b3:d1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 19:21:48 2024 by rpki-client on console-fra.rpki-client.org