Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File:                     dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier:          vqU0nQXyPXiN4Ax+ZAR0zyZi/mwHEmBE548D6CaVnDw=
Subject key identifier:   5C:4D:C6:25:B7:17:8D:DD:F0:35:64:DF:7F:7D:33:07:F5:ED:68:96
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer:       /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial:       018F87488A91235FDF2CFD3109B022DF1EDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:00:29 +0000
Manifest this update:     Fri 17 May 2024 16:00:29 +0000
Manifest next update:     Sat 18 May 2024 16:00:29 +0000
Files and hashes:         1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: E316xcEy4Wij6bvbOUF6YUr0WI2JgK/Jq8noxVKpSCY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:8a:91:23:5f:df:2c:fd:31:09:b0:22:df:1e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
        Validity
            Not Before: May 17 16:00:29 2024 GMT
            Not After : May 18 16:00:29 2024 GMT
        Subject: CN=5c4dc625b7178dddf03564df7f7d3307f5ed6896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:85:cf:5d:01:2d:11:2c:96:e0:6a:b9:d8:
                    31:52:58:cc:32:32:ca:2c:c0:0a:69:2d:33:69:64:
                    be:42:8e:49:e9:8d:00:e8:fe:18:0a:38:fe:6f:b1:
                    ae:d0:76:68:a5:79:a0:82:6d:05:04:93:66:a4:0f:
                    6a:36:ae:d1:83:c7:92:4f:0f:29:2f:a2:47:3a:7a:
                    3d:1b:01:7c:a7:82:60:6c:13:8e:92:68:c8:53:e5:
                    d1:58:e3:44:db:df:3e:ea:81:1d:86:1d:fc:fb:02:
                    30:e8:99:56:58:14:ef:25:c3:e1:7d:63:44:f8:78:
                    6b:b5:48:89:55:c7:b0:bd:74:5c:c6:54:27:b1:94:
                    8a:ee:6a:d0:63:0d:75:80:15:f3:a5:3a:54:4d:72:
                    29:a3:d0:46:25:62:51:71:84:ad:7c:3c:56:2b:a9:
                    c5:c0:34:a4:35:08:40:b6:7e:b4:23:d8:fc:45:14:
                    6f:0b:ce:cb:8c:eb:5e:d1:20:2a:b6:89:b4:33:28:
                    d9:5c:1f:20:ce:22:55:ba:62:91:82:4b:56:8b:c5:
                    d8:9e:b9:10:7b:83:bb:0f:35:f1:fa:ee:2d:53:a7:
                    55:c2:42:88:d7:b5:19:b6:8f:a8:15:d8:40:04:05:
                    26:4a:d1:30:43:e0:a9:2d:b5:e3:9d:90:d1:e7:3b:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4D:C6:25:B7:17:8D:DD:F0:35:64:DF:7F:7D:33:07:F5:ED:68:96
            X509v3 Authority Key Identifier:
                keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2a:ea:ce:a8:d8:df:2e:8b:7b:bd:0a:fb:ed:e2:44:18:a5:
         d5:5b:c7:9f:8c:91:b5:e0:f1:da:e0:db:53:de:f7:2c:6d:1d:
         b4:9e:3a:2e:58:49:8f:04:8e:8c:0b:75:4e:84:21:9a:a9:9e:
         08:fc:78:6f:80:fb:65:f6:70:dc:1e:2f:87:04:c6:be:14:d4:
         59:f4:e9:63:57:59:67:32:f9:1d:91:2c:e8:ea:d5:dc:9f:06:
         eb:c6:7c:42:02:21:d2:3a:17:90:7f:a4:0a:48:f0:04:64:28:
         e6:67:bd:2c:44:06:b4:1c:b1:f7:5a:ec:65:33:e8:87:c4:fd:
         63:c0:3c:84:04:2c:46:92:00:91:ca:72:68:cf:d7:cf:1d:ca:
         93:52:e7:84:e6:e1:c2:76:93:10:31:4b:31:6f:b7:46:f7:1c:
         7c:73:5c:7b:a5:4e:09:83:16:48:e2:bd:a5:a2:31:33:f3:88:
         e4:e2:27:b2:95:66:3a:bf:64:a9:3f:75:1f:4e:fb:ad:84:44:
         81:88:9d:ef:9c:cc:27:4d:1f:83:12:a3:e1:e9:c7:02:c0:9f:
         53:08:95:12:bf:df:d7:e7:45:a2:bf:92:a7:e9:7c:7c:45:a2:
         59:dc:e4:d0:2f:b0:a5:19:ba:d0:42:30:6f:41:91:f0:37:ea:
         aa:a2:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:48:52 2024 by rpki-client on console-ams.rpki-client.org