Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
File:                     G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft (raw, json)
Hash identifier:          SF05DyXw+Dx6sgozm33QLi6X6pE392nJjQTWQyN8jq4=
Subject key identifier:   C6:60:6E:0E:9F:E9:A1:87:70:B6:70:53:64:BE:D0:D4:B2:24:78:77
Authority key identifier: 1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD
Certificate issuer:       /CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
Certificate serial:       018F43B382A2A4DD95AA2E3729212843ECC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
Manifest number:          08ED
Signing time:             Sat 04 May 2024 13:03:08 +0000
Manifest this update:     Sat 04 May 2024 13:03:08 +0000
Manifest next update:     Sun 05 May 2024 13:03:08 +0000
Files and hashes:         1: G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl (hash: SX+Pl2+MGniE9up8O5jMES/dKp/izWWlN4tLoTZiskc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:82:a2:a4:dd:95:aa:2e:37:29:21:28:43:ec:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
        Validity
            Not Before: May  4 13:03:08 2024 GMT
            Not After : May  5 13:03:08 2024 GMT
        Subject: CN=c6606e0e9fe9a18770b6705364bed0d4b2247877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f3:5d:eb:7f:c9:7b:07:00:7d:e1:fd:f3:ed:
                    ff:6e:6d:4c:ed:89:a9:34:40:95:9e:e4:ae:53:18:
                    99:39:a1:e4:ac:ea:f4:9e:17:5a:2c:78:79:87:9f:
                    d8:c6:69:6e:ee:d4:a9:56:cc:b8:af:3f:46:b8:6a:
                    66:d6:e1:49:a4:b8:3c:7b:e6:8c:62:90:b2:f2:34:
                    50:9e:f6:ef:54:84:4f:c7:7c:8e:2d:5d:d1:39:ae:
                    c3:02:c8:d0:2f:6f:c1:58:12:05:ae:0e:d0:e3:a8:
                    36:7b:ce:8e:ef:02:13:95:d7:c0:66:58:bd:8c:48:
                    cc:64:18:c5:47:ab:d8:97:2d:3b:f8:ef:23:cf:bc:
                    15:73:f0:e8:f3:41:fd:83:9d:b5:07:ed:bb:68:73:
                    52:b5:9f:00:ae:36:01:3b:8b:c9:d1:d6:ae:f9:2e:
                    7d:bd:c1:40:60:24:c1:c6:6a:68:aa:15:29:f5:a2:
                    dd:a6:f9:97:17:3c:10:1c:81:80:db:75:ed:f1:41:
                    c7:72:04:44:9f:95:ea:f3:12:59:28:d3:f7:cb:e7:
                    55:f6:5f:13:83:df:8c:16:a3:ad:ac:18:18:22:03:
                    9f:02:fe:0a:bd:1f:5d:be:1a:c1:4e:95:f9:3b:d6:
                    66:64:d6:f1:e7:04:5a:fd:f7:54:0b:d7:87:d1:2e:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:60:6E:0E:9F:E9:A1:87:70:B6:70:53:64:BE:D0:D4:B2:24:78:77
            X509v3 Authority Key Identifier:
                keyid:1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ed:3a:45:bb:ce:e2:21:bc:39:eb:d6:c3:30:6a:03:3d:61:
         4c:d3:76:2f:bc:46:4a:cd:19:f0:66:7a:46:6e:58:66:42:95:
         0e:37:3b:99:79:1e:6e:1e:08:5b:ea:c2:36:98:f7:3a:59:6f:
         e1:cd:7d:39:bc:fe:c2:14:08:01:cf:d1:7a:16:86:63:18:39:
         e6:23:d4:9f:ed:af:10:b4:55:3c:08:60:5f:57:04:3f:9a:ad:
         55:0d:e3:0a:2a:a7:3e:f2:3d:0c:55:81:f0:dd:18:77:39:c9:
         28:bf:06:3c:99:3e:2b:d1:95:f5:02:8d:36:07:0a:46:1c:54:
         95:06:56:4f:2e:3c:de:af:9b:11:65:41:be:f9:d3:13:04:7e:
         f8:52:6c:18:8e:c5:8a:d6:17:93:8b:0d:7f:a6:06:28:ae:f4:
         08:7c:bf:06:82:32:dc:2f:3f:00:83:65:f1:35:67:c0:94:91:
         fe:96:27:f6:76:71:88:b0:8c:6b:99:0f:9f:71:d0:56:e9:e8:
         59:ee:62:71:68:e9:83:fb:6e:7a:8e:67:ec:da:b1:4e:d7:17:
         db:b2:a3:89:66:39:42:d2:09:f5:86:35:08:44:c8:36:68:3a:
         88:1e:9b:0a:67:4e:be:0b:66:63:42:02:5c:9a:b9:2c:6a:3f:
         49:b8:1d:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Ds4KipN2Vqi43KSEoQ+zJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjkyYzI5OTRmZmI1MzU3ZjhkYzQ2Mjc5YmRkOTliZTNh
NTZjYmQwHhcNMjQwNTA0MTMwMzA4WhcNMjQwNTA1MTMwMzA4WjAzMTEwLwYDVQQD
EyhjNjYwNmUwZTlmZTlhMTg3NzBiNjcwNTM2NGJlZDBkNGIyMjQ3ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/Nd63/JewcAfeH98+3/bm1M7Ymp
NECVnuSuUxiZOaHkrOr0nhdaLHh5h5/Yxmlu7tSpVsy4rz9GuGpm1uFJpLg8e+aM
YpCy8jRQnvbvVIRPx3yOLV3ROa7DAsjQL2/BWBIFrg7Q46g2e86O7wITldfAZli9
jEjMZBjFR6vYly07+O8jz7wVc/Do80H9g521B+27aHNStZ8ArjYBO4vJ0dau+S59
vcFAYCTBxmpoqhUp9aLdpvmXFzwQHIGA23Xt8UHHcgREn5Xq8xJZKNP3y+dV9l8T
g9+MFqOtrBgYIgOfAv4KvR9dvhrBTpX5O9ZmZNbx5wRa/fdUC9eH0S7kGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZgbg6f6aGHcLZwU2S+0NSyJHh3MB8GA1UdIwQY
MBaAFBv5LCmU/7U1f43EYnm92ZvjpWy9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19rc0taVF90VFZfamNSaWViM1ptLU9sYkwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ZjczNjEtYjFlNi00MDE5LWFkNjMt
MjAwNTk5NGRmNDcxLzEvR19rc0taVF90VFZfamNSaWViM1ptLU9sYkwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ZjczNjEtYjFlNi00MDE5LWFkNjMtMjAwNTk5NGRmNDcx
LzEvR19rc0taVF90VFZfamNSaWViM1ptLU9sYkwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO06RbvO
4iG8OevWwzBqAz1hTNN2L7xGSs0Z8GZ6Rm5YZkKVDjc7mXkebh4IW+rCNpj3Ollv
4c19Obz+whQIAc/RehaGYxg55iPUn+2vELRVPAhgX1cEP5qtVQ3jCiqnPvI9DFWB
8N0YdznJKL8GPJk+K9GV9QKNNgcKRhxUlQZWTy483q+bEWVBvvnTEwR++FJsGI7F
itYXk4sNf6YGKK70CHy/BoIy3C8/AINl8TVnwJSR/pYn9nZxiLCMa5kPn3HQVuno
We5icWjpg/tueo5n7NqxTtcX27KjiWY5QtIJ9YY1CETINmg6iB6bCmdOvgtmY0IC
XJq5LGo/SbgdMQ==
-----END CERTIFICATE-----
Generated at Sat May 4 19:26:16 2024 by rpki-client on console-fra.rpki-client.org