Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9c20be-81b3-4af0-9a6e-b91ff8b752e9/1/EDKw8sr-EVOKksC-FMiW6GkIsNo.mft
File:                     EDKw8sr-EVOKksC-FMiW6GkIsNo.mft (raw, json)
Hash identifier:          u1F52UPN8mPoeDhsrZ8R69ymN4Aq0ZgjO1itULcCYWQ=
Subject key identifier:   CA:D3:BD:00:9A:AD:0A:C2:E5:BB:2F:8B:9A:07:15:44:EF:FF:53:33
Authority key identifier: 10:32:B0:F2:CA:FE:11:53:8A:92:C0:BE:14:C8:96:E8:69:08:B0:DA
Certificate issuer:       /CN=1032b0f2cafe11538a92c0be14c896e86908b0da
Certificate serial:       018F5326220C2ACC1CF02E1E561C818B651B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDKw8sr-EVOKksC-FMiW6GkIsNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9c20be-81b3-4af0-9a6e-b91ff8b752e9/1/EDKw8sr-EVOKksC-FMiW6GkIsNo.mft
Manifest number:          086F
Signing time:             Tue 07 May 2024 13:02:38 +0000
Manifest this update:     Tue 07 May 2024 13:02:38 +0000
Manifest next update:     Wed 08 May 2024 13:02:38 +0000
Files and hashes:         1: EDKw8sr-EVOKksC-FMiW6GkIsNo.crl (hash: dVY8L4pMf49qD0vbDo1BewOaluC5Ylaj5qRlbEdKlMY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/9c20be-81b3-4af0-9a6e-b91ff8b752e9/1/EDKw8sr-EVOKksC-FMiW6GkIsNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/9c20be-81b3-4af0-9a6e-b91ff8b752e9/1/EDKw8sr-EVOKksC-FMiW6GkIsNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDKw8sr-EVOKksC-FMiW6GkIsNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:26:22:0c:2a:cc:1c:f0:2e:1e:56:1c:81:8b:65:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1032b0f2cafe11538a92c0be14c896e86908b0da
        Validity
            Not Before: May  7 13:02:38 2024 GMT
            Not After : May  8 13:02:38 2024 GMT
        Subject: CN=cad3bd009aad0ac2e5bb2f8b9a071544efff5333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:15:da:37:56:11:ba:93:16:d0:90:7b:ef:
                    44:52:f3:4a:a5:50:2c:2b:a7:ac:ea:8a:6c:75:02:
                    b1:ed:9b:a4:05:20:08:e2:bd:4c:63:4a:29:47:df:
                    3b:39:c7:ef:c5:c0:b2:08:ab:08:a2:39:8f:0f:0e:
                    fd:9b:18:f7:9b:ae:2c:a2:07:a3:0b:f1:19:3e:88:
                    11:a7:d0:c5:b3:93:ce:97:bd:88:00:7a:4c:63:0c:
                    87:77:c3:5a:5a:17:d2:72:44:56:86:65:dd:48:68:
                    d1:06:3a:b4:09:bd:37:c0:bd:a9:0d:a4:81:e0:6a:
                    95:28:0b:eb:8e:ac:9b:f4:e0:63:19:d1:92:b0:1d:
                    8b:7c:ff:e2:0b:d3:20:06:24:ce:74:47:cb:68:50:
                    72:2f:45:6e:92:5b:35:ed:c3:b1:2c:66:e8:2c:03:
                    00:80:2b:64:ff:41:2e:0e:15:6e:80:e5:b7:f4:c1:
                    87:d9:f3:75:74:68:e6:0e:5a:05:7a:a6:5b:8e:44:
                    60:22:2e:d3:4c:d9:d1:80:80:2e:20:f4:02:8e:7f:
                    34:42:33:8a:18:8a:a5:e1:45:af:dc:f8:b8:5f:6c:
                    ee:41:af:b4:c2:38:e3:0c:df:38:3d:40:34:63:0c:
                    20:76:cf:19:8a:12:48:6c:a2:f1:f4:2b:89:f3:4b:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D3:BD:00:9A:AD:0A:C2:E5:BB:2F:8B:9A:07:15:44:EF:FF:53:33
            X509v3 Authority Key Identifier:
                keyid:10:32:B0:F2:CA:FE:11:53:8A:92:C0:BE:14:C8:96:E8:69:08:B0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDKw8sr-EVOKksC-FMiW6GkIsNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9c20be-81b3-4af0-9a6e-b91ff8b752e9/1/EDKw8sr-EVOKksC-FMiW6GkIsNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9c20be-81b3-4af0-9a6e-b91ff8b752e9/1/EDKw8sr-EVOKksC-FMiW6GkIsNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4f:e0:54:b8:2f:03:4f:82:a8:92:80:fb:90:27:33:da:cc:
         b0:aa:5c:dd:f2:0b:b4:38:24:ab:6a:62:68:e6:87:9a:69:00:
         49:26:ae:8d:40:f6:7a:8a:33:cc:00:fe:2a:bc:8c:bd:40:21:
         2a:75:c4:58:8c:7f:07:3a:8c:86:d7:c5:c8:d2:79:55:03:5d:
         56:b3:0f:7d:70:86:c3:c7:35:ef:13:7a:96:33:e4:76:3c:82:
         ff:44:04:15:4a:0e:76:11:e9:d0:74:39:2f:3e:6a:4d:af:03:
         cd:75:ec:83:4f:f3:81:f8:e4:d1:11:06:32:80:33:50:11:44:
         21:21:47:a3:07:28:42:45:15:51:c0:48:3f:57:32:de:dd:77:
         ec:34:68:07:94:0d:d2:06:59:53:c1:3d:52:c2:4a:0a:69:83:
         3e:ed:f3:52:78:a1:98:1b:87:4a:83:56:34:fc:6a:5a:01:0a:
         9f:0d:32:d0:5d:6e:5a:df:b4:ff:f4:1a:fa:5f:1d:2f:2a:83:
         23:35:6d:17:50:68:a3:67:a6:78:e0:dc:9a:c1:a9:0b:a5:39:
         68:04:3d:68:7e:72:7d:66:9b:2e:b9:a8:59:12:22:3d:f7:db:
         85:17:c8:bf:16:4a:2c:ea:cd:9a:19:62:9d:7c:48:e1:2a:90:
         3e:be:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:22:50 2024 by rpki-client on console-ams.rpki-client.org