Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
File:                     xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json)
Hash identifier:          OUj3mZKloMbWvBmBMO+xEZheYLMDurqr1d959q0yVmY=
Subject key identifier:   2B:45:A7:6D:EB:42:C8:9A:76:93:08:4D:D5:2C:61:2D:19:CF:32:49
Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Certificate issuer:       /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Certificate serial:       018F877F4F09AD116F37CF6E860B6CAB4D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
Manifest number:          0147
Signing time:             Fri 17 May 2024 17:00:18 +0000
Manifest this update:     Fri 17 May 2024 17:00:18 +0000
Manifest next update:     Sat 18 May 2024 17:00:18 +0000
Files and hashes:         1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: 3oJGd3Ngcah/tscRTXzArT0DwNm4VHE0sucPBHMKjRg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:4f:09:ad:11:6f:37:cf:6e:86:0b:6c:ab:4d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
        Validity
            Not Before: May 17 17:00:18 2024 GMT
            Not After : May 18 17:00:18 2024 GMT
        Subject: CN=2b45a76deb42c89a7693084dd52c612d19cf3249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:96:d9:83:64:17:9e:ac:16:c6:66:24:b5:
                    8e:4b:d7:1a:91:99:03:8a:96:fe:c5:8a:fa:05:74:
                    4b:cf:1e:dc:97:a7:75:b1:e4:e3:bc:0f:15:e5:1c:
                    3a:65:a1:b7:71:06:3c:17:3d:96:c1:b2:1b:e7:ff:
                    67:8a:15:43:05:54:61:11:95:7c:03:68:85:46:9f:
                    6f:a6:7c:e8:7b:12:6d:ac:fe:09:89:a4:22:46:dd:
                    ed:ab:bb:6f:37:98:d5:73:2d:e7:a8:0d:d7:9e:b7:
                    03:19:0f:70:1c:e4:8d:3a:a7:3b:55:6d:ac:6f:14:
                    6f:f3:67:fb:08:51:3f:99:cb:2c:f9:f5:54:0a:52:
                    ab:1e:1a:fd:40:4c:ee:7a:88:c2:ce:d4:ff:03:7f:
                    79:9a:df:e8:40:df:87:be:2d:ea:46:45:2c:c2:af:
                    b9:a5:e1:e4:3a:ff:ba:5e:ca:13:bc:42:02:72:75:
                    60:54:ea:12:bd:2c:3a:a6:d8:20:44:bc:eb:27:1f:
                    ac:89:85:3b:e1:83:56:9d:b0:60:b9:cb:72:f4:92:
                    89:8b:cc:9e:e4:be:62:3c:07:b3:07:16:aa:21:22:
                    e0:72:37:e4:1c:69:a5:26:b1:d9:06:b3:4b:f6:96:
                    5c:47:54:e4:22:be:64:d7:76:69:88:32:e0:bf:f1:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:45:A7:6D:EB:42:C8:9A:76:93:08:4D:D5:2C:61:2D:19:CF:32:49
            X509v3 Authority Key Identifier:
                keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:22:5c:51:10:e8:35:ae:b6:2f:57:b9:1a:31:48:3b:2f:56:
         32:dd:2d:bc:dd:f1:24:0c:85:3b:64:53:54:cf:00:c5:a6:d4:
         a4:a2:a5:af:2c:c3:6f:28:a6:ee:2f:ac:65:26:ab:2f:67:03:
         ef:63:fb:a2:a0:65:e2:1e:ee:96:6c:ea:e0:9b:ee:db:bc:d0:
         b4:e2:41:63:ed:e7:d3:ed:d0:41:ff:d5:8d:46:4b:c3:93:07:
         0f:e6:0e:bc:f7:b0:7a:7a:33:1d:82:20:35:30:3d:3b:3f:ff:
         b0:28:29:4d:10:2f:da:f5:75:b8:14:45:43:87:51:53:e5:a4:
         fa:79:63:83:b2:95:0c:2d:d1:13:20:01:19:9d:ec:5d:50:11:
         7c:03:4a:2b:ee:af:61:af:9b:47:5d:b2:b5:66:9d:e5:78:67:
         28:91:e0:82:0b:4c:8d:ce:ac:a5:4b:76:ba:a5:d7:13:df:92:
         df:25:8f:61:d9:ad:77:f2:d2:c8:84:8a:28:7c:fb:3c:1a:37:
         c0:cf:36:ae:a5:ee:55:ce:9a:1e:ae:de:fd:49:67:5b:34:00:
         62:03:bb:33:1c:20:fb:c4:52:d8:9b:54:39:7b:b0:a3:1c:9f:
         38:e3:c3:d1:d4:be:bd:02:39:3f:2a:a4:2b:8e:e4:67:05:e6:
         4b:53:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:50:26 2024 by rpki-client on console-ams.rpki-client.org