Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File:                     35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier:          kyjF70PeQzdwYPrBRpTzqAmwQRbFkyG/3bO+H1Schgc=
Subject key identifier:   73:60:07:6D:F3:2E:A1:6A:0D:94:A5:EB:48:C1:0B:04:E5:5C:A5:C6
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer:       /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial:       018F40B0DEEE6EABFA7624B67CA7C0085A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number:          085D
Signing time:             Fri 03 May 2024 23:01:24 +0000
Manifest this update:     Fri 03 May 2024 23:01:24 +0000
Manifest next update:     Sat 04 May 2024 23:01:24 +0000
Files and hashes:         1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: lpZisY5NUb7rAVC43wUGWO5To2PTVf8cDYYu6LwrCos=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:b0:de:ee:6e:ab:fa:76:24:b6:7c:a7:c0:08:5a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
        Validity
            Not Before: May  3 23:01:24 2024 GMT
            Not After : May  4 23:01:24 2024 GMT
        Subject: CN=7360076df32ea16a0d94a5eb48c10b04e55ca5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:93:0c:83:60:4a:ba:41:7b:95:e1:54:c5:b3:
                    88:c0:78:28:99:0d:24:dc:84:70:4e:b7:d5:78:95:
                    36:3d:7a:2b:18:7f:aa:2e:d7:ae:0c:5a:ba:db:33:
                    88:4e:ef:01:84:72:28:78:8c:22:e4:4a:6c:30:d0:
                    37:ea:7e:eb:f0:7b:2c:67:c0:ca:d3:cb:0d:fc:be:
                    10:89:85:39:a1:b0:7a:07:d8:94:8b:e0:5d:ed:ba:
                    b9:78:50:48:a9:90:38:7d:49:b1:d3:eb:0f:2c:e7:
                    37:9f:e9:36:0a:a7:0d:9b:fe:b6:e2:80:59:9b:ec:
                    e7:e2:22:21:6a:3a:47:c6:f0:4e:7f:03:72:e4:ee:
                    d9:bb:99:b0:73:4f:74:a4:a7:dd:4b:71:c7:52:2e:
                    68:d9:81:09:4e:a9:1e:64:54:79:97:c0:1e:bf:a8:
                    72:b9:4f:17:2f:fb:2d:57:9d:92:90:be:b1:c6:02:
                    2f:58:fd:66:0f:54:40:70:8c:4f:72:1b:ff:4e:de:
                    47:22:14:d1:5c:e3:37:8e:dc:b7:2e:09:fa:5e:21:
                    2e:51:3f:3d:f4:cf:02:f9:29:7a:97:92:d1:83:64:
                    2f:d8:94:e5:ff:56:ef:d5:69:04:1c:06:c8:9f:d6:
                    51:c9:93:7e:f9:76:3b:2c:62:b6:9d:95:66:71:70:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:60:07:6D:F3:2E:A1:6A:0D:94:A5:EB:48:C1:0B:04:E5:5C:A5:C6
            X509v3 Authority Key Identifier:
                keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:be:6d:bb:71:dc:1d:96:6f:10:1c:7a:56:7d:bb:09:60:
         0f:ca:46:75:8d:69:7c:60:c1:c9:ec:ac:f7:e6:5f:16:4c:51:
         e4:34:89:67:8a:d7:d9:ff:35:8e:a3:ab:9c:79:6e:9f:f3:b6:
         98:ea:0a:3e:e9:84:b3:91:69:9f:47:a5:a3:0e:a0:6c:5f:55:
         12:9d:e6:08:1c:31:d2:66:ab:de:47:01:a3:76:68:6c:e4:ac:
         32:f6:d1:82:9f:dc:3e:a4:f9:94:1b:78:b6:53:40:86:1c:79:
         2c:6e:14:60:18:9e:9b:d6:32:3f:4e:a8:ea:fb:1f:d3:5d:7e:
         8b:c7:61:6c:8d:b3:7e:30:1c:28:c5:05:8e:7f:07:b1:7f:7d:
         26:ad:6b:5e:24:46:0e:6e:2d:a0:8c:d4:3a:9d:a5:c3:51:b3:
         d6:1e:30:66:51:f3:71:63:31:dc:a8:f5:d1:ef:ab:ee:f4:8d:
         cf:e7:da:e8:43:f2:35:01:98:4c:51:d1:f0:4c:1a:29:74:7e:
         57:81:51:dd:bd:90:52:8b:c2:a3:d5:50:f2:09:fd:1c:ba:a7:
         24:49:a2:10:10:1d:f7:d2:4f:15:d2:1f:66:d1:e8:87:1a:bf:
         8d:c6:4f:ab:b6:a4:b3:a0:d1:c7:52:b8:d1:63:e5:ca:55:b6:
         2b:9c:9d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:24:19 2024 by rpki-client on console-fra.rpki-client.org