Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File:                     BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier:          knofyFDX09QbDhWyKjt1B0Ox9RdjP1nKoBze/rVDrYQ=
Subject key identifier:   82:CC:3C:E3:88:8C:BF:78:65:5A:6F:E8:EA:B4:23:27:E5:AF:30:93
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer:       /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial:       018F3E8B4F2D00A3F04134BF5E7120DB0006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number:          0715
Signing time:             Fri 03 May 2024 13:01:08 +0000
Manifest this update:     Fri 03 May 2024 13:01:08 +0000
Manifest next update:     Sat 04 May 2024 13:01:08 +0000
Files and hashes:         1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: nReWM6pAolwQP+GHJ/EHRnwtKH9Urs9ewGDzjMh7O6U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:8b:4f:2d:00:a3:f0:41:34:bf:5e:71:20:db:00:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
        Validity
            Not Before: May  3 13:01:08 2024 GMT
            Not After : May  4 13:01:08 2024 GMT
        Subject: CN=82cc3ce3888cbf78655a6fe8eab42327e5af3093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:e5:67:f5:3a:ba:0f:4f:5f:5f:14:4e:54:
                    29:64:e5:20:c7:41:9e:14:ab:85:b6:5a:eb:78:f3:
                    13:d0:19:12:c3:88:0f:9f:87:f6:ee:ba:37:a2:aa:
                    b5:1b:07:54:b2:e8:ca:ae:7e:37:c4:42:ed:b6:65:
                    db:dd:c3:fa:12:82:9d:91:13:18:28:51:ba:f9:4c:
                    d5:e2:39:1e:86:b7:91:83:ce:77:92:50:29:ba:1d:
                    6f:fe:0c:5f:95:09:e8:33:b7:7a:40:3d:73:f8:12:
                    4f:2e:54:be:2c:e9:2a:1c:95:05:d8:e8:5b:8e:d8:
                    48:3d:ad:93:6b:ff:c0:01:f8:a3:ab:98:d1:39:6c:
                    84:56:4f:90:e0:20:51:70:20:40:c0:84:1e:7c:d1:
                    50:ed:00:5b:17:f0:90:c7:7f:e4:8c:cc:bb:30:6a:
                    61:23:91:ef:89:ae:69:30:d6:6b:1b:45:4a:d7:bc:
                    0a:67:1a:54:35:a5:ee:c5:a3:ee:da:44:b1:ff:f7:
                    e8:5c:90:1f:6d:a9:bc:ea:c8:74:fc:e3:63:95:65:
                    5c:05:d5:d7:98:57:d2:c3:2e:70:51:d5:a3:6c:b3:
                    be:4b:eb:14:45:dc:77:d6:58:26:0f:6a:2c:c1:3e:
                    fe:f3:7c:75:7e:2c:29:8e:77:81:3c:15:58:40:37:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CC:3C:E3:88:8C:BF:78:65:5A:6F:E8:EA:B4:23:27:E5:AF:30:93
            X509v3 Authority Key Identifier:
                keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:df:14:6c:cd:5a:d9:51:a5:4d:48:37:d2:ac:ff:66:46:1b:
         c5:f8:12:f9:98:37:3d:98:dd:0b:11:a4:9a:47:ce:ba:e1:73:
         4b:12:97:cf:a0:db:aa:b5:37:53:eb:94:4c:f3:36:f0:93:70:
         81:53:83:13:e5:38:47:1b:e7:c1:d5:51:e9:c1:63:43:ed:d9:
         f4:0e:46:a6:89:81:65:97:b0:99:10:a5:96:a3:af:0f:b8:7d:
         3e:55:52:e5:f7:9c:18:7f:7b:a0:63:58:db:a8:2a:76:cc:95:
         e1:6e:09:64:6a:d0:02:89:71:54:d4:a8:80:ef:6a:ac:9b:56:
         78:c3:64:c3:fa:2b:19:cf:06:49:87:44:79:9a:ec:b5:dd:0f:
         5e:d3:55:dc:68:bc:08:9e:c4:7a:61:0e:f8:98:33:61:74:5b:
         c3:bc:ec:0a:77:ca:22:d6:c5:81:f3:0b:70:8b:96:68:62:da:
         77:63:f1:d5:c8:ad:20:e1:27:45:4a:41:ad:f8:fb:f8:7d:eb:
         9d:50:56:25:3c:b1:ca:02:20:e9:26:40:97:f3:fa:42:31:33:
         ad:18:2b:56:db:62:c2:b3:0b:53:1d:18:a5:64:6b:38:4f:92:
         d6:aa:0c:c2:9d:c3:c6:98:51:77:8e:9c:63:17:77:34:15:6e:
         72:32:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 19:00:38 2024 by rpki-client on console-ams.rpki-client.org