Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft
File:                     3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft (raw, json)
Hash identifier:          GefFS0n5+KAOk3owd8eNTyeYKN8otB9g8+vCVI/xsxU=
Subject key identifier:   A6:52:1B:13:69:84:26:13:DD:25:51:4F:1D:F0:0D:1F:11:DB:E0:D6
Authority key identifier: DF:1E:9D:52:74:8B:16:51:75:26:3E:50:D0:10:A6:FB:05:9B:CD:05
Certificate issuer:       /CN=df1e9d52748b165175263e50d010a6fb059bcd05
Certificate serial:       018F430CBB463C3AB1A88DC3EEBA8BDCF536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft
Manifest number:          0B72
Signing time:             Sat 04 May 2024 10:00:58 +0000
Manifest this update:     Sat 04 May 2024 10:00:58 +0000
Manifest next update:     Sun 05 May 2024 10:00:58 +0000
Files and hashes:         1: 3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.crl (hash: pqS64Xbh+EwlmePS2W30TEyL9GeeeY0Bg6XFAslzzl4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:0c:bb:46:3c:3a:b1:a8:8d:c3:ee:ba:8b:dc:f5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df1e9d52748b165175263e50d010a6fb059bcd05
        Validity
            Not Before: May  4 10:00:58 2024 GMT
            Not After : May  5 10:00:58 2024 GMT
        Subject: CN=a6521b1369842613dd25514f1df00d1f11dbe0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:74:e6:32:d0:81:5d:f3:ad:e8:82:ba:57:
                    f5:33:93:b2:e2:55:09:1c:2b:37:a1:71:aa:1a:e9:
                    05:8c:51:19:18:09:b4:39:43:39:02:9c:bd:5d:3b:
                    34:77:73:03:23:b5:d9:1c:71:96:05:46:58:74:67:
                    f0:e4:58:31:28:5c:d5:f6:ae:1b:83:f5:4b:e5:7b:
                    9f:19:28:4c:1c:9f:cd:e0:50:da:9e:42:56:b5:c8:
                    98:7d:0c:1f:af:e4:b8:88:a1:89:55:76:1d:63:13:
                    43:0a:78:ab:45:11:4b:80:89:cf:96:dd:c2:ce:9d:
                    23:09:a0:1c:c9:6e:52:45:c8:f3:ef:37:9d:24:ea:
                    fc:48:8f:15:7a:bb:a4:c8:46:53:3f:d8:19:28:f7:
                    57:49:9e:cc:94:fe:6d:98:64:61:1f:e0:27:b9:94:
                    20:26:41:68:e1:96:22:98:73:de:47:68:30:05:ed:
                    fa:ad:c1:e6:81:53:bc:44:d2:98:2b:41:6a:f4:d1:
                    44:c7:b4:13:77:88:32:e6:65:09:34:42:90:e8:08:
                    62:5b:e8:f3:13:c5:26:c4:6c:95:f1:5c:28:19:ab:
                    cd:dc:f4:76:39:46:9e:d0:60:25:a1:82:28:22:fe:
                    99:64:77:97:a6:25:1f:d2:b5:13:10:1f:70:ec:fc:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:52:1B:13:69:84:26:13:DD:25:51:4F:1D:F0:0D:1F:11:DB:E0:D6
            X509v3 Authority Key Identifier:
                keyid:DF:1E:9D:52:74:8B:16:51:75:26:3E:50:D0:10:A6:FB:05:9B:CD:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:07:67:51:57:6c:1c:67:10:b8:4f:6a:df:53:f2:58:ce:b1:
         8e:8d:23:76:5d:7f:1f:c3:08:02:0d:69:9b:40:dc:fa:cf:a6:
         71:d6:77:bd:e4:29:b9:fa:d3:b0:8f:6b:94:c0:12:09:60:94:
         50:c2:bb:d1:b0:09:15:3b:5b:08:23:88:62:9d:92:7e:1a:65:
         13:2a:82:f2:e1:68:d8:5c:31:a1:e3:a1:22:0a:cc:ac:ad:96:
         dd:45:8b:fe:94:22:51:dc:cf:98:39:54:d5:7a:50:5b:46:7d:
         74:91:31:d3:d7:7f:97:e8:c8:8e:88:c0:44:cd:74:28:63:65:
         d1:b1:f6:d4:b9:97:8b:73:8b:9f:08:bc:82:cf:25:9d:cd:5c:
         da:ba:18:16:b1:62:57:30:12:30:b9:c6:28:5d:e0:4f:30:29:
         d6:5b:fe:7d:84:1e:4b:42:49:5f:ee:da:4c:67:0c:f9:a9:b2:
         30:b0:e5:12:77:b1:1c:95:ac:2f:bb:d3:21:96:d5:43:f7:f7:
         eb:46:80:61:e6:3a:6f:15:b1:f1:be:00:49:c9:c6:5b:74:05:
         ef:12:7b:13:e8:21:81:97:6d:fc:94:29:26:2f:dd:2a:de:98:
         d6:a2:73:e8:69:e2:e8:6f:75:03:c0:b8:9e:87:7b:80:6c:cf:
         e9:05:5b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:35:00 2024 by rpki-client on console-fra.rpki-client.org