Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
File:                     C53uHUCq19-1viY4ApT04HcD14Q.mft (raw, json)
Hash identifier:          WZ4JwvgV6OLfr4KUVuFWgOtxuxsb7menjwZ7VMm/e40=
Subject key identifier:   CE:26:63:BD:2A:E2:14:3E:6B:AA:7D:6F:ED:A3:EF:BA:5D:2F:73:14
Authority key identifier: 0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84
Certificate issuer:       /CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
Certificate serial:       018F2D6024A9EA8B8CF78D274923825A6038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
Manifest number:          1146
Signing time:             Tue 30 Apr 2024 05:00:26 +0000
Manifest this update:     Tue 30 Apr 2024 05:00:26 +0000
Manifest next update:     Wed 01 May 2024 05:00:26 +0000
Files and hashes:         1: C53uHUCq19-1viY4ApT04HcD14Q.crl (hash: g2ec8DfM4h6UJSnllTJWiv/MMpt6GWhpI0Gc9+o7jiw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:60:24:a9:ea:8b:8c:f7:8d:27:49:23:82:5a:60:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
        Validity
            Not Before: Apr 30 05:00:26 2024 GMT
            Not After : May  1 05:00:26 2024 GMT
        Subject: CN=ce2663bd2ae2143e6baa7d6feda3efba5d2f7314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:50:15:52:ed:f3:dc:42:fb:1a:b0:a3:04:
                    6c:cd:61:da:24:c1:51:1d:6f:22:e7:0d:6b:a8:8a:
                    66:ae:f1:55:86:92:ce:61:47:52:80:c3:b8:93:20:
                    bb:ba:d3:b4:e5:f1:01:e0:05:5f:0a:d2:13:6e:77:
                    bc:5b:ae:ce:2f:92:66:d7:62:6c:54:9b:74:9a:3e:
                    0b:ad:af:e0:da:48:20:0e:38:95:b5:40:03:64:4c:
                    40:2f:23:2c:15:4e:03:ca:46:f7:f5:9e:0f:8e:c5:
                    c9:2f:46:05:83:7a:ab:ca:48:0f:78:58:8d:17:07:
                    33:12:52:63:af:5f:fc:d7:ff:98:6e:00:31:7a:85:
                    25:2a:fa:8e:35:db:76:06:64:82:c1:3d:05:30:1b:
                    66:b6:f4:f5:34:1b:de:d6:47:54:5c:cb:9a:db:7e:
                    7a:0b:40:56:e8:7c:06:02:88:89:a8:37:53:b5:4e:
                    d0:86:06:d8:12:97:50:1d:a3:7f:23:52:54:13:3f:
                    ad:43:2a:88:cb:19:96:be:b3:fb:e2:0e:f5:fc:b9:
                    3e:ba:4f:97:fe:cf:b9:e2:e5:ae:3d:f4:e3:9d:27:
                    ad:07:fa:87:8c:91:a3:74:53:ec:8b:03:8a:04:cd:
                    8a:dd:67:76:76:ee:b2:93:05:a0:6e:80:8d:1c:d9:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:26:63:BD:2A:E2:14:3E:6B:AA:7D:6F:ED:A3:EF:BA:5D:2F:73:14
            X509v3 Authority Key Identifier:
                keyid:0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:44:c6:37:86:c1:bb:88:23:64:32:c3:3a:8c:37:7e:64:d7:
         62:29:c7:a0:85:95:9e:af:47:06:0c:e3:96:2f:c2:3b:ec:ce:
         3b:ff:66:89:c8:14:c3:e0:8d:37:00:1d:b9:97:25:15:56:a2:
         c2:18:87:f2:51:be:c2:dc:88:f3:af:99:0c:59:41:ca:23:38:
         46:c8:84:13:d1:5e:49:46:03:a9:61:8e:08:15:f8:a2:15:aa:
         8d:b6:88:e1:aa:96:d5:43:ba:a1:a2:38:1c:bb:60:6d:a8:de:
         06:65:36:60:8d:5e:10:3f:6c:12:1d:8f:cf:ef:d7:0b:44:9d:
         50:b8:aa:e9:0e:b3:bf:68:b2:35:0c:64:1e:d0:c3:19:38:c5:
         00:58:f1:51:e7:b8:8b:57:db:7b:07:37:1c:94:d4:0a:4d:25:
         0b:62:2c:87:ae:3e:aa:0f:ad:20:c4:09:4b:bb:ce:28:0c:dc:
         e2:96:d8:fa:50:69:b0:fa:57:a5:b0:0a:27:d2:a1:3f:5f:48:
         d2:a0:95:88:e4:3e:16:07:64:64:13:d6:3e:e1:a2:68:ca:dd:
         37:49:34:a2:fa:d1:fe:f7:16:45:f6:4e:58:87:7a:08:9e:e1:
         90:06:43:1e:3b:af:19:b7:ad:97:13:49:ba:65:fd:d9:a1:53:
         8f:a2:a6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 14:43:22 2024 by rpki-client on console-fra.rpki-client.org