Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
File:                     0sAfMj0dJYn5qbRi_nDzawn6xjI.mft (raw, json)
Hash identifier:          1sWXzTJZUW/PbA7Kaxtv/l+QZwmPynx8zaoGee+VzmI=
Subject key identifier:   D1:7B:2D:AE:60:33:26:01:15:81:5A:58:89:BF:AB:62:91:B5:42:EF
Authority key identifier: D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32
Certificate issuer:       /CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
Certificate serial:       018F86A3AB504F5634198288A7067DD2E9BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
Manifest number:          01A4
Signing time:             Fri 17 May 2024 13:00:24 +0000
Manifest this update:     Fri 17 May 2024 13:00:24 +0000
Manifest next update:     Sat 18 May 2024 13:00:24 +0000
Files and hashes:         1: 0sAfMj0dJYn5qbRi_nDzawn6xjI.crl (hash: oZ7k7z+3xHVacU35BlbINOrmBWS3GRgGdm2yAYziQhM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:ab:50:4f:56:34:19:82:88:a7:06:7d:d2:e9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
        Validity
            Not Before: May 17 13:00:24 2024 GMT
            Not After : May 18 13:00:24 2024 GMT
        Subject: CN=d17b2dae6033260115815a5889bfab6291b542ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4a:7a:45:e9:c6:a2:86:42:e9:45:0d:37:09:
                    9d:36:32:96:95:ae:36:9b:9e:90:ca:4f:a8:cd:ae:
                    38:2d:be:9d:f0:eb:ef:16:9e:f9:5b:65:3e:09:85:
                    32:e2:23:76:0a:98:c6:9c:ba:05:29:2c:c8:80:4d:
                    69:b4:4b:d8:d4:f9:30:4c:2d:a8:da:5b:f3:ae:d9:
                    0c:e8:11:50:01:8b:51:a4:8d:10:01:d8:92:a2:ba:
                    40:b9:b3:dd:c2:bf:0b:f5:26:54:c8:ef:0f:0e:a3:
                    1f:7d:5a:8e:6e:64:37:39:40:08:2b:53:17:0d:e8:
                    a0:18:ef:6e:ef:d1:b4:e3:83:6a:ee:69:be:4a:7b:
                    31:c1:28:2f:ea:0d:10:d0:e7:da:59:9b:73:20:c4:
                    03:d1:03:23:85:f1:82:27:48:99:0f:dd:1d:18:27:
                    c6:90:bf:d1:27:4c:81:0f:da:d9:f5:6f:26:ad:e1:
                    f7:19:e8:75:b4:8e:b5:b7:6b:96:c1:23:47:f0:f3:
                    35:36:7e:c1:f6:e9:3f:cc:7f:86:a0:5a:3d:a9:31:
                    e8:96:4a:f8:5b:96:7b:ec:fc:2a:f0:ce:ea:5a:0f:
                    11:a0:a3:df:b3:f0:bb:05:34:6d:50:a3:86:7e:e7:
                    7d:01:e0:0b:b1:0e:12:a0:37:38:a2:06:3f:f1:71:
                    1a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7B:2D:AE:60:33:26:01:15:81:5A:58:89:BF:AB:62:91:B5:42:EF
            X509v3 Authority Key Identifier:
                keyid:D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8f:9a:a4:a1:7e:08:9f:77:73:12:db:cc:4c:8c:de:68:a8:
         f7:7d:b0:f7:7d:0d:7c:a4:c6:81:e1:38:10:29:af:f4:fe:7d:
         f8:7d:8c:c1:2a:02:2c:cc:4f:75:06:0c:48:48:56:0f:1a:2d:
         10:5c:3b:85:d1:bb:7d:bd:6b:2c:82:95:dc:46:6c:7c:05:7d:
         d8:1a:43:5f:75:e3:a2:9e:32:fa:12:e3:55:ae:52:9e:52:c7:
         dc:10:33:68:18:a9:dc:7f:fa:c6:8d:ba:fe:b6:35:79:c3:2b:
         36:79:e7:e9:99:43:06:78:2b:1e:88:26:55:f5:6a:e7:e5:01:
         cf:c8:bc:b3:9f:31:3d:f7:3e:70:40:5e:69:50:1f:13:24:ea:
         09:a2:29:0e:d9:40:fa:85:95:f4:e2:2a:b4:88:03:86:29:ce:
         a5:9a:cb:4b:be:41:f3:b3:26:bf:e2:15:5e:7f:13:b6:24:2b:
         7a:76:ee:02:7d:b1:58:a6:9b:5d:8e:f2:3a:70:45:6d:97:b6:
         c6:1e:0b:6a:72:31:5d:09:3f:61:c9:72:da:83:fc:f6:86:45:
         72:8e:9c:ce:c5:26:63:31:7a:63:09:3a:95:ca:4b:87:d7:8b:
         e5:65:7f:fb:b1:cc:cf:c5:79:ce:fc:24:72:c3:fa:48:ac:de:
         7c:f5:d3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:52:16 2024 by rpki-client on console-ams.rpki-client.org