Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File:                     dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier:          Wxo5GBQLTR7jpu5XS4OItlnb2WJwJzi4xW3RaQSy3Ew=
Subject key identifier:   EA:9D:22:D4:0F:9A:5B:92:86:5F:FA:B3:3F:BD:26:BD:8C:7B:FA:04
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer:       /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial:       018F87ED63BB246A83FECAC8230CD316828E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number:          014B
Signing time:             Fri 17 May 2024 19:00:32 +0000
Manifest this update:     Fri 17 May 2024 19:00:32 +0000
Manifest next update:     Sat 18 May 2024 19:00:32 +0000
Files and hashes:         1: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: EjgAEC5J1U/sxvkCcKJ0WbuO/wSF+uUjHrzC5MqS/Aw=)
                          2: wP0GIImcmmFio1P8kXWsboJ4Vjk.roa (hash: QVNKs1kVYe8dlARsVk3fqVJh0p/IiDoBNwUfFMRZkWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:63:bb:24:6a:83:fe:ca:c8:23:0c:d3:16:82:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
        Validity
            Not Before: May 17 19:00:32 2024 GMT
            Not After : May 18 19:00:32 2024 GMT
        Subject: CN=ea9d22d40f9a5b92865ffab33fbd26bd8c7bfa04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a1:49:1e:93:c6:ce:bd:4a:c5:63:50:86:d3:
                    73:0c:8d:74:17:f3:2b:96:33:2c:fe:c6:97:b5:8a:
                    5a:ce:00:21:37:a0:4a:b8:f1:a2:38:f2:06:19:77:
                    0c:b8:6a:e3:ef:e2:c4:28:a6:2e:7f:00:f0:c6:32:
                    6b:df:e4:9e:87:5d:c7:03:88:0a:eb:aa:fd:19:ad:
                    10:29:0a:c0:b4:43:41:68:c4:05:52:c4:cc:21:ab:
                    96:db:22:d4:86:45:56:46:c8:28:b6:14:f6:c3:0a:
                    4a:4b:a2:76:eb:04:ed:35:97:61:3e:d9:8b:13:7b:
                    e9:04:f9:07:fc:df:70:03:a0:b8:22:72:91:24:f8:
                    47:23:3f:5e:29:11:0a:59:8a:be:ec:49:48:6a:76:
                    68:c6:1f:b7:d2:73:e0:a8:ff:6b:85:32:9c:2c:76:
                    2e:0f:83:1d:ef:7f:f6:a1:c0:a8:87:1a:26:a4:42:
                    c9:47:32:61:6e:a5:82:c4:c9:5d:2a:65:1a:a9:3e:
                    e4:d5:97:4d:f5:f1:45:06:d2:b1:c9:73:b3:5b:68:
                    3d:80:e6:ca:6f:bb:31:86:48:25:ec:b5:4f:8b:bb:
                    4b:51:07:ff:1c:a2:2a:7c:ed:00:ce:ea:53:75:0e:
                    bc:5d:54:f6:b7:7f:29:12:da:af:ac:af:8a:d0:cd:
                    5c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9D:22:D4:0F:9A:5B:92:86:5F:FA:B3:3F:BD:26:BD:8C:7B:FA:04
            X509v3 Authority Key Identifier:
                keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:07:71:01:f8:06:0f:c3:ff:f1:00:37:7e:ed:f7:ec:21:
         2c:4a:01:b0:d1:36:04:f1:50:18:e6:39:2a:ef:3e:7b:91:37:
         fa:17:ea:08:b0:d6:33:b1:ec:a8:22:5c:b8:66:6f:54:50:a8:
         9f:fb:26:86:f7:fc:26:54:23:72:ce:6a:e8:20:cd:a7:c2:8f:
         9f:c3:4a:ec:2b:0b:9f:07:e8:0b:e3:df:4c:1d:a5:c6:cc:ad:
         d2:3f:9e:68:46:e1:d9:0e:e2:d5:8d:35:80:59:9a:d3:dc:5b:
         ff:3d:32:77:ad:b9:22:d9:27:f5:7d:f7:15:04:a8:d2:d5:37:
         d9:10:38:cb:00:08:df:06:be:10:a3:8f:7d:ca:be:48:28:21:
         a8:72:14:f1:78:5f:23:bf:e5:f3:9f:22:07:75:1b:27:6a:ec:
         25:95:9c:06:f3:8a:92:61:8d:1b:00:6a:26:65:9b:29:bd:bf:
         94:a5:b8:c5:d9:6e:70:5b:94:23:b8:7c:25:48:7a:0a:0b:af:
         86:92:b7:52:ad:10:8a:2f:fc:6a:1f:a6:45:6b:84:33:40:f2:
         7f:cc:75:dc:bd:9f:6e:34:66:7a:48:b5:78:83:1c:fc:b9:e2:
         1d:e2:0c:1e:c8:52:f4:44:83:ed:5e:83:f8:5b:1c:5a:f6:3e:
         0c:41:1f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:35 2024 by rpki-client on console-ams.rpki-client.org