Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File:                     CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier:          8qMt3pJNH1jryRphX4jQOO/or2o14OgODhuzJ3npkYA=
Subject key identifier:   2B:84:79:75:C8:FE:0A:BC:6E:00:F1:AA:19:0E:49:C3:45:73:78:C0
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer:       /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial:       018F381D2D231408A4FA5AD12BD08D95900E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number:          114C
Signing time:             Thu 02 May 2024 07:03:07 +0000
Manifest this update:     Thu 02 May 2024 07:03:07 +0000
Manifest next update:     Fri 03 May 2024 07:03:07 +0000
Files and hashes:         1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: VTuPi5ssFusMqjZJV3GQQXoXMOQEI2WMGURryCfSV+0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:2d:23:14:08:a4:fa:5a:d1:2b:d0:8d:95:90:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
        Validity
            Not Before: May  2 07:03:07 2024 GMT
            Not After : May  3 07:03:07 2024 GMT
        Subject: CN=2b847975c8fe0abc6e00f1aa190e49c3457378c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:62:9a:37:c5:22:ef:42:ff:fa:45:28:dd:
                    a5:a4:4d:87:b0:32:6e:f7:a6:f1:e6:2d:eb:bd:ef:
                    c1:bf:93:1c:6e:d3:c6:ba:ec:51:31:aa:25:e2:5c:
                    26:a0:25:d9:c1:3c:45:fd:cd:4f:50:4f:ef:cb:e6:
                    a4:b3:66:7e:60:02:df:fe:ce:5b:ce:ba:6e:8d:04:
                    72:dc:1c:46:a0:ba:85:bb:bd:09:0f:0e:30:3d:27:
                    4f:4c:64:f9:3d:3d:7a:5d:94:31:16:75:41:b7:5f:
                    d1:9d:e9:2a:33:10:e6:7d:c0:6b:29:6b:05:93:b0:
                    b1:eb:e5:be:20:12:cd:aa:53:45:53:96:b7:98:56:
                    70:f9:ae:f7:36:40:61:77:ad:5b:a8:b4:ec:f5:ae:
                    2b:69:12:74:5a:b9:26:89:20:42:ad:b3:c4:d1:26:
                    68:5b:68:0f:33:c1:e3:45:f7:db:51:c3:e4:67:d8:
                    53:92:a3:7b:a3:0f:9f:5c:bf:3d:9f:fe:ea:da:15:
                    6c:c7:6f:f7:44:b7:7d:71:ce:30:13:d2:1b:82:ee:
                    ed:bd:82:d1:0c:55:b2:e2:02:38:59:c0:4e:68:63:
                    6d:4e:c7:5c:53:11:b0:1d:cb:26:d4:ba:55:30:a0:
                    ac:33:4e:2b:96:71:1c:c2:22:2f:9e:43:e8:48:4d:
                    13:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:84:79:75:C8:FE:0A:BC:6E:00:F1:AA:19:0E:49:C3:45:73:78:C0
            X509v3 Authority Key Identifier:
                keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a8:f6:73:f3:26:cc:d8:d3:ce:d9:7b:2e:14:3b:34:6f:cd:
         52:61:88:6c:03:f1:b5:45:22:50:8f:f9:ad:d1:60:97:b1:8e:
         e3:75:ba:3b:df:7d:61:5f:d9:2e:d3:8c:05:b5:a9:53:5e:8f:
         fe:d5:4e:b6:62:90:03:92:87:63:68:b4:a7:29:2d:1b:c7:c9:
         e1:d9:9f:ae:a7:62:03:75:f0:43:62:3f:a7:1a:cd:94:72:e4:
         79:1a:2c:6a:9a:89:22:33:fe:3f:5e:8d:f4:83:c5:d9:d7:55:
         81:fb:22:cb:7f:f5:ac:28:8c:c3:63:78:c4:35:fb:9e:ee:0d:
         78:92:a5:4a:cd:68:16:6b:ce:06:fa:a7:39:b6:3c:99:a0:00:
         eb:1f:15:1a:59:1c:de:4f:90:76:a8:ad:29:8a:25:1c:b4:28:
         94:4d:6b:6b:41:d0:b3:0e:b7:80:d1:69:fc:b9:e3:55:43:e5:
         60:c7:fb:fe:2c:46:cd:74:2e:43:25:cf:25:13:e8:3e:20:00:
         d2:86:c9:1e:85:6c:33:b0:20:cf:eb:53:d1:b0:b1:7e:8f:9a:
         cc:1c:e2:57:4f:0e:b2:ab:a9:c4:1b:3b:86:68:2b:9f:17:39:
         d0:87:ea:46:63:38:09:b1:b8:17:fe:8d:c2:f8:a1:62:c0:97:
         1f:d2:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:24:19 2024 by rpki-client on console-fra.rpki-client.org