Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
File:                     G_mzHCCQb4foYHjbRYHl8e5Tt68.mft (raw, json)
Hash identifier:          abnssuGQVCilnikoY+Uw99TheC4psdnIdulNKewVjMk=
Subject key identifier:   07:8B:10:67:E5:4E:F1:E2:F6:79:7F:29:CC:D3:B3:80:FB:CD:7D:6D
Authority key identifier: 1B:F9:B3:1C:20:90:6F:87:E8:60:78:DB:45:81:E5:F1:EE:53:B7:AF
Certificate issuer:       /CN=1bf9b31c20906f87e86078db4581e5f1ee53b7af
Certificate serial:       018F532579F6DC7ECC1CDAF398EE1FF75099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
Manifest number:          0621
Signing time:             Tue 07 May 2024 13:01:56 +0000
Manifest this update:     Tue 07 May 2024 13:01:56 +0000
Manifest next update:     Wed 08 May 2024 13:01:56 +0000
Files and hashes:         1: G_mzHCCQb4foYHjbRYHl8e5Tt68.crl (hash: 2JdZglyXMj4PItbFrAYI5e2zCam9zyvOv3MmDz3OtV8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:25:79:f6:dc:7e:cc:1c:da:f3:98:ee:1f:f7:50:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf9b31c20906f87e86078db4581e5f1ee53b7af
        Validity
            Not Before: May  7 13:01:56 2024 GMT
            Not After : May  8 13:01:56 2024 GMT
        Subject: CN=078b1067e54ef1e2f6797f29ccd3b380fbcd7d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:03:8d:75:04:e4:ff:a6:be:f3:74:e6:fe:
                    42:23:55:a3:0e:94:73:6d:a6:5a:e7:70:6c:60:2e:
                    4f:7e:50:ad:69:6d:f7:c9:df:02:71:ca:d0:ff:9b:
                    0f:f0:85:9b:99:c8:48:91:f8:31:be:10:95:20:46:
                    91:c9:5e:e3:f2:0d:54:b6:77:e4:45:78:fb:b4:5c:
                    d7:5a:02:10:cb:2d:1e:cd:f3:51:77:fc:06:6b:83:
                    1b:56:8d:6a:4f:51:a8:07:72:c8:d9:99:ec:6d:50:
                    49:57:a2:18:45:dd:11:d9:0e:ce:c1:e5:6d:88:ce:
                    c4:6b:97:fc:8c:bb:c1:8b:fe:1b:36:e9:84:a5:4a:
                    76:b2:37:a0:0d:bf:ba:c9:62:fd:16:da:12:02:5e:
                    94:47:ac:d7:09:40:55:c7:92:ea:dd:73:e3:88:04:
                    93:36:e9:48:c1:70:1e:b6:79:f6:40:72:e9:62:19:
                    03:ab:11:71:87:0a:d2:33:1c:99:c1:20:da:24:ee:
                    fe:c5:75:d1:ae:28:73:26:00:e7:84:a2:be:1a:94:
                    02:4b:e3:d8:98:6d:9b:a6:65:ac:d5:87:1d:96:f0:
                    31:d8:d2:f0:25:74:47:ae:ee:f2:d2:55:ca:d3:eb:
                    bd:b0:57:34:09:83:bd:1a:a1:4c:97:83:09:f0:3c:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8B:10:67:E5:4E:F1:E2:F6:79:7F:29:CC:D3:B3:80:FB:CD:7D:6D
            X509v3 Authority Key Identifier:
                keyid:1B:F9:B3:1C:20:90:6F:87:E8:60:78:DB:45:81:E5:F1:EE:53:B7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a7:65:14:c3:47:6a:6a:88:82:ca:c7:b7:f6:ff:09:86:f5:
         68:15:f4:76:35:e1:0b:db:9c:7e:b4:22:e7:cd:c5:fc:15:b4:
         7b:85:ae:16:89:8f:30:18:7c:50:f1:27:d8:4e:ca:08:07:34:
         0e:d2:70:5f:7e:73:ca:a9:9c:e0:6e:7e:68:78:35:90:b4:e0:
         da:7d:92:2f:7d:1c:47:de:02:85:c8:74:11:22:58:cf:a2:7a:
         3b:da:49:a3:ee:2f:6b:9f:2d:3b:84:f6:1c:76:9e:b7:52:0b:
         71:6e:bc:2a:dd:50:71:71:4e:25:5b:c0:07:45:b1:9e:11:8b:
         a2:bf:e7:c0:4f:7f:6e:8f:2f:57:e4:5b:e3:62:32:4b:ab:6e:
         a8:ce:d1:8b:dc:b9:90:5f:e9:44:1d:71:1e:c6:b8:bf:63:4d:
         0e:cb:23:27:25:94:6c:aa:8f:73:f6:41:c0:e5:b7:b6:21:4e:
         50:26:b9:42:5a:f6:af:9b:b4:06:89:da:6a:06:b2:d0:a0:24:
         a1:50:ed:b5:d4:54:d5:04:22:3e:e9:fe:c3:98:35:68:6d:94:
         b4:fa:1b:63:68:2c:aa:cf:22:4c:84:9f:a1:82:d6:c4:c6:f5:
         e4:97:99:91:19:67:66:9e:20:89:ac:a3:9a:55:16:0d:ae:bf:
         2d:f7:b5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:25:30 2024 by rpki-client on console-ams.rpki-client.org