Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
File:                     COKNBckBhf5-Yq8c7iXIg7b-IjY.mft (raw, json)
Hash identifier:          q2Z9i2Fh33vpV7miFLtYjJrdnwRWOkjuhqmwFPK2q6Q=
Subject key identifier:   0A:97:9D:C6:61:BE:9D:D5:A3:B3:67:17:96:05:07:72:81:5D:28:09
Authority key identifier: 08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36
Certificate issuer:       /CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
Certificate serial:       018F86A36C346F1BA7755FA78BC80D572D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
Manifest number:          D3
Signing time:             Fri 17 May 2024 13:00:07 +0000
Manifest this update:     Fri 17 May 2024 13:00:07 +0000
Manifest next update:     Sat 18 May 2024 13:00:07 +0000
Files and hashes:         1: COKNBckBhf5-Yq8c7iXIg7b-IjY.crl (hash: 51+C7frEWfIFUhWgAVixUkmVmnULoXtjz0HxOIYxWGs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:6c:34:6f:1b:a7:75:5f:a7:8b:c8:0d:57:2d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
        Validity
            Not Before: May 17 13:00:07 2024 GMT
            Not After : May 18 13:00:07 2024 GMT
        Subject: CN=0a979dc661be9dd5a3b3671796050772815d2809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:b9:c4:f8:17:1a:f2:2e:e6:c1:37:47:c0:
                    23:06:99:76:26:fa:5d:7a:2c:29:77:df:ca:c2:18:
                    c2:fa:a0:aa:85:0d:ac:50:ae:ca:0f:82:29:9a:6d:
                    c4:ab:d1:27:51:25:ae:b9:94:83:2f:3d:2b:4b:bf:
                    c3:65:6b:8c:b2:c5:31:af:76:0b:60:cb:01:56:43:
                    40:cd:8f:6e:24:97:b9:ca:de:bd:2a:24:28:0c:d6:
                    98:83:07:58:1b:9a:8c:26:36:dd:88:fc:2b:6e:37:
                    8a:74:48:31:b7:19:c9:44:33:67:c5:fc:d1:18:aa:
                    e7:b4:09:a4:97:ff:44:9d:9e:41:fd:1e:e9:24:d2:
                    ff:61:ce:f3:55:aa:76:56:55:4e:b6:ff:d6:4e:d0:
                    e3:53:13:60:fb:e7:df:c6:dc:9c:f8:38:7a:a1:64:
                    d1:34:ea:c1:af:ee:4c:f3:f0:eb:02:a6:6b:f1:7e:
                    ec:70:21:95:c8:52:6e:e2:fa:a1:2a:bd:48:1e:80:
                    27:9b:77:c2:d4:78:be:d9:42:b4:f6:db:d3:c7:9e:
                    f7:35:df:15:bd:78:8e:fe:24:ad:e6:bd:82:ec:88:
                    82:57:e1:16:ba:d3:36:43:f5:fe:48:3f:a2:e9:d0:
                    9f:14:ea:0e:cd:17:e9:ba:b7:09:37:03:49:94:4d:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:97:9D:C6:61:BE:9D:D5:A3:B3:67:17:96:05:07:72:81:5D:28:09
            X509v3 Authority Key Identifier:
                keyid:08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:51:ec:f0:2c:58:3c:d9:a2:b1:3c:22:25:db:51:49:a0:69:
         62:63:24:38:ea:61:94:a5:42:df:7f:66:06:5b:bd:54:0b:36:
         2e:a4:f2:3b:ef:59:8d:96:0d:0d:35:61:b0:6e:d3:a2:35:79:
         9a:13:7f:20:34:fe:c6:94:17:23:df:29:a4:70:2d:fa:d3:0a:
         98:d9:dc:e4:c9:c4:84:b5:41:02:c7:09:b1:a3:4f:fb:07:d2:
         2b:09:4c:f6:59:81:b9:74:2f:6e:a2:cd:b8:56:2b:fe:fe:8c:
         7a:82:4e:20:d0:0c:7a:ba:e8:49:21:19:b5:2e:3c:3a:0e:09:
         f7:9a:01:41:5e:c4:c2:fe:64:26:ac:52:b7:91:a2:a6:da:94:
         24:d8:17:35:ba:7a:fa:8c:85:b7:95:5e:0b:43:25:71:49:69:
         97:8f:52:a4:3d:d8:0e:10:7c:7d:47:98:b1:ce:2f:ec:e7:0a:
         f7:9f:1a:99:d8:51:60:e4:4b:3b:ac:43:e8:2f:15:60:c6:13:
         35:d3:45:d3:9c:7d:3c:ce:93:88:ee:73:7b:0f:fe:c0:82:6b:
         64:0e:f8:1c:c9:c9:b5:e1:9c:e4:77:c2:0c:2d:50:62:eb:a8:
         8c:b5:3e:07:fa:2f:e3:b4:0f:95:1b:85:8d:8e:e0:5f:82:61:
         04:1e:2a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:08 2024 by rpki-client on console-fra.rpki-client.org