Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File:                     G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier:          2aNEgKVsYmZAE3LolpWCwBD8VRuFqYuM2P/vRK5YKyo=
Subject key identifier:   EF:B4:F1:CE:A8:05:74:2E:2A:0D:BC:78:1F:30:30:AD:67:56:C1:65
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer:       /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial:       018F53255B18AC024D0EF1C647DD3764A973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number:          103D
Signing time:             Tue 07 May 2024 13:01:48 +0000
Manifest this update:     Tue 07 May 2024 13:01:48 +0000
Manifest next update:     Wed 08 May 2024 13:01:48 +0000
Files and hashes:         1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: lezptkrmiCH+Rdthca6T+WHJokbOjxs7O1cl4iFgczk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:25:5b:18:ac:02:4d:0e:f1:c6:47:dd:37:64:a9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
        Validity
            Not Before: May  7 13:01:48 2024 GMT
            Not After : May  8 13:01:48 2024 GMT
        Subject: CN=efb4f1cea805742e2a0dbc781f3030ad6756c165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f9:ff:54:85:84:d9:97:cb:ec:dc:62:f5:e9:
                    d5:16:95:71:19:57:1f:97:f5:13:3b:a2:99:b2:aa:
                    35:1b:b3:cf:db:6b:b8:60:bf:aa:37:8f:11:dd:d0:
                    d5:64:2a:4b:63:53:e1:37:44:e1:f4:ba:c3:2d:22:
                    a5:3e:85:ea:65:d2:88:ce:54:0b:d7:d4:e8:a8:3c:
                    1c:61:fd:75:27:02:8d:e8:be:0d:d4:8a:d3:22:94:
                    e7:9d:a9:aa:35:ed:f0:57:5e:a9:67:af:25:2f:db:
                    4a:d6:63:e3:5b:25:39:d6:8d:41:62:b4:bf:e6:f6:
                    8a:bf:b3:3a:c8:1f:69:7c:f2:8c:10:bb:2d:20:bf:
                    11:1c:a6:51:d5:45:ae:cd:d8:1d:14:35:ee:eb:2c:
                    21:a1:e9:31:26:8b:ed:31:44:62:04:c8:b3:f7:cf:
                    6e:1b:5c:2e:65:3d:e9:ad:42:de:ff:8f:53:32:61:
                    78:fd:c8:c5:86:f3:7d:e6:e0:f6:2b:5e:e9:37:b5:
                    f6:1e:23:98:5f:f4:97:30:e7:f1:33:97:cc:ac:ae:
                    15:c5:de:2c:fc:05:48:69:62:a3:0c:84:e1:3f:9d:
                    d0:a9:9c:fb:dd:25:83:24:d8:14:05:79:a9:8f:30:
                    12:0f:69:4e:98:84:76:79:b3:c5:84:13:fa:69:41:
                    db:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B4:F1:CE:A8:05:74:2E:2A:0D:BC:78:1F:30:30:AD:67:56:C1:65
            X509v3 Authority Key Identifier:
                keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:de:b9:e9:f3:83:4d:1e:31:44:3f:03:67:36:23:45:3e:8d:
         e7:fb:b4:f6:7f:cd:98:88:0f:4a:b4:ef:72:e9:70:b8:e4:45:
         ab:1c:12:af:ee:5d:08:ae:e9:20:61:58:75:99:e9:70:02:fa:
         be:d6:78:e7:c7:49:34:c6:aa:ff:93:40:d7:af:f3:de:98:ae:
         bf:9d:08:52:9d:d9:b8:87:d2:0c:f4:f4:f1:bb:a3:15:c1:62:
         38:96:11:c7:85:dc:9e:23:f4:c8:13:f0:46:62:33:ec:0d:37:
         a0:cb:a3:ea:e4:dd:ec:75:26:50:27:5e:74:f8:45:a6:16:2d:
         1f:7c:5f:73:fa:7d:1b:b6:d6:05:18:a3:e7:81:37:3a:df:2a:
         91:e1:4d:cc:9f:bc:ad:a7:0a:e1:be:2f:e0:4d:52:f2:4a:5d:
         bf:6b:50:9b:ca:b7:0d:df:c7:99:35:73:b5:81:75:2d:d5:86:
         6b:ab:e5:68:af:17:12:c8:6a:06:5b:65:94:df:d7:59:1a:dd:
         d2:d8:50:61:98:e9:b8:6b:56:73:77:59:e2:82:86:ba:21:45:
         fb:62:e3:5d:30:b3:f9:8f:b6:04:dc:bf:0e:fa:a1:aa:0e:ae:
         99:3f:3e:66:6e:4b:45:f9:df:08:69:e8:3e:56:1d:80:55:c3:
         cb:8f:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:42:49 2024 by rpki-client on console-fra.rpki-client.org