Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
File:                     oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json)
Hash identifier:          aGqMqZ360UL1cgGlF6aWYFSNYHVMsHzOvNEkw7t4bBk=
Subject key identifier:   AF:63:43:3F:92:59:88:EC:10:37:3F:5B:75:02:00:6B:5B:C3:7C:61
Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
Certificate issuer:       /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Certificate serial:       018F87ED45DCD5A71ADF1731FB5E23DC32EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 19:00:24 +0000
Manifest this update:     Fri 17 May 2024 19:00:24 +0000
Manifest next update:     Sat 18 May 2024 19:00:24 +0000
Files and hashes:         1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: g3h7w0rwZQa82m4H6WpH6XdtdhcKEFc5zTR/SYYIDXM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:45:dc:d5:a7:1a:df:17:31:fb:5e:23:dc:32:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
        Validity
            Not Before: May 17 19:00:24 2024 GMT
            Not After : May 18 19:00:24 2024 GMT
        Subject: CN=af63433f925988ec10373f5b7502006b5bc37c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:80:74:07:40:97:11:c3:15:72:f7:af:29:
                    74:ce:e9:52:1b:46:60:9e:a0:e7:a4:62:f8:3a:9c:
                    60:bd:10:fe:d2:f3:89:ce:65:79:13:5f:01:54:f0:
                    bc:5e:b1:26:d7:c3:60:80:cb:0c:de:39:fe:66:d7:
                    7a:17:3d:eb:1a:78:56:50:63:52:0a:9e:e5:db:46:
                    e3:42:56:b8:20:c8:45:e6:80:e9:b5:c3:47:85:ac:
                    7b:5c:2b:82:53:a1:18:96:7c:74:52:f6:d5:44:d7:
                    e1:3a:04:c2:b9:50:be:b9:f9:dc:1e:03:a7:46:22:
                    f1:d8:ef:ef:bb:e5:39:c7:8e:39:b7:cb:9a:71:0c:
                    2c:f0:69:c5:07:f6:d3:c9:b9:a9:d6:97:29:67:35:
                    89:e3:14:14:7a:2c:47:d9:8f:e5:c9:ce:1e:c8:de:
                    3a:86:d1:d8:1f:e1:9c:81:5f:00:2f:09:86:54:e3:
                    dd:8a:bf:48:df:5e:02:8b:f0:d5:34:00:7f:39:9d:
                    ba:f6:0b:05:d1:b9:8d:ba:fd:34:e6:7c:47:8d:76:
                    ce:98:4b:a6:d2:92:ab:be:df:76:53:ca:89:33:89:
                    75:b6:a9:48:42:b9:10:23:40:8c:cf:c4:d0:1b:d6:
                    08:99:48:6f:73:fb:8b:13:36:6c:22:b2:ba:69:c7:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:63:43:3F:92:59:88:EC:10:37:3F:5B:75:02:00:6B:5B:C3:7C:61
            X509v3 Authority Key Identifier:
                keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ce:49:78:ee:f7:59:9c:21:e4:cb:4a:b9:62:a2:4e:6d:c5:
         66:83:bf:cf:7e:2a:ec:df:a6:74:e0:2f:48:04:d1:db:3d:4b:
         ab:f3:c4:b3:bd:ba:eb:b2:27:9d:74:e7:a4:43:18:1b:af:f5:
         75:d4:60:44:13:61:1b:99:1f:ef:89:ce:98:be:53:44:7a:68:
         21:11:6a:70:ec:c2:b2:b3:b0:67:5d:c5:31:ec:ce:cf:d6:c7:
         0f:34:f6:e3:07:1e:6d:3f:fb:b7:e8:bb:c3:91:bf:dc:40:58:
         ec:bb:0f:69:20:a2:2b:d9:97:73:47:5f:2c:0b:9b:f4:8e:40:
         b6:c8:1d:df:fd:50:49:4c:6d:fc:86:1e:f7:ff:7d:0a:c6:33:
         58:87:03:77:f5:b6:90:9f:2f:71:4e:a7:7e:04:59:93:15:03:
         50:b5:c2:df:4e:cd:77:bc:fc:d4:a0:76:97:30:09:d0:cd:38:
         62:46:00:ab:46:84:8d:43:af:45:1a:15:c0:ff:86:0f:96:00:
         51:f9:c8:a1:b6:bb:9d:0c:ed:81:51:a6:48:1a:2b:c5:8e:4c:
         76:14:9e:fc:dc:4d:aa:cb:05:cc:72:84:2e:d5:13:17:df:94:
         01:07:fe:ae:e0:a3:93:e7:5a:ba:5a:a5:e4:7d:e9:26:c7:34:
         93:4f:44:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:51 2024 by rpki-client on console-ams.rpki-client.org