Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File:                     ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier:          K5gazdx0M7t1KdV3R8ingY6XJTPR6zXGtxv0UrKS7SA=
Subject key identifier:   22:71:46:CC:96:DF:73:75:5E:9E:52:B6:B8:76:22:DB:2D:05:94:2F
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer:       /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial:       018F381B95B13A7D5EFCAB28E36FD311753B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number:          07C2
Signing time:             Thu 02 May 2024 07:01:22 +0000
Manifest this update:     Thu 02 May 2024 07:01:22 +0000
Manifest next update:     Fri 03 May 2024 07:01:22 +0000
Files and hashes:         1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: tfHkjgK106S+z2QgcJubJdTPDQ/N4RvHpDLZjFeNEvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:95:b1:3a:7d:5e:fc:ab:28:e3:6f:d3:11:75:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
        Validity
            Not Before: May  2 07:01:22 2024 GMT
            Not After : May  3 07:01:22 2024 GMT
        Subject: CN=227146cc96df73755e9e52b6b87622db2d05942f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:2f:97:0d:af:ca:44:5b:8b:d2:c3:23:89:
                    b4:22:8d:8a:9b:7a:fb:54:cc:96:df:8a:e0:13:8a:
                    de:72:0b:17:2c:fc:48:41:49:68:3c:b0:c1:c7:62:
                    43:00:23:f8:a9:b6:f6:70:52:e1:10:87:41:3e:63:
                    00:0f:3d:0c:66:23:58:2b:72:25:a2:3a:44:10:7e:
                    24:04:54:7a:f3:37:45:98:e4:10:97:51:47:d3:00:
                    01:1e:8b:cb:dc:b9:6f:ec:0f:4c:3e:9b:1d:13:17:
                    fd:35:d6:e3:c8:9f:6f:e0:3a:e1:2e:64:97:91:7b:
                    41:8d:1b:a2:58:76:44:7e:c5:08:4e:d6:44:c3:5f:
                    f3:06:c4:93:86:bc:3d:84:43:63:49:32:ac:5c:ee:
                    ed:6d:5a:89:3b:78:4a:b6:f0:0d:ea:cc:62:8e:a1:
                    8f:83:7e:cf:e5:d8:64:04:1c:b6:37:00:00:89:46:
                    7e:49:17:3c:b0:31:d2:8d:29:71:00:fd:b7:4d:fb:
                    80:61:1f:08:e5:e8:58:43:29:93:1a:14:25:b9:5d:
                    64:c1:6d:7a:b2:22:91:6c:37:6a:ed:56:e5:83:f0:
                    74:c8:fa:c7:e1:df:1f:11:7f:f9:87:7e:01:b3:34:
                    e2:31:06:92:40:af:e9:79:3a:7f:f4:a9:6f:0d:3f:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:71:46:CC:96:DF:73:75:5E:9E:52:B6:B8:76:22:DB:2D:05:94:2F
            X509v3 Authority Key Identifier:
                keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:33:c0:0b:39:25:bb:71:c9:0d:e2:c2:2f:03:26:ce:23:05:
         2b:69:b6:71:1f:0e:f0:c7:b1:19:95:8d:8e:e5:50:b8:80:a0:
         59:63:79:57:3c:e9:60:cd:b2:25:f5:c0:02:09:b9:58:d6:72:
         b4:e6:c4:2a:81:f8:c7:4e:7d:16:a3:8f:9b:a5:fc:6f:2d:07:
         4d:65:c8:4f:50:2b:c2:eb:5d:b6:c0:60:4c:c8:1f:c6:a9:9b:
         9b:ec:14:4c:3a:a6:02:c4:a0:f7:e7:39:82:a5:da:8d:e5:01:
         5e:f5:5a:72:79:ed:2d:ad:4c:1e:b7:56:69:01:83:83:11:bc:
         d8:8a:69:ff:49:37:7c:b9:c8:ed:25:c6:d6:26:81:4e:d9:6d:
         f9:fd:44:f6:f5:c4:ec:c0:4d:d2:eb:5b:23:e3:67:8c:51:6f:
         83:76:84:d6:d1:57:1d:39:7c:31:a5:5a:5f:67:fa:94:13:59:
         7d:13:82:ef:c8:cf:89:e7:79:33:06:63:12:26:af:b7:54:6c:
         c3:ea:51:d9:5d:4e:d9:4d:c3:b0:86:ff:de:86:c2:3c:c0:7e:
         13:1b:8d:08:79:8a:d2:c9:93:de:1c:3e:02:5d:3c:d8:e3:ef:
         32:4d:f5:3b:bf:69:a9:58:46:93:e8:6e:ce:00:c8:25:7f:da:
         5a:44:ab:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:32:44 2024 by rpki-client on console-fra.rpki-client.org