Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File:                     4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier:          vY7YglWMyZORLSmde8TwciGP/tn4wZGrze0iXiLcCX0=
Subject key identifier:   49:1C:60:82:F9:B2:77:F0:D7:04:9D:69:2F:98:63:A7:06:C3:95:8D
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer:       /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial:       018F460E5151B84C3C278EC65F45DB920DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number:          1152
Signing time:             Sun 05 May 2024 00:01:34 +0000
Manifest this update:     Sun 05 May 2024 00:01:34 +0000
Manifest next update:     Mon 06 May 2024 00:01:34 +0000
Files and hashes:         1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: yR9omPjSo4CdPx1OSE/NOs7SxjrAGPTLIajGMN3i368=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0e:51:51:b8:4c:3c:27:8e:c6:5f:45:db:92:0d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
        Validity
            Not Before: May  5 00:01:34 2024 GMT
            Not After : May  6 00:01:34 2024 GMT
        Subject: CN=491c6082f9b277f0d7049d692f9863a706c3958d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:d3:b8:88:54:5f:77:d3:01:06:83:aa:bd:
                    c8:ca:8a:7d:9d:e4:2a:95:b0:f9:21:e8:b7:b7:46:
                    ea:27:df:21:9e:17:96:c9:05:63:5f:41:13:10:ad:
                    50:14:00:74:7b:5c:db:71:36:03:c4:d1:a5:dc:70:
                    38:93:9b:d5:0d:32:0d:16:ae:19:89:05:94:a7:48:
                    e3:60:8b:fa:50:31:21:03:fe:2c:ad:2e:92:c9:4c:
                    90:8f:aa:fc:a7:e5:1f:24:39:30:2c:5f:87:b2:e5:
                    62:e8:5f:08:09:f2:a0:49:67:eb:6f:45:fd:3e:4c:
                    e9:65:ed:cc:31:c9:14:8d:7e:df:fc:35:cf:23:46:
                    48:05:05:31:94:e9:e6:4c:bb:5b:05:e2:a7:77:e1:
                    d2:6b:9a:b4:c7:4d:00:b7:fd:db:0a:d9:1a:fa:ae:
                    e0:a1:c5:51:b8:27:9b:30:ee:68:dd:47:a5:32:c5:
                    05:02:b9:8b:93:b3:26:50:67:a0:c7:32:f1:9e:0e:
                    24:a8:f6:db:9e:50:43:e3:7b:8d:68:a6:ff:6f:55:
                    e3:6b:8d:3d:e1:e7:0c:86:0d:84:f2:73:b2:d9:2e:
                    6b:c6:fb:c6:30:6f:b1:9f:31:b4:77:17:47:6b:d9:
                    4e:e2:95:a3:72:a2:21:f5:0d:2f:f5:ed:25:02:cf:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1C:60:82:F9:B2:77:F0:D7:04:9D:69:2F:98:63:A7:06:C3:95:8D
            X509v3 Authority Key Identifier:
                keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a5:33:55:16:25:13:5c:81:e8:dc:89:1d:b2:0d:4d:f1:3e:
         8c:a2:7a:14:46:ad:3f:7f:c5:fb:da:a0:53:9a:c4:e2:b3:45:
         f5:7a:78:7c:b7:29:83:4e:d9:0a:fc:b4:23:c5:53:2b:52:d7:
         80:2a:52:21:a5:ff:34:d0:01:b0:71:30:37:a2:64:19:dc:00:
         88:1e:2d:83:82:12:c7:2f:20:35:30:c7:dc:96:71:ec:7c:6f:
         7d:ac:8d:7e:1c:81:66:e3:79:06:4a:b9:55:39:28:eb:c6:04:
         d5:5b:60:ed:63:03:e9:c0:0c:2b:20:a3:58:99:51:92:eb:4e:
         f4:60:46:05:cf:5b:35:7a:4c:b5:6c:43:ce:93:30:0e:3f:11:
         5a:2f:b8:94:95:2c:71:80:bd:22:47:f3:69:37:7c:bf:0e:58:
         fc:46:77:f2:34:17:f2:60:6b:da:4b:d2:9a:f3:bf:15:4a:e5:
         a5:b3:07:ed:93:d0:87:22:61:a0:ef:81:19:fd:22:4c:77:e7:
         af:0e:9b:44:1a:62:fd:87:7b:6f:38:d5:f2:d3:ea:60:b6:28:
         ae:d3:11:e5:bc:f7:2a:d6:63:97:72:37:83:37:c3:9f:d0:e7:
         59:8e:f7:42:d9:c8:ad:c8:57:46:2a:18:32:73:c6:7f:2b:b2:
         20:0e:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:33:45 2024 by rpki-client on console-ams.rpki-client.org