Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
File:                     OoLcXHHOpyxlsCahJnifOIZXC6Y.mft (raw, json)
Hash identifier:          nvhS/UpXQ815wGCMj8E6KMmLvtImED4jK4dQnr+307o=
Subject key identifier:   0B:CE:CC:44:1C:AE:4F:78:7A:D9:1F:22:68:18:ED:6A:B4:DE:9B:AC
Authority key identifier: 3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6
Certificate issuer:       /CN=3a82dc5c71cea72c65b026a126789f3886570ba6
Certificate serial:       018F874A329B41EF3F31D6B3A3556D716D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:02:17 +0000
Manifest this update:     Fri 17 May 2024 16:02:17 +0000
Manifest next update:     Sat 18 May 2024 16:02:17 +0000
Files and hashes:         1: OoLcXHHOpyxlsCahJnifOIZXC6Y.crl (hash: KElD16jgs6KWhQXGUEAcv0kz0D2/v9rnpQ6bKCQaXos=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:32:9b:41:ef:3f:31:d6:b3:a3:55:6d:71:6d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a82dc5c71cea72c65b026a126789f3886570ba6
        Validity
            Not Before: May 17 16:02:17 2024 GMT
            Not After : May 18 16:02:17 2024 GMT
        Subject: CN=0bcecc441cae4f787ad91f226818ed6ab4de9bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:7d:f5:cd:1f:7b:d4:b3:ee:cf:65:93:e7:
                    26:01:bb:f7:85:f5:7a:2d:6e:94:ba:3d:d2:89:d7:
                    95:02:06:c9:f8:6d:65:93:02:ae:e2:34:82:1e:f1:
                    1a:ca:11:43:2e:3c:5e:0c:91:e2:48:a2:2a:09:72:
                    83:4b:82:17:67:88:64:44:3c:0c:bb:fc:e7:59:0c:
                    e4:b2:0b:e0:a7:a8:ff:57:56:48:8d:95:4b:ea:84:
                    64:4a:10:27:ec:4a:75:6b:77:c8:b6:bd:fb:3c:d2:
                    03:2e:e1:ad:66:b7:a7:20:d1:6e:22:b7:b2:17:8f:
                    dc:03:6e:32:67:3c:4b:fc:fd:1c:fd:32:fe:35:bf:
                    ab:e0:16:19:f0:d9:0e:2d:8a:28:d9:67:24:b0:c2:
                    da:68:c5:44:c8:b0:9d:86:2d:95:7a:8c:88:07:09:
                    27:be:91:89:2a:88:2e:ce:7d:e1:7c:bf:7e:f9:c4:
                    72:60:37:8b:f3:26:77:e4:25:48:72:54:a0:a5:0c:
                    94:41:09:31:c1:78:99:dc:4c:05:81:cb:a1:b9:ed:
                    8d:f6:c5:a5:04:b5:6e:2a:0a:cb:db:c4:0e:b4:29:
                    d2:36:3d:14:f0:13:cb:8d:6a:7a:9e:c0:74:81:0d:
                    39:b6:f8:9f:ba:f0:ba:01:5e:60:08:89:ee:c1:26:
                    6f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CE:CC:44:1C:AE:4F:78:7A:D9:1F:22:68:18:ED:6A:B4:DE:9B:AC
            X509v3 Authority Key Identifier:
                keyid:3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d8:c0:83:1d:23:a6:50:87:dd:89:01:19:02:5d:98:2d:a0:
         ca:6e:c4:4c:77:53:ff:97:38:b0:5a:18:c4:2f:93:f4:21:b6:
         48:f1:b6:48:34:93:28:ac:a9:ee:90:ad:c7:b2:d2:dd:53:24:
         b0:c5:1c:cd:88:96:48:69:08:e5:b5:16:9e:c3:79:21:6e:d6:
         af:5c:8b:21:a2:1f:65:ae:13:0e:15:08:cb:e6:1f:91:29:97:
         e5:36:f5:25:ef:ca:2f:3b:ff:b3:57:e5:4b:62:49:bb:a6:de:
         58:90:57:4b:4c:47:ae:69:4b:29:4f:b0:23:ec:03:5c:22:3f:
         63:2e:b1:45:1c:e6:0f:88:08:bb:14:2e:07:d0:04:b8:0c:41:
         29:f9:df:8b:47:5c:c9:cf:7e:04:90:91:58:d4:69:08:e6:f0:
         25:bc:7d:e6:a3:9e:af:36:35:98:2a:5f:f2:8c:28:c2:97:f5:
         a5:c3:82:3c:31:25:e7:13:e2:cf:8f:79:6d:f5:34:0d:bd:cd:
         4d:46:92:65:b1:44:03:39:b6:28:51:9a:7a:1d:3f:3f:97:e0:
         ba:fd:2c:16:41:ff:08:de:8c:d0:a2:79:47:b4:26:6e:d4:bf:
         94:fd:d8:3c:f5:44:d5:e7:f7:2b:15:e0:60:6f:79:88:13:2d:
         ad:ab:52:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:55:05 2024 by rpki-client on console-ams.rpki-client.org