Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File:                     DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier:          fHCEVQWeo6fmxGGdlinl907DYi2gxXrQu4CPQwIk2zY=
Subject key identifier:   59:6E:B9:5C:69:1E:90:36:83:66:BD:14:43:D4:09:4B:85:86:EB:64
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer:       /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial:       018F43B3687B199F8B482ABC817963394DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number:          0A15
Signing time:             Sat 04 May 2024 13:03:02 +0000
Manifest this update:     Sat 04 May 2024 13:03:02 +0000
Manifest next update:     Sun 05 May 2024 13:03:02 +0000
Files and hashes:         1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: +YX8ZPwSEg+XXUnQgTNXtAnMXnOGfuww4QE7mfpNttU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:68:7b:19:9f:8b:48:2a:bc:81:79:63:39:4d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
        Validity
            Not Before: May  4 13:03:02 2024 GMT
            Not After : May  5 13:03:02 2024 GMT
        Subject: CN=596eb95c691e90368366bd1443d4094b8586eb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:8d:de:4b:ad:e8:b8:5d:e6:f6:4f:4c:ff:
                    07:37:f7:0b:1e:70:0f:ab:56:52:21:7d:8d:2e:13:
                    e8:d3:d0:44:7c:3c:71:77:0c:d5:1b:c3:aa:b2:41:
                    ab:9b:e1:7b:c6:9f:a5:06:8a:87:5a:ef:3a:c0:a6:
                    b7:c2:e3:c5:0b:2d:85:c4:67:b8:b4:62:b1:92:16:
                    25:46:cc:a9:bd:ee:ce:e0:ed:42:1d:b0:69:a7:21:
                    2a:ce:25:de:61:90:bb:98:07:41:a7:e9:36:8f:d0:
                    73:2d:15:0b:00:76:d8:d9:c9:4d:29:8e:45:5f:fd:
                    8e:83:46:4d:51:dd:97:e4:54:78:88:ef:37:67:b7:
                    e3:14:16:40:2b:83:c8:23:99:b3:54:2c:02:de:4b:
                    70:55:2b:f9:a7:0f:a3:41:94:6a:5d:3c:0b:cc:e8:
                    fb:86:6b:7d:fb:59:c4:5b:c6:e0:a3:21:68:ce:71:
                    2a:87:7d:bc:7b:34:a0:58:25:5d:0e:3d:dc:9a:e0:
                    41:86:9e:5d:07:c1:b4:64:2b:7b:56:fd:8d:bd:ef:
                    ea:e2:2d:0c:4a:68:08:25:9b:bd:6b:61:b6:f5:c4:
                    0c:cc:b3:dc:d7:f0:92:fc:46:b5:60:2b:03:4c:6b:
                    9d:d1:be:3b:55:97:ca:24:b9:a6:8f:88:d8:66:d1:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6E:B9:5C:69:1E:90:36:83:66:BD:14:43:D4:09:4B:85:86:EB:64
            X509v3 Authority Key Identifier:
                keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fe:c6:12:01:66:49:39:d9:d0:b7:03:98:c5:e7:aa:17:13:
         8d:ef:38:ab:c6:32:f5:b7:ca:47:f2:6b:66:d4:14:ca:59:59:
         2d:ca:98:8e:63:b0:32:a3:4d:dd:fd:8f:9a:14:b6:d6:fe:1f:
         6a:26:60:fb:db:e2:59:cf:b0:06:41:16:59:bd:85:01:2c:84:
         4b:64:42:dd:ff:8b:38:67:23:82:94:8c:3d:c0:b7:dd:3e:27:
         1e:47:aa:39:c9:cc:94:67:d6:2f:8e:76:a5:2a:fb:93:61:2a:
         e1:09:d6:67:24:04:e6:cd:5e:04:05:b4:24:7a:68:a5:dd:de:
         77:f5:6c:39:52:6e:91:eb:9a:9e:1d:e8:78:21:68:b5:32:c5:
         da:48:56:8b:8e:74:53:73:11:7e:b5:90:c2:68:3e:09:c2:5f:
         12:b8:05:85:64:46:43:3b:64:19:88:8e:9d:89:1c:2f:96:a7:
         ac:76:4f:88:e8:74:54:06:3d:0a:46:23:03:44:3f:1e:37:7c:
         51:8f:df:a8:14:8e:28:77:36:07:8d:c1:3c:65:6e:31:ab:82:
         7c:66:cd:62:aa:bc:49:bf:56:55:68:16:2f:6c:8d:65:b4:c5:
         05:ca:01:2a:90:af:14:d3:d5:cd:60:ec:f0:29:41:06:bc:44:
         db:88:2d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 23:10:34 2024 by rpki-client on console-ams.rpki-client.org