Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
File:                     PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json)
Hash identifier:          kYKJxhGohl7ZB0qJ4RLwR4BNmmagpyHF22KE/ohpfGQ=
Subject key identifier:   18:DF:15:99:76:16:3B:8E:9E:26:D8:DC:5F:84:D8:77:5A:F5:09:33
Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Certificate issuer:       /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Certificate serial:       018F882495AE5360E71BD1876D82D06BE9D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
Manifest number:          025D
Signing time:             Fri 17 May 2024 20:00:49 +0000
Manifest this update:     Fri 17 May 2024 20:00:49 +0000
Manifest next update:     Sat 18 May 2024 20:00:49 +0000
Files and hashes:         1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: GcDJozLsXP1uRuw2ycfFuGMpnPBibHEDdgRS+E07J+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:95:ae:53:60:e7:1b:d1:87:6d:82:d0:6b:e9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
        Validity
            Not Before: May 17 20:00:49 2024 GMT
            Not After : May 18 20:00:49 2024 GMT
        Subject: CN=18df159976163b8e9e26d8dc5f84d8775af50933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:af:0e:09:61:ab:52:25:7e:c8:cb:00:65:
                    2f:83:09:56:b4:2c:61:ce:be:0d:38:7d:1d:16:6a:
                    58:78:0e:28:7e:47:09:49:8d:60:64:73:6c:07:19:
                    bb:f2:d0:10:3f:52:6a:24:92:dc:b2:4e:ca:1e:90:
                    2f:e6:31:86:e2:c0:1c:86:cd:7b:d6:67:ac:35:0d:
                    b8:cc:58:64:69:c2:c6:7f:f5:b9:2e:e6:2a:27:d0:
                    4b:70:10:b9:07:c8:b0:8c:22:b6:e2:ab:7e:ad:ac:
                    e6:5b:cf:fc:3a:96:ba:7d:23:22:a1:93:92:8e:15:
                    bd:a9:34:e0:50:bf:c0:25:75:93:40:95:f2:ba:7e:
                    58:82:38:17:18:bc:cc:f5:98:47:09:35:cc:f7:50:
                    1d:5b:83:2d:c0:a2:a6:6d:90:7c:4b:dd:af:f6:fb:
                    71:4a:3a:f0:a1:2b:9e:f9:d1:2f:b7:06:5c:ae:6a:
                    c4:d6:38:46:49:1e:a9:5d:f8:e4:9e:b8:11:68:e8:
                    c2:4e:2a:88:11:44:94:10:88:d5:df:59:05:42:ef:
                    d5:fd:64:be:6e:ae:2e:99:70:24:b1:e7:0e:58:08:
                    28:01:c4:8b:bf:e2:cb:d1:2a:e6:10:93:e2:d8:f8:
                    21:14:7e:e6:fd:ae:71:b1:7a:ec:83:9a:e2:f6:03:
                    02:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DF:15:99:76:16:3B:8E:9E:26:D8:DC:5F:84:D8:77:5A:F5:09:33
            X509v3 Authority Key Identifier:
                keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:30:d6:82:6b:bb:90:ce:6c:06:c5:d8:dc:44:6b:cc:4e:7f:
         ad:6f:39:f1:68:8f:3a:45:db:96:74:bf:00:2c:73:5a:a6:82:
         b2:02:d1:69:b9:43:42:16:22:79:af:c3:d1:0e:aa:b2:bd:86:
         bc:31:db:3c:1a:73:3a:8b:d7:fd:8b:51:61:c5:ec:4d:5d:d5:
         e9:11:ea:c8:f8:25:5f:d2:b4:24:c1:e2:33:16:8b:44:db:7c:
         58:1a:20:9a:d0:21:8f:6c:39:5b:ba:62:f3:d7:8b:ee:10:1e:
         46:60:94:69:6c:8a:94:6e:02:38:e3:01:50:bf:2e:5a:c2:f1:
         09:52:67:04:d7:73:9a:b9:71:cf:ee:af:3f:5e:eb:e0:7d:92:
         39:2c:5c:9f:54:21:f2:44:b9:af:77:59:cb:6b:9e:30:8f:57:
         2f:a0:32:b9:06:a0:ea:7e:c9:df:8c:fd:b0:0d:c7:d9:4c:94:
         fa:f7:61:2a:65:df:e4:1b:04:6c:79:c4:54:0d:99:31:70:af:
         da:af:93:e1:44:e9:72:b1:ad:5d:2a:8c:b9:28:9c:f9:fe:8e:
         d2:eb:de:40:ed:05:db:88:a0:06:ec:96:60:fe:4e:36:44:8e:
         4a:97:e0:eb:bb:fd:13:84:3e:5a:3b:46:39:18:27:70:ef:d3:
         20:a5:71:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:15:07 2024 by rpki-client on console-ams.rpki-client.org