Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File:                     0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier:          u+eVbUUfFtAeWyq5Sk5BbATx330ez3qHCRP0ahwFoK4=
Subject key identifier:   F7:F8:55:FE:9F:49:AF:9B:9A:4D:16:86:59:D2:D7:D7:50:24:E5:3B
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer:       /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial:       018F3DE75EBD1C76D81F1C4741B76EEF2922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number:          055E
Signing time:             Fri 03 May 2024 10:02:04 +0000
Manifest this update:     Fri 03 May 2024 10:02:04 +0000
Manifest next update:     Sat 04 May 2024 10:02:04 +0000
Files and hashes:         1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: 4WH6VwHgT3hCex/y/HR/VpBH2qhBNnUxV2IS8id0aVE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e7:5e:bd:1c:76:d8:1f:1c:47:41:b7:6e:ef:29:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
        Validity
            Not Before: May  3 10:02:04 2024 GMT
            Not After : May  4 10:02:04 2024 GMT
        Subject: CN=f7f855fe9f49af9b9a4d168659d2d7d75024e53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e0:fa:b0:75:d8:0a:97:44:0b:f8:d3:68:1a:
                    78:e1:27:1b:4a:5c:e3:9b:f3:bf:36:51:56:91:ce:
                    6d:f1:7f:1c:5d:b6:42:aa:a9:5d:26:77:68:fa:93:
                    4c:23:4b:c6:eb:8d:31:8b:04:3f:6b:f6:1f:92:ff:
                    be:d2:55:16:43:37:74:ef:2b:76:43:0f:b9:bd:70:
                    22:93:0e:7b:a7:60:ef:c2:91:7c:6d:d4:00:59:b5:
                    5c:d4:06:a0:da:b4:6b:c7:44:a2:42:87:91:af:dc:
                    e1:f1:e4:b4:71:ff:93:1a:7c:f6:63:ab:79:cb:16:
                    bc:3a:db:3e:42:71:30:bf:fa:ad:39:20:09:5a:25:
                    99:07:22:ac:85:08:20:3a:8a:6d:66:87:04:e6:9d:
                    0f:ad:51:71:19:5d:8c:ca:ae:91:6d:1b:df:5f:f6:
                    78:3b:b6:1f:ba:90:3a:d6:e7:11:62:32:92:bd:1d:
                    c5:03:01:fa:a2:f9:ee:d0:24:f2:f7:66:a9:2e:42:
                    80:af:1f:47:76:58:ee:f1:c7:37:f9:31:ed:c4:6e:
                    00:47:72:37:63:13:30:6a:8b:d4:84:97:9e:43:74:
                    ce:bb:32:60:2b:ac:1d:c6:7e:b8:82:ca:cf:97:20:
                    3a:c4:44:dc:cb:03:6d:d5:b3:6e:8d:ba:e3:0b:50:
                    c8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F8:55:FE:9F:49:AF:9B:9A:4D:16:86:59:D2:D7:D7:50:24:E5:3B
            X509v3 Authority Key Identifier:
                keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f9:2d:54:17:ea:46:07:c7:44:83:29:ff:b6:09:5a:d6:ca:
         48:8c:4b:45:0b:df:37:ea:4a:a2:0f:a1:4e:09:94:8c:3e:3d:
         1c:ac:55:95:73:5d:ed:7b:d6:65:67:5f:58:d2:9a:6a:29:81:
         e3:55:bc:bc:45:ac:28:3e:a9:7d:4a:fa:46:ae:41:0e:45:a0:
         fc:ee:9d:24:33:e2:1c:d0:14:b7:43:79:07:15:39:33:49:2b:
         a9:d1:7b:32:2f:ac:07:49:e2:02:74:22:54:68:3d:09:8b:7c:
         6d:73:b9:6e:c8:93:a1:fa:2a:e2:5c:39:31:99:87:78:c6:43:
         18:31:82:0a:95:51:eb:26:f2:eb:40:fd:de:59:bb:8d:ad:14:
         56:07:f3:1f:11:76:7f:1a:ff:d2:12:26:4f:a0:ea:37:1f:03:
         50:a1:2f:53:d8:2a:f9:25:e2:c7:90:f3:0b:0d:20:7d:57:79:
         51:1d:23:99:08:51:24:d5:a5:6e:5c:5f:30:fc:4a:a6:30:f8:
         9e:b1:5b:66:ac:be:ca:65:c1:2a:17:c0:9e:56:b9:34:ec:88:
         4a:17:c0:ca:b0:ec:5a:87:30:57:aa:77:23:86:05:c5:f7:95:
         20:c4:41:28:3e:21:f8:21:aa:8b:7e:90:eb:24:02:ec:d3:d1:
         8e:3e:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:05:09 2024 by rpki-client on console-ams.rpki-client.org