Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/40c094-1ba6-4f3f-bc8d-d1566df0db05/1/DVYxF7sQWr2oMJVtCmdSwI4y8g4.mft
File:                     DVYxF7sQWr2oMJVtCmdSwI4y8g4.mft (raw, json)
Hash identifier:          P96sa1h8NnqkXNAZ7BlHhzTcUXmVIGuLY24eoT36vVA=
Subject key identifier:   18:96:32:DE:3C:49:6A:03:6A:C9:61:BC:51:21:53:A6:65:CA:F0:F8
Authority key identifier: 0D:56:31:17:BB:10:5A:BD:A8:30:95:6D:0A:67:52:C0:8E:32:F2:0E
Certificate issuer:       /CN=0d563117bb105abda830956d0a6752c08e32f20e
Certificate serial:       018F362DA83C171E48C032D4B20A44DF00D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DVYxF7sQWr2oMJVtCmdSwI4y8g4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/40c094-1ba6-4f3f-bc8d-d1566df0db05/1/DVYxF7sQWr2oMJVtCmdSwI4y8g4.mft
Manifest number:          06FF
Signing time:             Wed 01 May 2024 22:01:52 +0000
Manifest this update:     Wed 01 May 2024 22:01:52 +0000
Manifest next update:     Thu 02 May 2024 22:01:52 +0000
Files and hashes:         1: DVYxF7sQWr2oMJVtCmdSwI4y8g4.crl (hash: PooZlYUAROqtWfeNFmZBu5ib07C0Y+M5RCWEaZEuSCU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/40c094-1ba6-4f3f-bc8d-d1566df0db05/1/DVYxF7sQWr2oMJVtCmdSwI4y8g4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/40c094-1ba6-4f3f-bc8d-d1566df0db05/1/DVYxF7sQWr2oMJVtCmdSwI4y8g4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DVYxF7sQWr2oMJVtCmdSwI4y8g4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2d:a8:3c:17:1e:48:c0:32:d4:b2:0a:44:df:00:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d563117bb105abda830956d0a6752c08e32f20e
        Validity
            Not Before: May  1 22:01:52 2024 GMT
            Not After : May  2 22:01:52 2024 GMT
        Subject: CN=189632de3c496a036ac961bc512153a665caf0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:62:86:cb:24:ee:e6:65:73:33:fb:23:aa:a6:
                    d1:95:d2:84:09:c8:eb:10:12:e4:40:bf:92:86:fb:
                    1e:90:48:2a:01:87:8c:a8:3b:43:98:2a:49:34:b2:
                    05:82:da:ed:fd:f8:d6:6f:86:53:a5:75:26:70:c7:
                    4f:f8:4b:c3:e0:ca:c4:98:0e:27:a2:a7:3c:03:0a:
                    ce:7c:cb:33:5f:4a:48:06:1c:e2:75:0a:28:c9:9c:
                    4e:56:86:85:0e:2c:58:b6:c7:95:6f:ce:99:4d:9b:
                    b9:99:0f:e2:4a:7f:00:73:08:00:c1:ae:2e:2a:55:
                    23:aa:22:e3:48:b0:0b:fe:73:95:01:ad:40:14:7b:
                    34:ac:25:8f:21:90:a2:cc:47:1e:a6:21:6a:87:78:
                    ea:87:1a:5a:21:c9:e6:79:f5:79:90:a1:1d:8b:36:
                    d5:1f:1b:c5:f9:a6:aa:2c:38:9b:cf:90:db:6d:3c:
                    8e:8f:f2:27:d5:9f:ab:ba:2f:2a:26:02:8e:59:a8:
                    42:a1:79:71:08:fb:ac:41:81:12:aa:1d:96:f3:03:
                    0f:b2:6d:6c:83:88:48:bb:b9:d8:af:eb:d7:0d:47:
                    75:fd:62:d8:c1:68:5f:2c:97:62:05:0f:c2:04:3d:
                    23:a4:df:5d:0f:bb:a7:d2:cf:98:1f:af:02:f8:10:
                    2d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:96:32:DE:3C:49:6A:03:6A:C9:61:BC:51:21:53:A6:65:CA:F0:F8
            X509v3 Authority Key Identifier:
                keyid:0D:56:31:17:BB:10:5A:BD:A8:30:95:6D:0A:67:52:C0:8E:32:F2:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVYxF7sQWr2oMJVtCmdSwI4y8g4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/40c094-1ba6-4f3f-bc8d-d1566df0db05/1/DVYxF7sQWr2oMJVtCmdSwI4y8g4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/40c094-1ba6-4f3f-bc8d-d1566df0db05/1/DVYxF7sQWr2oMJVtCmdSwI4y8g4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:76:ef:11:67:d1:26:ec:08:7b:ee:8c:a3:cc:1d:6a:0e:3f:
         e3:7e:e2:82:91:48:81:37:68:1e:0d:84:cd:a4:2d:7e:9a:19:
         8f:f8:63:ef:b7:38:66:23:07:98:78:9c:e6:7b:54:77:71:54:
         96:39:d9:2e:db:3f:8f:8f:a9:0e:b4:a7:73:9d:53:0c:79:ac:
         4e:40:71:9a:93:5f:b1:08:34:5a:ae:c6:8a:29:35:6a:a8:c0:
         1d:93:59:3b:bc:cf:c5:a7:e4:ce:aa:07:c2:d9:ed:bd:fa:f1:
         d6:b9:95:ee:a1:76:1c:25:03:5f:01:68:39:f0:11:5a:43:71:
         f7:fd:02:c0:16:42:99:65:fe:fc:a8:6a:2d:b9:67:cb:96:85:
         83:a5:8a:e3:08:7c:89:d0:da:e9:ee:8b:e3:fc:1d:d1:99:0c:
         18:a3:b5:b7:e9:ca:98:1d:e1:a1:23:ae:b2:b5:55:55:f1:60:
         e9:2c:7f:1b:d0:b9:ab:c7:6f:73:1a:1c:0f:6d:6a:db:83:ea:
         71:82:8e:bc:0b:44:01:68:d9:f6:53:eb:60:ca:0c:bb:e1:57:
         8b:9f:d0:db:ab:7e:7b:7c:19:72:3a:e9:75:b2:28:d0:56:6e:
         5c:d9:1e:fb:01:9f:f3:46:29:dd:f8:f9:76:44:3a:67:e8:ca:
         bb:6b:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:01:48 2024 by rpki-client on console-ams.rpki-client.org