Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
File:                     1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json)
Hash identifier:          NnXTPSn5OW7oi8gJrF0YIOwCDney3+PkM9vfOIeCnIM=
Subject key identifier:   3A:19:8D:73:DA:E0:0D:AB:C0:94:65:EA:0C:3B:73:8B:19:2F:26:77
Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Certificate issuer:       /CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Certificate serial:       018F5514ECCA9ACC93D0F1C79BF35974B96B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
Manifest number:          0851
Signing time:             Tue 07 May 2024 22:03:05 +0000
Manifest this update:     Tue 07 May 2024 22:03:05 +0000
Manifest next update:     Wed 08 May 2024 22:03:05 +0000
Files and hashes:         1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: /G/wtJ6pevc7d3n5g/YiMazx63dO3shO+8hMVlf8p3U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:14:ec:ca:9a:cc:93:d0:f1:c7:9b:f3:59:74:b9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
        Validity
            Not Before: May  7 22:03:05 2024 GMT
            Not After : May  8 22:03:05 2024 GMT
        Subject: CN=3a198d73dae00dabc09465ea0c3b738b192f2677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:b4:0a:5f:a0:b4:5e:94:5c:a8:d3:7d:a4:
                    de:10:63:3a:2e:f6:5c:df:2c:92:14:be:6c:40:80:
                    ff:13:cd:04:1b:34:9f:10:58:39:cb:ac:b5:bf:85:
                    1e:e0:d7:48:f4:8c:e3:2d:66:17:58:fe:96:22:8c:
                    35:8d:48:16:59:47:4f:7b:4a:ed:ef:b4:70:cc:eb:
                    8d:a7:c3:e7:69:78:21:ab:59:c0:b6:55:78:9f:66:
                    bf:50:8f:c5:1f:0f:63:17:0c:25:11:21:ee:51:fe:
                    5b:a6:b7:b7:e7:a6:8c:2b:8a:f5:b3:e5:48:9d:a4:
                    a9:16:cb:cc:80:0d:d0:90:68:2b:0f:77:3a:01:a1:
                    3d:58:b2:8b:e9:6e:f0:97:77:07:ca:c0:27:dc:b9:
                    22:82:58:90:5e:b0:cc:a7:c2:91:94:0a:42:f3:50:
                    91:b5:4a:04:1d:74:af:98:8e:54:b6:d9:e0:9a:7a:
                    77:89:ec:78:5b:1b:ff:07:be:35:30:ca:a0:35:b3:
                    a4:1e:70:58:27:6c:e4:9c:85:29:7a:34:ea:5c:54:
                    25:4f:d4:92:75:29:62:3d:fe:34:df:30:e4:f1:dd:
                    5c:c6:cb:86:30:a9:3e:7e:99:7f:88:de:a3:a7:17:
                    86:37:98:c3:23:05:97:3d:2d:15:6e:ea:a3:27:41:
                    ca:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:19:8D:73:DA:E0:0D:AB:C0:94:65:EA:0C:3B:73:8B:19:2F:26:77
            X509v3 Authority Key Identifier:
                keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:db:42:79:49:aa:cd:59:d6:94:46:01:4c:3e:bc:49:4f:8e:
         46:6f:c1:3e:33:ed:2e:11:4d:82:f3:55:23:37:0f:9e:fc:37:
         57:25:19:45:9a:af:2a:51:1e:bd:1b:b9:4f:3f:e8:40:16:48:
         d2:fe:82:5c:56:fb:0b:ef:0e:07:bb:e6:cf:8a:91:d7:57:b6:
         dd:07:5d:03:36:5f:0d:4a:ff:fb:53:be:42:83:dd:8d:27:ad:
         ca:2e:b8:ea:cc:cf:e5:1d:ad:7c:48:6b:93:6a:45:ee:24:e7:
         25:ea:12:8b:01:04:bc:82:ac:b0:f6:9c:e3:31:92:c8:ea:ef:
         97:a8:59:b1:26:f0:7b:90:d7:4b:a5:e1:12:bf:8c:82:1c:1c:
         9b:96:56:af:46:4e:c7:1d:0f:9e:d8:ed:bf:44:10:ed:53:60:
         8b:41:0d:cc:8c:ff:4a:41:47:19:04:47:97:58:e5:1c:c2:59:
         80:38:ee:c6:cd:31:84:4c:d0:87:e6:bc:52:d1:22:4a:7d:38:
         36:9d:98:28:2e:8a:4a:16:21:96:68:d4:65:a9:1d:a5:87:7e:
         7e:5e:e1:4b:da:60:6a:40:ce:0f:8a:56:bd:90:03:e1:be:54:
         84:1e:02:0e:fb:ef:99:48:c2:4d:e6:9f:0e:b7:16:60:9a:47:
         6a:5a:08:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:27:54 2024 by rpki-client on console-ams.rpki-client.org