Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File:                     Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier:          UvmmptebTBIF917YhH9YwihPiAqv4yO0V5QrsGPgxu4=
Subject key identifier:   93:98:ED:E3:CB:54:E5:3F:96:A2:BB:CB:8D:08:8F:2F:B1:56:9D:D2
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer:       /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial:       018F155951CDED6E62AE9F259383FACBD086
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number:          1139
Signing time:             Thu 25 Apr 2024 13:02:06 +0000
Manifest this update:     Thu 25 Apr 2024 13:02:06 +0000
Manifest next update:     Fri 26 Apr 2024 13:02:06 +0000
Files and hashes:         1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: cDkBX3j+VZtr4YOMoB4ZWlvAnFbZRYorMGOO9EHUfpg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 13:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:15:59:51:cd:ed:6e:62:ae:9f:25:93:83:fa:cb:d0:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
        Validity
            Not Before: Apr 25 13:02:06 2024 GMT
            Not After : Apr 26 13:02:06 2024 GMT
        Subject: CN=9398ede3cb54e53f96a2bbcb8d088f2fb1569dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:32:00:75:6f:6b:32:42:ca:8f:8b:ae:e7:
                    56:cc:1e:be:1f:92:df:38:c7:7f:67:45:04:93:52:
                    ee:16:d6:c0:d4:91:8d:a4:12:fe:75:60:18:13:ce:
                    44:0e:5a:ce:77:aa:62:dd:21:09:b7:d8:8c:f8:9d:
                    e4:37:ee:36:ef:5d:76:1c:86:b9:02:ca:26:8c:d9:
                    67:a0:71:8a:d0:77:c8:f4:40:e7:14:36:82:61:df:
                    dc:c0:dc:53:78:d0:a5:35:74:ae:fd:15:b1:b2:26:
                    dc:f1:cf:5c:ba:6d:f9:d9:23:f4:65:03:91:4b:b4:
                    6d:73:62:36:9c:f7:dc:a7:13:fe:8f:6a:a6:5c:9f:
                    43:e6:e7:b5:72:49:db:f6:de:78:0e:34:05:4c:9b:
                    b3:70:7f:fc:0f:3b:34:bd:cf:d6:58:81:7a:87:10:
                    b6:5e:bd:0f:94:6d:f1:38:53:5d:e4:5b:68:4b:cc:
                    1a:f8:b9:86:d3:8e:ed:6f:f8:e5:dc:4e:58:a8:53:
                    31:7c:8c:08:d9:89:cb:fb:e3:50:d4:43:9d:d6:0f:
                    95:e6:6b:0d:44:b3:1c:ea:70:ee:f0:f9:21:a8:63:
                    8b:61:c7:e6:13:08:4f:ff:a7:68:79:89:21:a4:0d:
                    21:ab:21:64:3c:e2:7b:64:4d:3d:57:46:a5:01:1c:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:98:ED:E3:CB:54:E5:3F:96:A2:BB:CB:8D:08:8F:2F:B1:56:9D:D2
            X509v3 Authority Key Identifier:
                keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1a:3f:13:07:c8:94:d1:be:70:4f:ee:fa:66:2c:31:71:c8:
         3e:e8:66:49:57:60:db:c5:f1:5a:82:0b:0d:6c:83:6c:53:97:
         69:a2:fb:27:5f:51:20:43:b3:11:84:25:ef:f1:9a:77:eb:c1:
         de:25:64:f4:36:c2:8c:fe:df:b1:9f:4b:a9:a4:11:dd:24:20:
         eb:5c:c5:04:d1:1e:57:7f:d8:a8:bc:75:e2:9e:8c:9a:38:42:
         bd:c1:d7:5d:53:dc:d7:a3:30:97:da:14:01:b6:ce:73:be:42:
         63:b1:34:a2:b9:d5:40:b0:22:82:c2:bd:ce:cd:93:62:26:b4:
         5a:d9:f8:37:09:d1:c5:b4:a9:d1:fa:f2:2a:23:85:34:0f:44:
         65:ca:c8:68:ad:fd:37:bb:3e:c6:23:1c:37:7e:0e:fb:a9:e6:
         cd:ea:51:b8:48:00:55:f7:97:93:12:b9:c3:9f:32:33:6d:b6:
         0c:6f:7d:06:9a:6c:46:b7:d4:e6:27:30:16:89:6b:1a:2b:92:
         d3:bc:8a:e7:9a:39:1d:83:f2:c8:f8:33:9a:fe:d2:9a:f5:4b:
         ef:58:ef:31:c7:c1:cb:61:69:8f:dc:06:86:07:7a:d6:09:b7:
         fe:22:79:05:9d:5b:68:82:0d:10:28:63:4e:52:9f:1c:ed:56:
         9b:c5:1f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:49:22 2024 by rpki-client on console-fra.rpki-client.org