Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
File:                     gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json)
Hash identifier:          1X00/JNrRFE7e+B+ELsjLNSCnaQ7IbUo37kbrDCBOTM=
Subject key identifier:   3F:65:22:99:2E:28:2A:4A:9F:DD:D1:83:D1:F0:71:07:5D:E5:2A:7B
Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
Certificate issuer:       /CN=82a494a1dae54873dfa2deb56d031334076ac95b
Certificate serial:       018F87EDA03C282F6FDC17F9EC1792DBF108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
Manifest number:          0323
Signing time:             Fri 17 May 2024 19:00:48 +0000
Manifest this update:     Fri 17 May 2024 19:00:48 +0000
Manifest next update:     Sat 18 May 2024 19:00:48 +0000
Files and hashes:         1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: 2JJxxeeDMJT8xBXVQOTNMH8hrdAH7NtBPV4IlQiYj1U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:a0:3c:28:2f:6f:dc:17:f9:ec:17:92:db:f1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b
        Validity
            Not Before: May 17 19:00:48 2024 GMT
            Not After : May 18 19:00:48 2024 GMT
        Subject: CN=3f6522992e282a4a9fddd183d1f071075de52a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:a8:9c:8e:a9:bb:81:93:b2:cf:a5:5e:47:
                    b4:e6:71:98:ff:6c:09:08:ce:f0:c6:bf:fd:70:4e:
                    0b:b9:13:59:1f:3d:c9:46:4e:de:54:20:b0:f2:6d:
                    36:e1:9a:6b:ac:8e:6a:b5:09:66:2f:d7:73:ea:de:
                    7c:95:7d:11:82:bb:ae:d3:04:d3:78:c6:e0:1d:21:
                    b1:04:62:b3:0f:81:41:c7:98:5c:6f:4b:bd:e1:57:
                    bf:b6:e5:4e:cc:6e:31:58:08:c9:59:91:b7:41:dd:
                    a5:13:35:dd:42:8e:b5:25:11:25:9c:69:5a:05:2d:
                    af:3b:02:91:e9:fe:f5:37:90:55:d9:09:90:68:79:
                    85:c9:3a:e6:5b:b7:a3:59:19:78:d9:43:cb:fd:cd:
                    8c:e0:5f:59:2b:ee:c7:b0:e7:2e:48:92:84:03:1f:
                    bd:73:86:ca:36:5c:77:fa:da:52:25:8d:0d:37:b8:
                    2f:2f:89:18:57:13:14:fa:68:f5:41:3b:69:72:c4:
                    b8:00:33:bc:50:62:92:10:6f:9c:9c:40:f9:27:e3:
                    2d:0f:fa:de:5b:c2:95:46:b0:25:95:dd:b7:75:cd:
                    de:09:86:b1:da:e9:f2:f8:bb:6c:cc:05:2e:27:d6:
                    d1:99:9e:34:e5:6f:90:45:1a:fb:f5:69:55:5c:b4:
                    ff:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:65:22:99:2E:28:2A:4A:9F:DD:D1:83:D1:F0:71:07:5D:E5:2A:7B
            X509v3 Authority Key Identifier:
                keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:64:00:62:a5:91:5f:b4:fb:f9:c6:f9:ca:41:76:8f:d8:
         f7:4a:9a:1e:61:32:45:64:f4:9e:48:1e:c9:26:d3:60:8a:b1:
         4e:56:c2:f6:af:1d:0e:ae:30:e1:b8:50:45:9e:17:1d:3d:24:
         76:4a:12:f7:e3:49:05:e6:32:7a:7a:86:b6:78:e2:f8:0d:f4:
         fe:8d:35:a9:21:c6:58:6a:4d:b2:f5:44:fc:98:ca:41:f2:f0:
         48:aa:c3:52:87:ef:99:d9:b0:06:df:75:88:4b:de:3f:ba:91:
         fc:48:d0:f9:ad:3a:18:e4:00:c1:77:00:b8:3a:d7:77:7b:95:
         1d:61:ea:bb:25:d4:7e:d4:b5:c9:92:9c:e4:9e:b2:65:3e:cc:
         0b:70:85:0e:ac:e4:63:2b:a9:15:a9:4f:7e:55:0b:f5:6d:b4:
         89:c3:5e:86:62:43:8e:9c:52:bf:d3:95:68:a7:08:4f:b3:f5:
         7e:c1:8d:d9:0c:59:46:b1:91:38:c4:ff:4a:5c:d2:fb:1c:19:
         2b:32:ab:c1:20:1b:19:80:5f:bc:d1:8e:39:73:f7:49:8e:b3:
         19:3b:d4:b2:67:1f:2f:4d:f4:4e:15:ef:40:c6:b2:8d:9d:d4:
         96:be:fd:b5:36:4f:e7:bd:6d:84:68:3d:44:08:1a:8d:33:10:
         83:57:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:11 2024 by rpki-client on console-fra.rpki-client.org