Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File:                     8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier:          5EbmVWRLAVFUNEEHssllJ2z/sl2qnMSFt8wCbKRbybs=
Subject key identifier:   D6:C6:A9:5D:0F:3B:6E:24:A6:F6:41:E7:20:AF:30:42:48:2D:CB:A8
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer:       /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial:       018F4B6D07EA9128DF2093354AA2721D723C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number:          1156
Signing time:             Mon 06 May 2024 01:03:07 +0000
Manifest this update:     Mon 06 May 2024 01:03:07 +0000
Manifest next update:     Tue 07 May 2024 01:03:07 +0000
Files and hashes:         1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: r5Lpre7Nhq+8ByZHF6MrZtxqkmusz2Y1Cg63ln4NOB8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:07:ea:91:28:df:20:93:35:4a:a2:72:1d:72:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
        Validity
            Not Before: May  6 01:03:07 2024 GMT
            Not After : May  7 01:03:07 2024 GMT
        Subject: CN=d6c6a95d0f3b6e24a6f641e720af3042482dcba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:d9:42:d6:49:26:5f:b3:3c:60:4f:29:66:
                    5a:5e:24:fa:60:15:42:4c:84:85:1f:04:94:a8:18:
                    8d:09:db:51:1d:dd:68:67:05:61:36:9e:1d:a6:fa:
                    ef:17:f1:b0:ed:f0:7a:83:02:d6:4a:9a:1d:1f:c0:
                    23:d3:e4:3e:64:36:42:e8:8a:2d:b4:5f:b9:ab:d8:
                    90:8f:24:6f:1c:9d:6a:72:7e:40:b7:74:41:c8:09:
                    da:d6:c3:a7:c8:e8:54:55:14:47:64:d0:44:f7:32:
                    7d:ce:f8:24:79:a7:3b:79:c0:8e:0a:38:bd:50:d7:
                    4a:5b:2a:91:32:3d:a6:a6:f4:d7:52:88:d8:f0:ee:
                    a3:39:6c:ed:96:e5:1e:5a:dc:5d:1a:b1:dc:ec:cb:
                    51:9a:7d:4e:fe:2f:74:eb:4e:90:be:7e:ac:b2:4c:
                    8f:d6:2a:47:73:49:72:d4:6f:41:c2:16:d7:ad:5a:
                    1c:a0:c3:b1:8b:04:cc:fd:0c:a1:17:56:41:ff:8c:
                    d9:95:8a:dc:c4:41:2a:98:bb:72:6a:73:17:ed:63:
                    2e:04:47:e3:7f:f5:e0:e1:43:6b:23:f7:11:b7:3c:
                    be:54:7c:70:0a:45:88:ec:45:38:6a:b9:76:22:6c:
                    fc:9e:9f:6b:34:31:86:c6:7e:3c:f5:f6:eb:05:24:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C6:A9:5D:0F:3B:6E:24:A6:F6:41:E7:20:AF:30:42:48:2D:CB:A8
            X509v3 Authority Key Identifier:
                keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:37:bd:4d:4f:45:96:89:8b:a0:e2:8d:b4:46:6a:d0:1d:0d:
         c4:e5:6a:f0:f8:27:05:be:92:92:65:2e:d0:8b:a4:23:52:79:
         8f:7a:e2:22:0d:70:a3:ae:63:a0:98:28:2c:60:1a:cd:69:2e:
         0c:16:a0:22:2b:46:b2:33:bb:21:cf:49:0a:9c:12:0e:fa:ec:
         33:73:02:17:2f:1f:8a:66:c9:ff:ee:6e:95:13:bc:de:89:67:
         7b:ba:1e:fd:52:11:14:47:7d:d0:99:32:9a:ce:81:d6:7c:3d:
         eb:6b:6f:bf:8f:59:0e:55:e7:b3:99:3b:73:25:cd:b8:f7:72:
         7b:c8:13:a2:34:e9:d9:33:0c:81:26:1a:ca:6c:8e:e6:2b:c9:
         dc:05:75:d7:91:c2:ff:fc:df:4e:ae:e2:4e:23:5c:d2:4d:a2:
         4c:a7:d6:01:58:22:c9:d1:88:b7:e6:3d:d9:01:58:04:97:aa:
         6d:9f:ce:6b:9b:d2:be:79:b1:c1:5e:60:f7:c1:15:b3:e4:48:
         f6:ab:50:c0:99:32:45:36:cb:51:08:d5:e1:55:8e:5e:72:1d:
         80:49:c1:af:5a:a4:95:16:04:9d:ff:5b:19:9d:10:97:72:10:
         f2:e6:c4:74:7a:45:ea:e4:38:83:f3:ea:b8:e4:c7:0d:7c:01:
         68:0b:b5:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9LbQfqkSjfIJM1SqJyHXI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2Y3YmVmNTQ3ZDAwMjUzMzhhYTZiNmFlZTdhYTFkYmUx
NGFlMmEwHhcNMjQwNTA2MDEwMzA3WhcNMjQwNTA3MDEwMzA3WjAzMTEwLwYDVQQD
EyhkNmM2YTk1ZDBmM2I2ZTI0YTZmNjQxZTcyMGFmMzA0MjQ4MmRjYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0TZQtZJJl+zPGBPKWZaXiT6YBVC
TISFHwSUqBiNCdtRHd1oZwVhNp4dpvrvF/Gw7fB6gwLWSpodH8Aj0+Q+ZDZC6Iot
tF+5q9iQjyRvHJ1qcn5At3RByAna1sOnyOhUVRRHZNBE9zJ9zvgkeac7ecCOCji9
UNdKWyqRMj2mpvTXUojY8O6jOWztluUeWtxdGrHc7MtRmn1O/i90606Qvn6sskyP
1ipHc0ly1G9BwhbXrVocoMOxiwTM/QyhF1ZB/4zZlYrcxEEqmLtyanMX7WMuBEfj
f/Xg4UNrI/cRtzy+VHxwCkWI7EU4arl2Imz8np9rNDGGxn489fbrBSQ8WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbGqV0PO24kpvZB5yCvMEJILcuoMB8GA1UdIwQY
MBaAFPA/e+9UfQAlM4qmtq7nqh2+FK4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84ODFhNDgtOGFmMy00N2FjLThlYTgt
ZDVjMjc0ZmVmOTY0LzEvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84ODFhNDgtOGFmMy00N2FjLThlYTgtZDVjMjc0ZmVmOTY0
LzEvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFze9TU9F
lomLoOKNtEZq0B0NxOVq8PgnBb6SkmUu0IukI1J5j3riIg1wo65joJgoLGAazWku
DBagIitGsjO7Ic9JCpwSDvrsM3MCFy8fimbJ/+5ulRO83olne7oe/VIRFEd90Jky
ms6B1nw962tvv49ZDlXns5k7cyXNuPdye8gTojTp2TMMgSYaymyO5ivJ3AV115HC
//zfTq7iTiNc0k2iTKfWAVgiydGIt+Y92QFYBJeqbZ/Oa5vSvnmxwV5g98EVs+RI
9qtQwJkyRTbLUQjV4VWOXnIdgEnBr1qklRYEnf9bGZ0Ql3IQ8ubEdHpF6uQ4g/Pq
uOTHDXwBaAu1lA==
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:28 2024 by rpki-client on console-fra.rpki-client.org