Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/44c045-f2e4-4e05-92d5-aadc69a5a04a/1/m1xNFQ_EcrGHcOCB_82OCXQtAGY.mft
File:                     m1xNFQ_EcrGHcOCB_82OCXQtAGY.mft (raw, json)
Hash identifier:          0t0ECEHyDsEdZ9xgy1h4zWIKmHkFhqoQ5bPEMcP1Ax8=
Subject key identifier:   F4:BA:DF:83:23:44:2F:05:AA:AC:64:BA:62:BA:4F:D3:E5:49:05:46
Authority key identifier: 9B:5C:4D:15:0F:C4:72:B1:87:70:E0:81:FF:CD:8E:09:74:2D:00:66
Certificate issuer:       /CN=9b5c4d150fc472b18770e081ffcd8e09742d0066
Certificate serial:       018F8749216BFD6D6F34A8528A4FEE2A5265
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1xNFQ_EcrGHcOCB_82OCXQtAGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/44c045-f2e4-4e05-92d5-aadc69a5a04a/1/m1xNFQ_EcrGHcOCB_82OCXQtAGY.mft
Manifest number:          0D97
Signing time:             Fri 17 May 2024 16:01:07 +0000
Manifest this update:     Fri 17 May 2024 16:01:07 +0000
Manifest next update:     Sat 18 May 2024 16:01:07 +0000
Files and hashes:         1: m1xNFQ_EcrGHcOCB_82OCXQtAGY.crl (hash: F1WF2LIHlqKzLxHy+Dr50MDTRpK5f01wg0lN4TtABQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/44c045-f2e4-4e05-92d5-aadc69a5a04a/1/m1xNFQ_EcrGHcOCB_82OCXQtAGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/44c045-f2e4-4e05-92d5-aadc69a5a04a/1/m1xNFQ_EcrGHcOCB_82OCXQtAGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1xNFQ_EcrGHcOCB_82OCXQtAGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:21:6b:fd:6d:6f:34:a8:52:8a:4f:ee:2a:52:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5c4d150fc472b18770e081ffcd8e09742d0066
        Validity
            Not Before: May 17 16:01:07 2024 GMT
            Not After : May 18 16:01:07 2024 GMT
        Subject: CN=f4badf8323442f05aaac64ba62ba4fd3e5490546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:4d:5a:94:24:30:8e:0f:d1:6e:7c:db:93:
                    30:eb:42:0c:df:ef:a5:ac:4e:59:d4:3e:60:06:ee:
                    c8:ac:2c:cb:d3:d7:d4:71:09:e4:60:d4:94:6d:a6:
                    1d:87:c3:30:8d:2a:5f:be:bc:e4:2d:2b:28:39:05:
                    13:95:56:dc:f2:b3:47:73:cd:f3:01:01:52:24:67:
                    9c:67:a0:c8:22:ec:03:83:69:f7:12:ff:6f:b4:22:
                    52:c1:fe:eb:02:e6:6c:bf:d6:0d:75:6f:bd:45:a1:
                    18:b9:e5:2a:6d:0d:bf:8d:cb:94:71:4c:fa:58:6d:
                    e3:4d:8f:47:a1:e4:93:0b:75:12:ff:4a:76:f1:e7:
                    ca:7a:ee:7f:5b:52:c7:09:18:f8:b6:e8:6e:59:0e:
                    40:52:e4:14:58:02:d1:0b:d5:7e:8e:aa:7b:19:d8:
                    c2:50:f2:69:15:c2:c7:4c:eb:64:eb:79:f2:0d:52:
                    79:02:5a:a5:20:28:ca:fc:5c:70:d6:f3:8f:17:94:
                    e5:29:93:fa:cd:41:69:00:86:22:b4:95:fd:6f:2e:
                    1e:04:4f:a9:67:8e:04:07:05:7b:24:e5:db:b6:81:
                    26:24:ea:3d:29:07:f9:7c:d5:14:48:e9:09:5f:75:
                    af:14:1a:0b:ff:6a:fe:81:d2:a1:eb:31:49:e6:5d:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BA:DF:83:23:44:2F:05:AA:AC:64:BA:62:BA:4F:D3:E5:49:05:46
            X509v3 Authority Key Identifier:
                keyid:9B:5C:4D:15:0F:C4:72:B1:87:70:E0:81:FF:CD:8E:09:74:2D:00:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1xNFQ_EcrGHcOCB_82OCXQtAGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/44c045-f2e4-4e05-92d5-aadc69a5a04a/1/m1xNFQ_EcrGHcOCB_82OCXQtAGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/44c045-f2e4-4e05-92d5-aadc69a5a04a/1/m1xNFQ_EcrGHcOCB_82OCXQtAGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:e5:6b:fb:7b:43:ba:37:9a:8b:24:5d:54:2d:59:36:eb:
         df:29:54:9a:23:ac:c4:4b:5c:8a:92:ea:da:4e:9d:1d:4f:d9:
         3a:5a:54:1f:ce:20:e6:5a:35:37:56:92:e4:fb:88:8a:13:5a:
         9e:3a:2a:5f:44:d0:3c:8c:ec:15:bc:26:3d:05:82:fb:b2:3b:
         46:db:bd:e6:38:75:c1:93:94:96:9e:c4:c4:4b:a5:98:af:c9:
         0d:68:3c:ee:11:24:99:ca:80:36:6f:19:7e:b1:c3:e5:f4:78:
         38:22:1b:ca:87:90:f2:8f:82:c2:ce:17:f3:bc:8b:52:04:8c:
         c1:49:38:c8:73:f6:63:c6:82:9b:ed:78:5d:7e:36:b2:21:43:
         8b:e0:f9:ac:46:e0:a5:43:fb:dd:40:a6:36:c8:31:6b:51:f7:
         c2:d3:8c:64:dc:f8:1c:58:2b:64:bb:30:78:e3:e0:43:f6:6e:
         f3:40:fe:8e:38:6f:01:b3:ff:46:a4:05:40:b3:b1:b4:cf:3f:
         68:70:81:b8:53:61:9a:20:70:44:98:f7:dd:df:81:04:10:5d:
         57:d3:77:8d:3e:77:ca:26:dd:c1:1a:ae:9e:0d:df:37:47:3b:
         15:5b:11:f7:22:00:c6:89:92:34:e0:a0:09:9e:54:34:33:84:
         40:73:9f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:30 2024 by rpki-client on console-ams.rpki-client.org