Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/CbUQKfVz_JnCo9S5ia8UXvITu8Y.mft
File:                     CbUQKfVz_JnCo9S5ia8UXvITu8Y.mft (raw, json)
Hash identifier:          lmAKBQCkSjXOppXLCwZ6DBKbpq8MplR3UEiUmEB7UOw=
Subject key identifier:   E6:B4:27:E9:EE:CE:72:CB:06:DF:A4:60:C5:FD:A7:9D:37:11:3A:A7
Authority key identifier: 09:B5:10:29:F5:73:FC:99:C2:A3:D4:B9:89:AF:14:5E:F2:13:BB:C6
Certificate issuer:       /CN=09b51029f573fc99c2a3d4b989af145ef213bbc6
Certificate serial:       018F3C662CA2841C53B99C189E48B0FE8FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbUQKfVz_JnCo9S5ia8UXvITu8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/CbUQKfVz_JnCo9S5ia8UXvITu8Y.mft
Manifest number:          0DDA
Signing time:             Fri 03 May 2024 03:01:20 +0000
Manifest this update:     Fri 03 May 2024 03:01:20 +0000
Manifest next update:     Sat 04 May 2024 03:01:20 +0000
Files and hashes:         1: CbUQKfVz_JnCo9S5ia8UXvITu8Y.crl (hash: gln1AnOUBPg6n88ZO3j6fSz01a97hNA41HcqIiSVJ2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/CbUQKfVz_JnCo9S5ia8UXvITu8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/CbUQKfVz_JnCo9S5ia8UXvITu8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CbUQKfVz_JnCo9S5ia8UXvITu8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:66:2c:a2:84:1c:53:b9:9c:18:9e:48:b0:fe:8f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b51029f573fc99c2a3d4b989af145ef213bbc6
        Validity
            Not Before: May  3 03:01:20 2024 GMT
            Not After : May  4 03:01:20 2024 GMT
        Subject: CN=e6b427e9eece72cb06dfa460c5fda79d37113aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:bc:66:a2:c4:29:a2:0e:b4:20:63:95:4b:
                    0c:bd:67:a0:b1:f7:3b:b9:47:ed:26:f2:95:71:e1:
                    78:62:0a:a4:d7:d6:26:3d:2e:a1:3a:40:3b:66:26:
                    ae:11:3c:60:23:5f:32:01:d1:6a:3d:cc:3b:76:a6:
                    26:83:f5:97:1d:b4:89:58:5f:01:86:52:01:cc:8f:
                    f0:09:92:63:97:71:8f:24:d3:4e:15:c0:0e:ae:a8:
                    aa:16:43:8f:b4:7f:e0:39:0c:3a:41:bd:1c:8b:c3:
                    8e:52:99:b2:2a:33:45:f2:3f:fe:c9:48:29:54:c8:
                    96:b5:9e:da:1b:e8:41:1f:55:02:84:26:ac:a5:e5:
                    9a:9b:c9:6f:b3:aa:a5:28:7d:68:5d:95:24:29:e6:
                    f5:e0:57:eb:79:4c:f1:20:2c:43:aa:e3:06:c0:33:
                    bf:52:45:33:c6:24:f2:dd:7a:bd:45:a4:ff:7f:aa:
                    2c:90:45:20:e1:aa:f3:1b:91:0f:bc:9e:90:2f:65:
                    6f:74:89:fa:c5:30:6c:88:cf:6d:89:25:98:bc:1c:
                    cc:5e:c4:2f:69:16:5f:88:e0:2e:e3:a2:aa:51:33:
                    56:37:86:ba:76:8c:2c:3d:b1:f8:f1:44:1a:cb:af:
                    59:4e:f9:d6:60:e1:b4:0e:09:28:8a:a9:49:03:1e:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B4:27:E9:EE:CE:72:CB:06:DF:A4:60:C5:FD:A7:9D:37:11:3A:A7
            X509v3 Authority Key Identifier:
                keyid:09:B5:10:29:F5:73:FC:99:C2:A3:D4:B9:89:AF:14:5E:F2:13:BB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbUQKfVz_JnCo9S5ia8UXvITu8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/CbUQKfVz_JnCo9S5ia8UXvITu8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/CbUQKfVz_JnCo9S5ia8UXvITu8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ae:4b:ce:ed:7e:a9:4a:de:7e:32:4e:cd:ed:54:69:da:64:
         a1:68:06:b5:8f:13:73:43:96:f9:c1:9a:40:d8:70:33:30:8e:
         90:9f:b1:79:5c:15:47:ea:2a:35:3a:36:00:af:da:c2:80:b9:
         0c:15:42:c9:64:c1:01:b0:35:1b:58:74:df:8b:58:00:16:f5:
         01:0e:b1:ed:0f:8d:02:47:ad:21:93:17:6f:fb:d7:c4:6a:4a:
         8c:77:c2:af:ef:9b:a6:d5:30:87:bd:0f:3a:65:14:12:8d:66:
         11:4f:c4:3c:ba:19:57:d8:11:f2:a8:d6:51:4d:d2:c5:93:6a:
         61:41:78:73:d3:05:89:9c:fa:a2:86:f4:1e:4a:56:44:7c:00:
         3e:9e:90:f0:4b:1a:23:15:d0:14:3f:e0:df:99:20:8c:b3:42:
         de:ba:7a:f9:13:79:2e:78:c8:94:df:f8:06:7c:ff:f0:11:97:
         ae:6d:e0:95:28:b1:95:9d:42:f6:e1:4c:2c:f6:90:f3:4e:eb:
         fc:f9:f0:10:48:3a:fc:e4:89:6d:58:9c:37:f8:e4:9c:50:9f:
         a6:78:99:de:89:fa:06:6f:00:72:8e:87:b1:2f:d4:5d:58:70:
         27:2a:db:cc:87:07:dd:c6:48:e5:a0:c2:a0:3d:bd:f1:e6:3f:
         63:18:d8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:29:10 2024 by rpki-client on console-ams.rpki-client.org