Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
File:                     mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft (raw, json)
Hash identifier:          3N4yfHykjkyi4ahi2Xis3anHyJzHqg1l8bZucHqeXfQ=
Subject key identifier:   A9:0A:4C:38:6D:2B:D3:F2:72:41:5D:0E:70:8B:C0:E7:79:74:94:AE
Authority key identifier: 9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
Certificate issuer:       /CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Certificate serial:       018F874945B6703F72650BA9BB18FA2D7C4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
Manifest number:          0C1A
Signing time:             Fri 17 May 2024 16:01:17 +0000
Manifest this update:     Fri 17 May 2024 16:01:17 +0000
Manifest next update:     Sat 18 May 2024 16:01:17 +0000
Files and hashes:         1: mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl (hash: J7UEHcpzZ/0XlgI90yVkHizAgiErvP6v3E/djGotwVE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:45:b6:70:3f:72:65:0b:a9:bb:18:fa:2d:7c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
        Validity
            Not Before: May 17 16:01:17 2024 GMT
            Not After : May 18 16:01:17 2024 GMT
        Subject: CN=a90a4c386d2bd3f272415d0e708bc0e7797494ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:af:2d:84:ef:ee:f4:cf:f6:17:a2:34:3a:
                    9d:bd:c5:a2:ad:ac:a6:56:2c:4c:e8:ba:7d:da:a6:
                    ec:b8:c2:d7:71:a5:d9:e7:80:fe:68:3f:c9:65:83:
                    17:63:32:73:00:0f:2f:55:55:75:26:3a:35:a1:fd:
                    00:16:f6:79:d8:2b:17:53:85:f5:b3:1e:f9:e6:f8:
                    f6:4b:7b:1a:fe:05:bd:f4:5e:c2:4a:50:6d:b8:9e:
                    05:8b:0b:8a:ca:91:ac:21:1b:00:40:1d:53:46:a9:
                    d3:d1:72:37:00:50:b6:39:1f:e4:bb:3c:86:b3:6a:
                    7f:2a:d5:22:f9:b5:9d:51:63:db:20:50:5c:1a:c4:
                    08:f8:92:b0:c9:15:1b:cd:35:de:ca:c4:97:49:47:
                    ff:a9:65:bf:a3:96:43:8d:be:01:4e:52:55:b2:89:
                    5d:3b:86:f5:43:c4:51:16:68:4b:7b:28:74:dd:c7:
                    21:dd:cf:f7:eb:f7:8e:9d:87:75:14:d9:0d:a6:3a:
                    9d:97:10:35:93:44:f2:14:fc:a1:0a:76:ba:e8:68:
                    e3:11:82:87:48:af:2a:73:05:27:00:16:93:03:c6:
                    b1:3d:1f:fb:eb:d1:4d:2a:65:c5:df:9d:c4:f5:19:
                    31:6b:76:51:c4:17:35:50:96:1f:50:e2:96:fd:ce:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0A:4C:38:6D:2B:D3:F2:72:41:5D:0E:70:8B:C0:E7:79:74:94:AE
            X509v3 Authority Key Identifier:
                keyid:9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8b:aa:f4:a0:92:19:2b:e9:8f:e7:f7:3f:e2:85:02:ac:0f:
         36:63:40:28:02:f9:dd:72:93:9c:5c:2a:e3:88:8d:9b:49:52:
         ae:a7:ff:2c:52:ee:9b:81:fa:6a:e2:a1:2a:a0:86:ad:84:bb:
         80:f6:04:66:62:f3:1e:98:90:6a:5e:63:f6:b3:6c:3d:4c:1e:
         42:b0:0a:b2:9b:52:0c:f1:45:88:21:51:8f:41:19:72:e9:d2:
         d3:49:38:ef:b9:50:89:bd:10:a0:d6:4d:ea:52:20:35:c1:09:
         3d:fc:d4:d8:e9:59:2e:b9:62:07:ce:db:4c:fb:e9:1f:0c:71:
         b6:33:d8:ed:30:05:5b:62:96:b7:9c:66:54:15:64:b0:b0:2e:
         78:54:ee:20:7e:4b:f3:01:97:40:3d:39:34:8b:55:85:17:70:
         30:b5:70:7b:66:50:19:11:28:56:34:d4:1a:e1:26:f4:01:1a:
         a1:fb:87:91:a0:45:27:c8:d8:b5:ca:99:0e:4c:a8:ef:0a:6e:
         86:6b:2c:0b:38:5a:7f:54:19:c7:4c:d8:d6:35:71:69:87:8c:
         cf:52:a3:0c:1c:38:08:a1:be:7c:80:73:c7:a3:34:43:e9:85:
         07:de:41:22:6a:84:9d:45:db:b2:38:16:18:f0:91:56:98:97:
         7d:a5:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:57:48 2024 by rpki-client on console-ams.rpki-client.org