Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
File:                     w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json)
Hash identifier:          Icgbi3iuVxdfR4lUB4blTv1IIS2R2h5AR2wJn96fi8U=
Subject key identifier:   BA:9B:1F:0A:1D:48:A5:F8:9D:63:2D:7A:E9:87:42:47:8B:4B:F3:16
Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Certificate issuer:       /CN=c37cd79543f1a77299d069aa36151854530dd862
Certificate serial:       018F874A4FED7F8AE1B25BE488DB5BC3CD9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
Manifest number:          02CF
Signing time:             Fri 17 May 2024 16:02:25 +0000
Manifest this update:     Fri 17 May 2024 16:02:25 +0000
Manifest next update:     Sat 18 May 2024 16:02:25 +0000
Files and hashes:         1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: tmoduMkFf9m/guRr6RGQn78VjT4QMhAII4qdlR0XMoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:4f:ed:7f:8a:e1:b2:5b:e4:88:db:5b:c3:cd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862
        Validity
            Not Before: May 17 16:02:25 2024 GMT
            Not After : May 18 16:02:25 2024 GMT
        Subject: CN=ba9b1f0a1d48a5f89d632d7ae98742478b4bf316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:05:db:9b:73:ce:b6:fc:14:6a:f1:d1:f6:6c:
                    27:f1:13:4c:81:8a:c8:b1:c0:8a:75:92:09:8d:4f:
                    ae:5a:16:24:a0:84:a2:6f:96:db:15:1e:6a:cd:b7:
                    db:c5:21:37:fc:ce:2c:8b:01:a6:f9:f9:13:77:0d:
                    ac:e8:16:ae:b8:56:1a:ce:db:d6:ed:53:2f:a9:05:
                    f3:16:fa:ee:0e:1d:57:53:25:0b:c3:73:44:6a:04:
                    5d:44:b1:f7:df:dc:5f:60:04:24:e2:37:1a:c8:30:
                    d9:d8:ea:6e:8f:4c:fa:1b:6f:2a:16:cd:c6:87:dd:
                    a2:ce:30:e8:a0:6b:46:b8:25:16:c7:14:c2:ff:61:
                    bb:7b:a9:a6:05:c8:57:93:ac:7c:40:fd:c3:29:cc:
                    be:eb:cd:f3:09:15:be:79:6e:85:a1:ad:d3:25:ce:
                    a9:f6:56:35:15:45:9f:51:21:e9:56:89:27:99:7f:
                    5f:68:72:9d:d3:85:08:bb:75:a4:d8:29:97:30:88:
                    38:a3:a6:b2:31:b8:de:47:af:a0:44:3e:db:29:f6:
                    cb:80:09:26:3b:ec:d8:7d:18:11:eb:77:04:56:34:
                    66:0e:83:e9:bc:3a:f2:d1:1d:fa:65:65:a3:4a:40:
                    6c:09:e5:94:2d:0e:b9:d9:83:4b:fa:1a:bc:38:96:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9B:1F:0A:1D:48:A5:F8:9D:63:2D:7A:E9:87:42:47:8B:4B:F3:16
            X509v3 Authority Key Identifier:
                keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:75:e4:3b:d6:a9:89:25:69:5b:61:92:5d:e4:e2:f3:b3:2d:
         64:4e:a7:8b:0a:b3:a3:91:ac:8d:e4:91:de:cf:a2:47:64:7e:
         67:4f:77:78:45:cc:e3:ae:9f:62:ab:92:2a:ed:e4:8f:c6:c5:
         33:4e:6d:e1:fc:94:a7:13:3d:0c:7e:3f:54:f6:8f:80:3c:10:
         8b:21:06:6a:9d:58:20:55:de:fc:d9:e9:60:e3:b7:e0:3c:88:
         06:b6:3f:84:6f:77:d6:38:7d:54:55:e2:78:55:97:77:d6:eb:
         dc:ad:13:4b:84:9a:3c:d9:8e:d4:04:c8:ca:dc:93:3a:18:be:
         52:34:a7:74:01:0f:dc:5b:ca:6b:c3:e8:8f:b5:fd:66:47:22:
         16:1e:95:b8:f8:0c:7c:e4:f9:9d:2a:2c:a8:eb:2f:77:dd:74:
         cc:ec:62:fa:8c:fb:5f:52:f2:e0:8b:ea:87:35:26:b0:ba:bc:
         b3:93:70:35:18:52:b8:33:13:c2:81:76:ea:58:20:cd:da:3b:
         c2:51:62:6d:68:3c:6d:64:b3:0f:20:26:ab:52:cb:74:d1:59:
         bd:a7:6a:b9:46:67:c9:fc:ab:f1:30:03:d0:73:cd:0b:8c:38:
         ff:53:6e:13:90:5c:d9:f0:03:d4:85:a5:79:8d:55:6f:d4:65:
         9d:84:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:58:00 2024 by rpki-client on console-ams.rpki-client.org