Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
File:                     TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json)
Hash identifier:          nukGgsRC2eKiBs7uasLpBczMdzWFcFNQprsgGKNOKjY=
Subject key identifier:   16:BF:10:E0:F5:07:1D:6D:DA:D0:69:20:26:9E:06:14:98:07:01:05
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Certificate issuer:       /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial:       01901BFCE38F07171C932F13D16D7BDCB7A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 13:01:16 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:16 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:16 +0000
Files and hashes:         1: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: x8Yar/IR1RQyVjNB0t4Po4d6RfDQBbvDT1KVGGoVV98=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:e3:8f:07:17:1c:93:2f:13:d1:6d:7b:dc:b7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
        Validity
            Not Before: Jun 15 13:01:16 2024 GMT
            Not After : Jun 16 13:01:16 2024 GMT
        Subject: CN=16bf10e0f5071d6ddad06920269e061498070105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:92:18:60:e4:07:2c:bd:72:f9:3d:ad:38:
                    18:26:a4:db:85:bf:0d:e8:ee:0e:10:08:4d:e6:fd:
                    a3:be:f8:05:9f:06:aa:0a:75:b8:cd:21:e2:22:9f:
                    d4:6a:99:24:ba:3a:d3:8c:7c:52:7f:49:66:29:c8:
                    c0:cb:09:ac:8e:7a:34:fc:2e:3f:a6:3d:24:d1:69:
                    f8:25:f3:9f:2c:d3:79:cb:cf:fc:02:92:fa:fc:ee:
                    60:90:8c:82:cb:57:15:19:ab:f8:6f:4c:c4:a5:9c:
                    c0:54:9b:2e:14:42:6d:0d:f8:0d:34:27:d0:42:20:
                    64:e2:60:a3:0e:29:f2:0d:8f:fd:31:c3:29:06:a7:
                    dc:80:a4:c4:c0:11:58:61:22:32:65:da:25:12:b5:
                    af:82:56:04:ea:91:7f:86:fc:23:fd:09:e4:fa:26:
                    6d:9e:ad:a7:b7:1f:7f:77:20:36:a0:1e:98:c7:34:
                    c4:27:17:0a:44:f7:5d:bc:b6:53:d1:43:8a:01:ea:
                    ef:e6:2e:93:20:32:24:43:a2:dd:b5:7b:14:b6:d4:
                    3d:49:d8:39:ae:37:a4:ee:af:1e:d9:23:36:d6:89:
                    e0:38:91:7c:be:9f:ef:5c:b4:6d:45:b2:7d:b9:4b:
                    36:5c:5a:d9:73:26:9a:f0:66:4f:2b:77:41:d8:3b:
                    12:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BF:10:E0:F5:07:1D:6D:DA:D0:69:20:26:9E:06:14:98:07:01:05
            X509v3 Authority Key Identifier:
                keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:49:b7:93:b1:61:de:2d:09:13:e1:d1:3f:f4:05:e1:72:0d:
         dc:0a:7e:41:b4:e9:5c:7e:c7:5d:3b:17:e2:0d:a9:c4:66:63:
         08:a5:00:fd:17:cb:4d:23:3a:c5:06:71:fc:7b:5d:3a:67:a1:
         b8:49:ae:ca:e4:a0:90:3b:33:4b:a9:90:4b:e9:ab:5b:dc:22:
         82:b2:08:d7:11:11:af:25:e5:d0:8f:5a:94:a2:bf:fb:41:f5:
         d4:4d:6c:3d:e6:81:af:ff:52:e0:52:ce:3a:f6:e4:e4:a2:22:
         a9:20:31:f7:4d:26:50:a7:a2:35:14:34:18:c8:35:c5:f3:28:
         97:47:11:84:60:72:3d:44:a2:d1:f8:2e:a9:04:1a:10:2d:0a:
         12:a4:7e:65:3b:a6:4f:31:f5:ee:45:f2:01:16:12:3b:38:ba:
         4c:0b:4e:23:56:3a:77:48:96:97:9a:82:90:c3:8b:9b:88:25:
         f7:77:20:8b:bd:77:74:8f:9d:31:ef:b4:59:f8:87:d8:b4:0e:
         1b:85:b8:22:26:f7:6d:d4:46:0f:fe:ae:22:21:4c:28:0c:48:
         7b:32:53:37:60:17:53:4a:d8:6c:a9:f1:51:e8:96:9f:78:b5:
         31:65:2e:46:fa:96:96:40:c2:12:22:c2:c4:24:fd:07:e6:17:
         f8:7b:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:55:01 2024 by rpki-client on console-ams.rpki-client.org