Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/T-K83s4GOAT7KsUMEpagOkABBLE.mft
File:                     T-K83s4GOAT7KsUMEpagOkABBLE.mft (raw, json)
Hash identifier:          E/2Kt+v5+zXWyoq3WLFxSW7DH8RIdgNeqkGCoRy2/Co=
Subject key identifier:   1D:7A:16:42:97:DC:80:77:BD:6E:FF:98:11:5E:E0:46:0A:D6:D8:CF
Authority key identifier: 4F:E2:BC:DE:CE:06:38:04:FB:2A:C5:0C:12:96:A0:3A:40:01:04:B1
Certificate issuer:       /CN=4fe2bcdece063804fb2ac50c1296a03a400104b1
Certificate serial:       01901C6A7AFB3521BD6291B750A6444DDCBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T-K83s4GOAT7KsUMEpagOkABBLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/T-K83s4GOAT7KsUMEpagOkABBLE.mft
Manifest number:          042F
Signing time:             Sat 15 Jun 2024 15:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:58 +0000
Files and hashes:         1: T-K83s4GOAT7KsUMEpagOkABBLE.crl (hash: /FcMJMS5V9Spuy6vr8nSYsnHzKnA2m0J5NRBS7lBewk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/T-K83s4GOAT7KsUMEpagOkABBLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/T-K83s4GOAT7KsUMEpagOkABBLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T-K83s4GOAT7KsUMEpagOkABBLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:7a:fb:35:21:bd:62:91:b7:50:a6:44:4d:dc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fe2bcdece063804fb2ac50c1296a03a400104b1
        Validity
            Not Before: Jun 15 15:00:58 2024 GMT
            Not After : Jun 16 15:00:58 2024 GMT
        Subject: CN=1d7a164297dc8077bd6eff98115ee0460ad6d8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:d7:1f:2b:0c:ec:c7:ff:75:43:6d:23:f2:
                    ed:10:da:09:4f:31:a5:89:fc:ca:dc:fa:97:36:09:
                    fd:62:40:b9:ac:37:99:02:4d:1d:be:8e:99:4b:7e:
                    0a:a9:77:9d:d9:36:db:2e:0d:08:ba:07:02:01:33:
                    5b:4a:4a:0b:16:4d:f4:b3:6f:44:5c:ce:ae:64:54:
                    d0:ea:31:3a:51:04:d0:53:ad:49:c7:72:6f:a8:77:
                    70:7d:0c:e3:f9:d9:ea:6e:f1:f8:6b:20:27:9d:79:
                    e9:0a:1c:09:fa:0e:a0:4c:5d:9a:ce:ab:7d:02:50:
                    e7:7e:17:1c:61:ac:ad:43:b1:d5:60:98:ee:ed:54:
                    e3:02:f8:35:5d:11:e5:36:79:0e:16:9d:11:27:a6:
                    f3:c0:60:9b:64:8b:85:e7:7a:e7:7c:6a:4c:3d:75:
                    1e:58:c4:09:eb:cd:49:34:57:8c:98:63:53:d3:16:
                    08:48:71:e0:8a:08:d0:c6:37:a9:1e:1b:3b:4e:26:
                    49:05:61:c7:5f:ca:0a:30:84:fb:27:46:13:d8:0a:
                    b3:a9:9e:a5:96:ef:d4:f7:25:d7:55:1d:57:ac:6d:
                    2d:17:c0:72:ad:73:2f:c7:72:fc:87:92:e4:3f:64:
                    96:f4:79:0a:5b:94:90:0e:1f:b5:0e:4e:3b:50:91:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7A:16:42:97:DC:80:77:BD:6E:FF:98:11:5E:E0:46:0A:D6:D8:CF
            X509v3 Authority Key Identifier:
                keyid:4F:E2:BC:DE:CE:06:38:04:FB:2A:C5:0C:12:96:A0:3A:40:01:04:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-K83s4GOAT7KsUMEpagOkABBLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/T-K83s4GOAT7KsUMEpagOkABBLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/T-K83s4GOAT7KsUMEpagOkABBLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:b2:d0:71:67:1d:6a:63:be:26:d9:01:a2:48:d6:de:79:
         d2:e3:bf:32:8c:4a:73:eb:79:fd:d9:68:fb:5d:78:23:f0:c1:
         e2:35:10:e5:f4:5d:37:87:8b:01:c3:ef:8a:0f:30:3c:cc:59:
         14:39:37:ed:05:40:89:2d:d2:04:05:4e:06:e9:44:68:7d:a2:
         73:f7:b2:13:e5:ff:b1:60:b3:0a:82:74:60:1e:60:23:c0:4f:
         b0:e3:92:50:59:a5:bd:7d:c0:aa:80:bc:89:c2:c5:bd:19:20:
         b0:e0:ad:7a:64:15:2e:fa:5e:1f:8a:ae:ba:2f:70:27:f7:43:
         f4:d2:50:79:5d:d6:9b:f9:89:71:6b:04:0e:f2:e0:dd:2c:28:
         a1:73:04:47:b7:c3:fa:8b:ce:65:5c:10:1a:bf:3a:35:3c:2b:
         14:a5:82:95:42:88:a6:e7:3e:8c:1d:8a:ab:09:65:71:9c:20:
         51:ea:43:b0:2b:1a:38:a6:ae:3c:37:30:2f:3f:5a:2f:4d:3c:
         73:fc:fc:1b:88:b0:c5:4e:c2:c5:ff:ff:ef:9b:8e:70:ff:db:
         31:17:ea:86:ff:94:6e:85:1d:d9:a7:d5:86:6d:12:19:c6:62:
         e3:19:e1:c2:41:ad:78:d4:b2:74:80:06:d8:f2:8b:f1:a2:96:
         f9:34:ef:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:53:56 2024 by rpki-client on console-fra.rpki-client.org