Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
File:                     s8l-xqz0xTcKU8r4I5YxblbkhsY.mft (raw, json)
Hash identifier:          hfSdR1VBFRp7buB+E0KolYYv/sm2wKG3D1GJRI+xzao=
Subject key identifier:   2D:E7:0D:7A:33:2C:95:14:6A:6B:99:E7:D5:0C:F9:46:38:AC:CD:C3
Authority key identifier: B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
Certificate issuer:       /CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Certificate serial:       01901C334533ABD92E1FA9CA4E54EE2D7529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
Manifest number:          018F
Signing time:             Sat 15 Jun 2024 14:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 14:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 14:00:40 +0000
Files and hashes:         1: s8l-xqz0xTcKU8r4I5YxblbkhsY.crl (hash: V6fYm8IVfcKrc/at4ylT1CfAIy8shfUBhE7r+C33cmk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:33:45:33:ab:d9:2e:1f:a9:ca:4e:54:ee:2d:75:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
        Validity
            Not Before: Jun 15 14:00:40 2024 GMT
            Not After : Jun 16 14:00:40 2024 GMT
        Subject: CN=2de70d7a332c95146a6b99e7d50cf94638accdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:da:d9:a8:bc:fb:5b:3f:13:a5:d9:e9:19:1e:
                    c9:72:82:96:25:50:87:74:31:d7:33:1a:2e:34:7a:
                    dc:04:46:b8:86:44:af:9a:41:21:e0:05:86:b7:16:
                    42:06:a6:96:d3:ec:b6:d4:a5:e7:b6:f4:3b:f4:04:
                    23:f3:79:78:c5:49:28:e3:22:03:03:8d:88:a1:f8:
                    e1:d4:e5:19:7e:b7:9d:65:82:b9:b5:82:59:08:b8:
                    b3:5c:3c:92:68:bf:7f:92:43:9a:e3:12:77:7c:37:
                    98:fa:bf:75:f2:b1:7a:79:26:47:54:c3:9b:19:ff:
                    6c:40:cb:83:fb:5e:86:bb:95:1a:64:ba:fb:f7:91:
                    aa:81:36:18:6f:0f:88:35:33:7a:25:0f:7c:8b:35:
                    9a:31:91:68:98:7f:45:e2:32:09:87:75:51:b3:9d:
                    85:64:c6:2a:64:c0:ee:a6:8b:c7:f4:55:d5:82:50:
                    22:49:b3:43:1f:91:92:86:10:95:94:3c:d8:80:43:
                    a5:0c:45:b0:77:6c:e2:13:27:1a:72:6e:0a:6e:b6:
                    03:19:9c:90:db:80:2c:8c:b4:01:6c:bf:a0:5e:f9:
                    2d:e0:08:13:66:22:5f:4d:fe:49:8b:7f:7e:76:ef:
                    55:dc:95:bf:fb:81:42:d1:70:ef:2d:57:bd:7b:ba:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E7:0D:7A:33:2C:95:14:6A:6B:99:E7:D5:0C:F9:46:38:AC:CD:C3
            X509v3 Authority Key Identifier:
                keyid:B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c0:ad:54:e2:5a:42:b5:17:14:18:4a:3f:25:7c:f6:64:dd:
         f4:4f:34:28:b8:37:91:3d:77:d4:3f:17:8c:54:05:e2:35:21:
         00:ee:c3:6a:16:40:bc:95:7f:f4:a8:dc:1f:61:48:bb:aa:8a:
         3e:5e:76:2d:2b:58:36:3a:48:37:7b:55:4a:2f:44:7d:1a:71:
         f7:86:a1:29:34:ca:80:0c:d3:8d:28:6d:c2:f8:26:a5:76:46:
         b8:f1:13:78:54:6d:52:da:c1:28:5d:5c:4b:81:90:01:19:08:
         31:99:0f:2d:13:63:00:53:de:34:80:49:f3:b9:22:b2:8b:62:
         56:c7:e6:f5:a1:68:ab:f7:6d:3a:52:57:20:80:50:43:4e:66:
         0f:3a:c5:6b:d8:52:14:ce:91:89:97:e1:4e:c8:db:06:55:51:
         64:2a:32:73:d5:b8:08:ab:84:bf:0f:97:8c:7b:28:11:92:93:
         84:83:d0:bf:60:32:93:dc:7b:0e:18:4e:52:29:c6:d1:7d:7e:
         1b:50:9d:4a:a1:3d:d3:67:84:cc:3f:de:07:93:97:83:5f:ce:
         ba:3b:70:0b:d0:8a:7e:f8:f3:f7:6f:6c:d1:80:7d:a6:f8:b7:
         50:16:16:18:ed:f4:86:c8:c4:d6:1d:12:68:68:5d:82:22:4d:
         6c:ce:64:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:53:57 2024 by rpki-client on console-fra.rpki-client.org