Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File:                     SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier:          b9tK4hykwPBOEXNG5QNh40mPYSmfkg58xyYSmDkhbJk=
Subject key identifier:   9D:1B:E2:F8:B4:14:89:92:81:4B:B3:70:4F:29:39:72:45:C3:E4:35
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer:       /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial:       01901D461060DF07BD9C035810EA997F26FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number:          D4
Signing time:             Sat 15 Jun 2024 19:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:49 +0000
Files and hashes:         1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: XKeMa7MU+xXJZjRQ/CzM45Mwt6Fv+llyjUuKEHy3fwA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:10:60:df:07:bd:9c:03:58:10:ea:99:7f:26:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
        Validity
            Not Before: Jun 15 19:00:49 2024 GMT
            Not After : Jun 16 19:00:49 2024 GMT
        Subject: CN=9d1be2f8b4148992814bb3704f29397245c3e435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:d6:18:90:ee:3f:19:c6:01:40:29:ae:89:
                    f1:32:52:d8:53:38:93:17:50:84:23:48:19:b8:27:
                    e3:ef:d5:d3:d7:11:5d:70:07:71:14:1c:4f:f5:ac:
                    dd:ff:d0:dd:62:c5:d2:50:76:84:ac:24:11:25:25:
                    a1:27:c3:0a:0c:d5:c2:12:d3:2e:f3:af:19:29:65:
                    eb:01:30:42:95:6d:0c:1d:1d:1b:a0:b8:2b:af:2a:
                    6c:e2:66:fc:57:cf:3e:08:8d:bd:63:d8:f9:18:92:
                    5b:2f:51:ec:11:71:16:d5:13:2b:47:76:8d:0c:43:
                    b0:42:61:4c:b7:8d:22:64:32:28:4e:0e:c6:49:88:
                    c9:5b:c4:86:b5:fe:23:e6:eb:ed:d3:23:87:f2:e7:
                    db:a4:02:16:a4:18:33:0b:22:22:03:85:a3:b8:0a:
                    25:ce:e0:41:d1:c6:54:15:03:30:ab:28:ad:ba:fc:
                    02:6e:23:d6:1a:2b:97:a4:4e:50:4d:4d:61:30:17:
                    b3:6e:1b:b8:10:7e:e4:38:17:56:6e:b9:86:ff:9a:
                    4d:1d:4f:9f:94:4e:e1:c9:ee:a3:4f:e7:1d:98:7b:
                    5f:98:f9:f3:1c:ff:78:d4:1f:bb:72:f7:08:0c:4f:
                    2a:13:e0:a4:33:92:c0:9b:dc:81:f9:46:e7:75:59:
                    1e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1B:E2:F8:B4:14:89:92:81:4B:B3:70:4F:29:39:72:45:C3:E4:35
            X509v3 Authority Key Identifier:
                keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:c8:7c:7e:25:bb:bb:09:15:05:d6:1a:cd:f6:b3:eb:ab:
         2c:fd:a2:3f:30:f0:47:69:98:c1:6a:c0:3c:d9:69:dd:9e:59:
         c8:a0:84:4b:db:72:ad:ef:36:a1:b0:32:58:52:24:74:1e:a8:
         87:f8:93:df:88:30:55:47:fb:df:da:35:22:a5:1b:5d:d5:85:
         40:ea:c1:0e:5e:01:8c:1f:7f:69:08:69:51:8e:76:59:d1:24:
         dd:01:c8:80:9c:76:af:f8:e7:e4:7e:d4:4e:f6:3a:59:2e:ba:
         52:bd:99:bd:8f:31:7c:c5:db:ef:6d:db:83:3e:0e:81:79:aa:
         84:40:6a:8f:c0:06:aa:f5:ed:92:91:46:aa:7e:d2:ff:ff:1d:
         fa:84:82:1c:b8:b4:5f:f2:6c:b8:03:c9:f3:10:7b:06:d1:43:
         56:79:b6:84:f7:89:95:59:bc:5e:c2:40:dc:30:30:b9:76:41:
         82:83:b6:a5:b0:39:fa:20:b0:c7:3d:ba:a1:3c:aa:cc:06:07:
         f1:83:cc:91:76:02:bd:8a:d7:be:55:90:41:e6:bc:3d:59:b9:
         fb:57:43:6d:5e:26:79:24:fd:1e:b7:97:90:80:a3:c6:81:a5:
         68:f3:02:fe:96:ca:cd:de:23:7c:ef:79:1a:c6:e6:5c:96:9d:
         14:fc:68:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:13:58 2024 by rpki-client on console-ams.rpki-client.org