Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
File:                     tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft (raw, json)
Hash identifier:          P8SqxKwvJHh3NHdquzxXaIMYwV01I9/UkvkB7lMKIms=
Subject key identifier:   21:7F:8B:94:8A:EE:EC:27:B7:AF:4F:A2:39:44:AD:51:F8:56:37:0E
Authority key identifier: B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
Certificate issuer:       /CN=b641b288b4d413e955fea4460b32bf2cc182af03
Certificate serial:       01901F343D3C6A7F8384BF63AD853C76E888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 04:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:35 +0000
Files and hashes:         1: tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl (hash: F6gMaciA6I0EfvCizyfmndumCuYttiXJgBwCYYh32zQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:3d:3c:6a:7f:83:84:bf:63:ad:85:3c:76:e8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b641b288b4d413e955fea4460b32bf2cc182af03
        Validity
            Not Before: Jun 16 04:00:35 2024 GMT
            Not After : Jun 17 04:00:35 2024 GMT
        Subject: CN=217f8b948aeeec27b7af4fa23944ad51f856370e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:95:fb:fa:b2:1e:7d:ee:79:3e:0c:c7:67:81:
                    51:41:32:24:5a:ec:dd:0e:b0:77:cd:2b:64:c2:be:
                    78:4b:31:d2:d2:57:c0:f5:9c:8d:98:84:fb:dc:d4:
                    3c:97:71:e9:6b:5e:77:a4:a2:f9:8f:32:58:e4:48:
                    86:b3:73:e3:0d:3e:34:57:3c:07:8c:07:25:b9:a6:
                    81:42:57:4e:f2:6c:cd:7f:9c:29:f5:25:28:2d:9a:
                    27:4e:53:9b:78:46:61:7a:63:52:cf:2d:78:73:38:
                    e4:a6:13:4e:b9:11:81:77:df:b8:c0:6c:a5:61:c9:
                    81:4d:bb:73:52:03:e5:bc:33:fe:bf:9e:3c:75:c4:
                    2b:63:01:d9:6a:bc:17:72:2c:15:bb:b8:4b:84:df:
                    aa:86:eb:bc:52:ac:97:84:1b:c8:c4:40:3a:a2:a4:
                    5f:80:16:d8:47:bb:a0:3a:78:7d:0f:2b:e5:b5:5b:
                    80:3b:b9:99:e8:fd:b6:d2:84:4e:03:e2:bc:67:a7:
                    37:f6:81:26:ba:43:9f:74:7c:1d:20:c0:7f:0a:a5:
                    60:75:cd:5c:99:06:ec:67:c7:78:31:4c:92:55:f4:
                    d2:7e:ab:9d:bc:ee:a6:ec:32:a1:ad:31:6b:bb:2e:
                    ba:73:c4:b4:4f:9a:1f:79:6f:b2:24:73:16:09:fe:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7F:8B:94:8A:EE:EC:27:B7:AF:4F:A2:39:44:AD:51:F8:56:37:0E
            X509v3 Authority Key Identifier:
                keyid:B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f6:d4:98:4f:d6:62:d1:4e:76:2d:f2:6b:8e:9f:62:65:e8:
         ee:b6:73:f2:17:6e:b6:2c:18:71:37:73:3d:61:3e:0a:ca:54:
         28:2d:27:59:08:21:f0:c1:5f:1c:3a:6f:39:b8:92:4d:78:19:
         de:ef:cf:c3:a2:58:73:07:e9:30:ad:e4:f2:47:02:8f:c5:2f:
         d5:66:af:66:88:37:be:55:ea:2d:58:80:5d:41:62:3a:ad:b8:
         b4:42:fb:d3:8f:6b:ce:b2:b6:9e:40:a2:2a:de:74:00:d2:bc:
         2d:29:7a:2a:0b:c7:5e:bd:11:f8:0c:11:6f:3f:68:fb:c2:fd:
         c3:aa:f9:76:81:27:c5:00:91:d1:a0:05:b0:1e:40:35:3b:9d:
         06:52:73:62:b3:74:d3:be:70:e4:d9:91:11:97:7b:d1:aa:2c:
         16:da:6b:46:7f:f5:80:98:5d:25:19:01:70:ba:5d:94:fd:5d:
         b9:ea:d5:e0:cc:2e:ec:7f:76:2b:c2:9e:00:b0:61:d4:c8:98:
         5d:19:a0:d5:dc:19:b0:e8:4d:44:ef:c1:e1:82:8d:ce:f1:bf:
         39:20:18:13:d6:93:34:a1:35:3d:b8:32:93:68:84:1c:d2:c0:
         15:7d:7b:b7:e9:d8:12:01:04:68:c4:c6:34:b0:bc:28:89:6b:
         12:86:59:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:34 2024 by rpki-client on console-fra.rpki-client.org