Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
File:                     S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json)
Hash identifier:          0I679xEODWP96IfUO14WoBd646GCr5Ua3mFGfgi3Vxc=
Subject key identifier:   DD:A2:86:B8:E7:28:87:7E:20:DB:83:23:39:A3:28:E7:30:91:D9:D4
Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Certificate issuer:       /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Certificate serial:       01901D4640CF3994C9A99F724692EAFE2C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
Manifest number:          03D8
Signing time:             Sat 15 Jun 2024 19:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:01 +0000
Files and hashes:         1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: smqOW8l6KQmkR4A7wor3WxNetSPZwnSzf6gGg3zxaA4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:40:cf:39:94:c9:a9:9f:72:46:92:ea:fe:2c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
        Validity
            Not Before: Jun 15 19:01:01 2024 GMT
            Not After : Jun 16 19:01:01 2024 GMT
        Subject: CN=dda286b8e728877e20db832339a328e73091d9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:70:c7:70:fe:cd:fb:17:c0:12:05:16:fe:
                    ba:37:6a:e3:b9:17:66:c7:01:ee:0d:14:77:df:f0:
                    e3:3b:e2:5e:95:c7:89:da:bf:ce:a3:4c:99:96:49:
                    3a:7b:f3:bc:3e:7f:f7:27:67:67:b6:3e:36:75:de:
                    40:13:d7:a4:69:b7:51:82:c3:87:76:99:21:53:dc:
                    2f:69:68:3a:96:77:e9:b7:bd:71:34:b4:77:bf:4d:
                    d4:75:84:d2:5c:6b:ef:a3:9b:37:b0:f2:f1:26:40:
                    fd:74:1d:3f:9e:f9:7b:ad:57:a6:c0:33:9b:1c:1e:
                    d6:eb:2a:f4:c6:80:a8:37:36:76:a3:32:6a:ca:fe:
                    4a:21:1d:ed:83:b3:73:c3:f1:bd:c8:ae:c0:47:c4:
                    72:32:fe:35:25:83:42:2a:78:9d:74:82:b3:51:ae:
                    1b:81:e8:56:44:f4:2e:d9:4b:fe:4a:ef:30:06:92:
                    2f:0b:8d:12:26:4a:c1:9a:d3:65:3f:ec:fc:12:70:
                    15:7b:41:97:ff:6f:3a:0e:9e:ec:0d:46:f9:e6:f6:
                    85:89:5c:1c:f7:e5:b9:fe:fc:42:9c:82:dd:a7:6b:
                    c1:6a:0b:9d:ce:85:d0:b6:20:e9:42:4d:8d:b5:3d:
                    b0:80:61:bb:b9:36:35:0f:5e:19:66:99:83:52:8e:
                    59:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A2:86:B8:E7:28:87:7E:20:DB:83:23:39:A3:28:E7:30:91:D9:D4
            X509v3 Authority Key Identifier:
                keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:bf:02:a0:94:df:93:c8:bf:8c:8a:f9:ba:7f:3a:28:49:7c:
         98:e7:ed:e5:1b:25:9d:47:0b:f9:fd:c9:08:98:85:e6:de:2a:
         a3:2c:29:4b:f9:bb:f9:17:8a:e5:fc:a2:cd:4c:a3:55:17:ba:
         7c:54:22:3b:66:7c:fd:59:0f:60:3a:2a:4f:31:23:68:32:0c:
         0d:45:8d:51:01:9d:37:3e:4d:33:06:bd:25:38:01:c9:9b:f6:
         db:ed:7e:43:8c:5b:58:b4:1f:73:32:6b:18:e6:de:d8:09:9f:
         10:00:df:44:28:49:21:00:c8:6c:dc:a0:37:a4:2f:e2:d6:61:
         7f:32:d9:0c:69:43:a4:4d:5f:d7:66:0c:73:be:42:2b:36:29:
         f1:90:a5:8b:7f:ee:fc:46:d7:19:b6:6f:23:15:a3:26:7e:10:
         2b:5a:81:41:90:ee:05:6a:0f:0a:57:b3:47:1a:54:a4:8b:7f:
         e1:ed:88:8d:54:81:42:89:59:5f:34:f4:41:0f:e2:30:39:ee:
         6f:0d:42:7b:c2:00:3d:d3:93:54:51:aa:85:cb:1a:0a:8d:bb:
         4d:32:f3:19:0e:01:65:d8:1a:68:74:fe:55:d0:43:8c:7c:ac:
         28:dc:b7:e2:b5:f4:f8:9f:e1:45:ef:79:f4:99:ca:91:6e:29:
         25:e1:16:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:45 2024 by rpki-client on console-ams.rpki-client.org