Manifest

$ rpki-client -vvf rpki.co/repo/Simple/0/F18366696480EFEAB47DB1DB1975F2D7B6901D69.mft
File:                     F18366696480EFEAB47DB1DB1975F2D7B6901D69.mft (raw, json)
Hash identifier:          QCKaKHd5FUk7t8ABJcAnI8V0phAZ7drTqD6utk8Lu6A=
Subject key identifier:   08:D3:4D:84:F0:CA:E1:3E:64:6C:E8:3D:A3:B2:EA:FA:F3:D6:E6:60
Authority key identifier: F1:83:66:69:64:80:EF:EA:B4:7D:B1:DB:19:75:F2:D7:B6:90:1D:69
Certificate issuer:       /CN=f18366696480efeab47db1db1975f2d7b6901d69
Certificate serial:       2668E999FFDD5CCEC13976BA156D584DCF1A9CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YNmaWSA7-q0fbHbGXXy17aQHWk.cer
Subject info access:      rsync://rpki.co/repo/Simple/0/F18366696480EFEAB47DB1DB1975F2D7B6901D69.mft
Manifest number:          0207
Signing time:             Thu 25 Apr 2024 10:14:36 +0000
Manifest this update:     Thu 25 Apr 2024 10:09:36 +0000
Manifest next update:     Fri 26 Apr 2024 11:39:36 +0000
Files and hashes:         1: F18366696480EFEAB47DB1DB1975F2D7B6901D69.crl (hash: wNaMw9rLHSlyLpiIQMn7G7gm8tBqOvH6hxr71qWaeXk=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/Simple/0/F18366696480EFEAB47DB1DB1975F2D7B6901D69.crl
                          rsync://rpki.co/repo/Simple/0/F18366696480EFEAB47DB1DB1975F2D7B6901D69.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YNmaWSA7-q0fbHbGXXy17aQHWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 11:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:68:e9:99:ff:dd:5c:ce:c1:39:76:ba:15:6d:58:4d:cf:1a:9c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f18366696480efeab47db1db1975f2d7b6901d69
        Validity
            Not Before: Apr 25 10:09:36 2024 GMT
            Not After : Apr 26 11:39:36 2024 GMT
        Subject: CN=08D34D84F0CAE13E646CE83DA3B2EAFAF3D6E660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0c:ab:df:42:a9:24:ca:f8:f0:af:2f:66:3b:
                    df:92:bc:e8:aa:47:86:ac:78:5c:3b:cd:5f:c2:13:
                    c8:b3:1e:52:58:b1:9e:be:56:50:6b:0d:38:d1:9a:
                    27:3d:33:d5:a7:dc:8e:18:36:d6:44:fb:3c:99:59:
                    d0:b1:a7:a9:43:48:8c:c5:ef:3b:90:3c:4c:65:cf:
                    5d:72:9d:14:12:4d:9e:db:8c:e4:b0:76:c3:fa:12:
                    fe:c1:65:df:31:22:44:ff:e6:64:bf:b9:b0:2d:91:
                    9a:3c:e8:92:13:5a:d9:76:ac:d2:42:cf:95:67:89:
                    42:cf:f5:7a:12:6b:d5:d6:c4:d3:7c:81:3a:13:eb:
                    2e:5f:99:fd:b7:a2:22:ab:ad:09:a6:e7:20:ab:ad:
                    8b:97:2c:ea:c2:14:0a:cd:e3:b5:0c:22:41:4d:21:
                    e6:48:b5:51:6a:95:08:72:56:3b:a8:0e:ac:4e:92:
                    43:09:a7:cb:0d:7b:3a:8b:05:da:32:45:68:7c:2a:
                    c0:d2:89:94:b0:4a:71:3a:4d:84:cc:37:74:e0:47:
                    ff:09:ee:05:74:a1:ff:dd:7c:aa:a6:fa:d5:8a:8b:
                    e6:d1:c7:17:8f:60:95:7d:fc:34:8a:c3:11:0b:99:
                    ab:4a:eb:82:59:11:f3:76:9e:06:85:4f:14:b2:75:
                    16:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D3:4D:84:F0:CA:E1:3E:64:6C:E8:3D:A3:B2:EA:FA:F3:D6:E6:60
            X509v3 Authority Key Identifier:
                keyid:F1:83:66:69:64:80:EF:EA:B4:7D:B1:DB:19:75:F2:D7:B6:90:1D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Simple/0/F18366696480EFEAB47DB1DB1975F2D7B6901D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YNmaWSA7-q0fbHbGXXy17aQHWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Simple/0/F18366696480EFEAB47DB1DB1975F2D7B6901D69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:e7:78:b3:58:7f:91:7c:c5:c6:cc:df:f5:8c:9a:20:0d:cf:
         3a:7a:b2:9d:fa:1a:2c:d8:fa:50:63:b2:aa:c5:c8:58:55:12:
         b5:8c:89:04:ef:92:62:50:4a:c3:35:78:24:08:a6:9c:93:c4:
         7b:6d:02:d0:96:b4:21:d8:4c:b2:40:4c:6f:78:f8:67:14:c1:
         2a:77:ff:83:4b:8d:8b:95:28:c2:f5:05:48:90:31:0e:0e:d3:
         66:d3:01:62:39:7b:22:18:8b:75:49:ae:31:ca:21:77:37:46:
         a4:89:3b:d1:37:d6:8a:d2:84:c3:3d:35:b7:fa:d9:46:3f:5a:
         59:82:b6:fe:d2:a7:91:ea:83:bf:8a:68:30:45:45:08:a9:74:
         cf:c6:5b:ea:96:ab:96:6b:93:32:da:32:dd:27:53:6e:02:c5:
         c6:96:3e:19:0a:a3:f1:d6:5f:71:8d:7b:eb:85:ee:fd:92:fd:
         5b:b5:7a:95:2a:5a:56:bd:5d:a9:a3:47:65:eb:63:e4:ee:7b:
         31:a8:d9:f2:7c:05:0e:e6:27:86:e9:7a:74:e2:09:02:d1:2e:
         1d:4b:f5:8c:cc:3c:a0:b9:02:5a:ae:30:d3:be:74:fd:40:83:
         26:eb:d3:7d:47:de:51:fe:7d:28:16:d2:9b:ad:1c:4b:38:e0:
         c8:36:e6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:47:08 2024 by rpki-client on console-fra.rpki-client.org