Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
File:                     TVSL_7MhSZGpynyfD1tIVFiLl14.mft (raw, json)
Hash identifier:          azEZDmaCWXfRVktim8chNeww6c9DdOSWgNyBzj6j4sU=
Subject key identifier:   57:96:77:B1:8E:F5:21:17:DA:10:53:15:3C:26:CF:EA:02:63:EF:E8
Authority key identifier: 4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
Certificate issuer:       /CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Certificate serial:       018F874891B9CAF8A6AD04F6D67A84E28B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
Manifest number:          025A
Signing time:             Fri 17 May 2024 16:00:30 +0000
Manifest this update:     Fri 17 May 2024 16:00:30 +0000
Manifest next update:     Sat 18 May 2024 16:00:30 +0000
Files and hashes:         1: TVSL_7MhSZGpynyfD1tIVFiLl14.crl (hash: WGMWmBGyqd9bOC7URKTyubEXLZ+0IPsVZ/WJUcgEqqY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:91:b9:ca:f8:a6:ad:04:f6:d6:7a:84:e2:8b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
        Validity
            Not Before: May 17 16:00:30 2024 GMT
            Not After : May 18 16:00:30 2024 GMT
        Subject: CN=579677b18ef52117da1053153c26cfea0263efe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5e:f6:1a:49:53:d2:da:ab:71:fe:95:aa:cc:
                    c7:2f:cd:ef:6c:be:d8:c6:0a:8f:f3:a8:3c:ec:fe:
                    d0:c4:85:78:83:a1:3d:e5:b3:46:49:2e:b8:bd:5e:
                    de:6a:cc:87:59:ec:0d:3f:0d:5c:3a:03:40:9c:52:
                    6d:73:b5:a4:d7:97:90:53:ae:48:cb:6f:ab:69:18:
                    c5:a0:52:d2:79:af:e1:2e:24:a8:21:43:7e:d5:1c:
                    8c:78:82:8b:1d:83:b9:b0:83:80:58:04:c2:be:25:
                    71:96:72:fb:97:b9:da:e1:64:7a:3a:2a:53:fa:71:
                    f9:8b:96:d0:6d:79:2d:80:94:56:51:ea:f7:1e:85:
                    33:e4:2e:0a:47:6c:65:01:08:b6:b6:05:c6:fa:ab:
                    89:8d:89:ee:9a:db:10:68:f0:c0:01:e0:8b:92:ea:
                    8e:5b:a8:51:73:5e:4f:17:54:10:de:6b:15:a4:12:
                    f3:47:d2:71:71:e2:61:50:e8:78:c0:69:1d:c6:b0:
                    c9:4a:c4:a2:ec:70:91:a2:c8:2b:e8:df:c6:e0:c8:
                    10:eb:20:69:ab:3c:ff:29:00:67:b0:a9:79:05:4f:
                    6a:cd:6e:a6:cc:9b:87:ad:6c:40:12:c7:66:52:96:
                    57:d0:b9:f8:95:96:c4:7c:45:75:45:99:bd:78:ff:
                    04:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:96:77:B1:8E:F5:21:17:DA:10:53:15:3C:26:CF:EA:02:63:EF:E8
            X509v3 Authority Key Identifier:
                keyid:4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:38:71:bf:30:e3:86:1a:07:66:94:54:b4:8a:70:5d:d7:8b:
         1c:4c:5f:5f:bb:a5:02:59:9c:6a:02:40:1a:14:6e:c0:f7:0d:
         82:8c:18:c9:3d:8a:95:e7:cb:4e:57:27:d4:9e:53:59:61:22:
         a2:b7:de:91:ce:c5:75:7a:86:53:be:87:ff:85:95:95:08:95:
         f3:a7:1f:40:06:06:11:ac:ef:00:ec:73:7e:1b:78:bf:bb:35:
         f0:11:55:4a:84:1a:2a:63:b4:f3:21:d2:69:b9:1c:43:0d:84:
         2e:1c:49:f9:ad:01:6b:33:5d:e5:7f:29:ca:2f:70:3b:f3:1e:
         ab:18:5b:10:36:cf:7e:1c:ed:f2:9d:74:70:a5:b2:7d:7f:90:
         2f:cc:50:29:ea:9a:d1:f3:30:c4:e5:db:1b:b9:44:5b:78:13:
         47:ea:16:28:0e:e5:11:c4:9f:35:91:37:39:b2:82:48:51:06:
         f8:f6:08:d5:64:c4:b5:12:92:e1:95:1b:44:28:34:64:5a:82:
         fe:f0:cf:56:99:91:6e:d0:ae:cf:32:15:4e:b6:cf:26:13:40:
         cf:e9:d7:0f:b6:bc:91:94:e1:ab:94:99:fd:32:1e:62:26:45:
         81:ab:3c:7d:77:54:c5:6f:bf:26:c3:67:0d:40:8c:b7:9a:8f:
         61:90:57:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:25 2024 by rpki-client on console-fra.rpki-client.org