Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
File:                     TW8ORKf28MiMzpxG26jscuxhdSs.mft (raw, json)
Hash identifier:          hUIcR0c/JGstRdniFWGt0CRY3HyjDvS6b8Wl9r2xdYE=
Subject key identifier:   9B:0C:48:E9:04:BD:69:F7:FF:D4:39:A4:F7:DC:1E:F8:10:BA:AA:DE
Authority key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
Certificate issuer:       /CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Certificate serial:       018F88FFB4B5D9A86C5687349B86CC7B3966
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
Manifest number:          042E
Signing time:             Sat 18 May 2024 00:00:10 +0000
Manifest this update:     Sat 18 May 2024 00:00:10 +0000
Manifest next update:     Sun 19 May 2024 00:00:10 +0000
Files and hashes:         1: TW8ORKf28MiMzpxG26jscuxhdSs.crl (hash: VB3qtIeXO65Jq2iF33ghLKSXgMyxO0ap8GIrdYkfgzk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:ff:b4:b5:d9:a8:6c:56:87:34:9b:86:cc:7b:39:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
        Validity
            Not Before: May 18 00:00:10 2024 GMT
            Not After : May 19 00:00:10 2024 GMT
        Subject: CN=9b0c48e904bd69f7ffd439a4f7dc1ef810baaade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:06:9a:af:50:1e:9b:d3:8b:30:99:49:76:
                    b1:8c:14:10:ae:a1:7f:68:5a:f7:be:f5:98:56:88:
                    f7:6b:bc:9f:a7:4a:ab:cd:5c:5e:00:83:ba:99:a4:
                    27:64:b0:41:b7:9e:60:80:b6:d7:90:77:fe:11:5f:
                    47:51:5a:47:1a:98:81:c5:b9:61:4e:b6:29:26:5d:
                    97:a6:d9:68:1e:d1:f4:2a:84:79:c3:e3:05:f7:32:
                    7f:a8:f4:ef:bb:52:94:09:db:82:c4:92:ba:79:ea:
                    4d:ab:2a:13:e3:eb:ea:3d:c6:d1:61:36:b2:b7:c6:
                    da:c6:bd:93:2a:c5:78:de:c5:3d:e4:fc:46:35:b2:
                    72:52:94:1c:a3:eb:d1:12:c2:79:20:c6:9c:7f:72:
                    50:32:06:0e:4f:ae:13:e3:c0:d8:e9:ca:23:b8:9f:
                    da:7c:c4:e8:90:aa:7e:8e:36:f7:be:b3:a6:39:89:
                    46:f0:5b:ce:cf:bb:de:d5:bb:ca:5b:ff:a3:c5:27:
                    3d:a8:6f:42:23:d5:b3:92:98:a4:5d:c9:8f:41:bb:
                    09:bd:2c:b6:ef:55:f1:47:37:b7:48:69:ff:5e:7d:
                    2a:f7:54:ff:f9:62:91:2e:ef:ff:b0:eb:de:69:ad:
                    18:14:06:96:84:db:eb:95:c9:56:a2:ac:93:fc:12:
                    52:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0C:48:E9:04:BD:69:F7:FF:D4:39:A4:F7:DC:1E:F8:10:BA:AA:DE
            X509v3 Authority Key Identifier:
                keyid:4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d8:0b:33:a1:f8:27:07:d9:3c:b2:e8:0b:59:29:cb:ff:b8:
         86:17:d6:f1:0f:fa:a6:6c:4a:fb:6a:30:fb:37:bd:3c:7f:09:
         ee:ab:68:fd:50:9d:ee:29:ee:38:8b:36:82:fd:03:d8:1e:35:
         6b:79:71:8f:bf:b6:0d:1d:2b:ae:26:f9:d5:b6:aa:7f:ad:47:
         c9:3c:f6:db:2b:74:b6:10:f5:e7:ab:57:d2:c3:0b:c4:81:1f:
         0c:42:c4:2d:59:41:87:c7:f2:19:bd:b0:d5:d8:91:7c:ec:8b:
         d5:66:86:88:c9:b8:9e:1b:e7:1e:2e:55:3b:e6:17:f9:29:58:
         bd:ca:9d:6f:52:22:fd:24:5b:c2:71:35:c9:72:a9:f3:f5:1a:
         af:e7:a3:d7:b2:2f:cb:25:f2:0f:86:52:2e:67:15:39:18:63:
         31:ac:f9:f6:39:0d:f3:02:fc:e8:6a:0a:bd:db:87:ee:40:8c:
         ef:ec:85:a5:a3:28:06:36:ed:08:8a:96:87:fe:dc:3f:83:d7:
         88:a5:c5:a8:8d:42:7b:cc:be:8c:8f:38:11:4f:1c:3e:25:ab:
         3a:12:72:63:c0:5c:19:c0:2d:49:e4:0c:91:5f:1b:18:1a:d4:
         46:48:6b:37:da:9a:0b:40:df:da:0b:b6:7c:41:d6:24:16:14:
         97:48:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:01:27 2024 by rpki-client on console-ams.rpki-client.org