Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8d9f9d-bf7e-471c-a007-fcc19290c323/1/hUd6B9VbUZ3Kr_fTAGu1QxZMfBw.mft
File:                     hUd6B9VbUZ3Kr_fTAGu1QxZMfBw.mft (raw, json)
Hash identifier:          Ylii+eme0xxBAdLX3ikDgF45njEIFuHY1LOvmp+qiLw=
Subject key identifier:   27:99:91:09:89:E5:7E:AD:82:C9:36:30:27:CB:52:F8:CE:2A:8F:5A
Authority key identifier: 85:47:7A:07:D5:5B:51:9D:CA:AF:F7:D3:00:6B:B5:43:16:4C:7C:1C
Certificate issuer:       /CN=85477a07d55b519dcaaff7d3006bb543164c7c1c
Certificate serial:       018F8749466452AF61C2295C40A7069AA5AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUd6B9VbUZ3Kr_fTAGu1QxZMfBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/8d9f9d-bf7e-471c-a007-fcc19290c323/1/hUd6B9VbUZ3Kr_fTAGu1QxZMfBw.mft
Manifest number:          0E0A
Signing time:             Fri 17 May 2024 16:01:17 +0000
Manifest this update:     Fri 17 May 2024 16:01:17 +0000
Manifest next update:     Sat 18 May 2024 16:01:17 +0000
Files and hashes:         1: hUd6B9VbUZ3Kr_fTAGu1QxZMfBw.crl (hash: PAPS4zd4qVrP0wqsHMRxv6uZ+TZ1/SJ2JYwoVT+BK4U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/8d9f9d-bf7e-471c-a007-fcc19290c323/1/hUd6B9VbUZ3Kr_fTAGu1QxZMfBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/8d9f9d-bf7e-471c-a007-fcc19290c323/1/hUd6B9VbUZ3Kr_fTAGu1QxZMfBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUd6B9VbUZ3Kr_fTAGu1QxZMfBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:46:64:52:af:61:c2:29:5c:40:a7:06:9a:a5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85477a07d55b519dcaaff7d3006bb543164c7c1c
        Validity
            Not Before: May 17 16:01:17 2024 GMT
            Not After : May 18 16:01:17 2024 GMT
        Subject: CN=2799910989e57ead82c9363027cb52f8ce2a8f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:c5:7b:16:bd:10:ac:24:e8:7f:3e:78:7a:
                    fe:71:6d:4c:50:d6:3c:69:7c:29:00:71:2b:08:d5:
                    46:7e:0f:66:e2:6e:8b:69:56:9e:b7:68:94:75:2c:
                    68:6a:2f:4b:6a:ac:64:32:d6:de:5c:6a:15:6e:ce:
                    0f:1b:05:83:9d:fc:40:7d:69:c0:0e:84:0e:71:5b:
                    be:56:a8:6a:2a:8e:61:72:ab:cb:70:5d:7a:12:24:
                    33:73:10:e7:6f:ff:ad:06:91:e9:82:12:53:89:7b:
                    89:16:38:43:09:b5:b1:46:fd:1a:ef:c1:5a:21:48:
                    85:88:8d:47:ac:ea:3e:79:b9:02:d9:b1:3b:97:f7:
                    45:c1:5f:5d:ed:38:53:78:d7:22:67:d0:db:95:36:
                    4a:81:2e:c7:59:b4:8d:0f:3e:e0:49:ac:f1:ad:d1:
                    21:e1:89:81:36:82:62:51:f4:60:12:6c:87:23:f3:
                    c7:8a:b1:39:76:b9:88:a2:83:55:eb:9f:ed:a6:c7:
                    e8:dd:16:c8:e4:d1:2d:39:d2:78:f0:1c:16:ba:09:
                    f4:92:3b:87:f3:57:4e:e5:5e:3b:db:96:91:b8:2d:
                    bc:76:4c:a0:30:1c:93:f6:c5:8c:9e:24:80:b4:a1:
                    0e:1b:31:83:7e:5c:36:7f:68:b8:7e:09:af:99:6f:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:99:91:09:89:E5:7E:AD:82:C9:36:30:27:CB:52:F8:CE:2A:8F:5A
            X509v3 Authority Key Identifier:
                keyid:85:47:7A:07:D5:5B:51:9D:CA:AF:F7:D3:00:6B:B5:43:16:4C:7C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUd6B9VbUZ3Kr_fTAGu1QxZMfBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8d9f9d-bf7e-471c-a007-fcc19290c323/1/hUd6B9VbUZ3Kr_fTAGu1QxZMfBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8d9f9d-bf7e-471c-a007-fcc19290c323/1/hUd6B9VbUZ3Kr_fTAGu1QxZMfBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:69:fe:50:4a:d5:7f:86:25:ec:42:65:c9:b2:57:08:0e:ee:
         51:cf:94:4b:fc:e6:b3:15:a2:c1:cd:9e:06:9d:fd:58:11:ee:
         53:b6:cb:38:05:33:c1:ae:73:bb:10:47:45:fa:3b:32:53:a2:
         7b:fe:f6:10:b4:6e:61:33:b2:fd:b4:99:88:13:14:33:cd:d1:
         f6:1d:01:de:09:ac:77:90:f0:43:8e:fe:95:31:93:bd:bb:08:
         9b:a1:2a:b1:11:9e:06:1c:74:b3:ca:f0:25:74:9f:0a:27:72:
         f3:37:fe:df:fc:d3:09:7c:2f:d9:93:3a:4b:9f:47:d3:d0:b7:
         0b:e1:93:05:4f:0e:69:73:a5:12:8c:21:31:a3:4c:61:67:b3:
         e7:26:27:e1:cc:3e:52:31:70:23:1e:fc:68:1c:ca:c0:72:34:
         6d:01:79:ad:b5:a7:14:cd:6c:8d:a3:79:8c:3b:ab:60:40:69:
         5e:da:42:09:5e:3c:bb:62:47:93:ff:0c:5f:3d:bb:88:55:0e:
         f2:6b:d5:0d:70:18:ca:17:92:52:54:a8:13:10:41:60:ba:7c:
         3f:95:24:08:1d:57:27:b8:0f:20:65:bd:a5:d0:86:25:47:1b:
         18:e2:23:6a:12:44:6f:29:51:8a:08:6d:13:ab:24:01:0f:d2:
         82:30:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:52:40 2024 by rpki-client on console-ams.rpki-client.org