Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
File:                     _TSxP72Tgd-Exofwa80HTkp1WAM.mft (raw, json)
Hash identifier:          CTR/6ofJNcLmTUUQ19adFbjHjmGDah5ZPuc5h4cExks=
Subject key identifier:   6E:58:EC:02:1D:79:E9:47:EC:6C:55:C0:B7:A4:B7:6E:79:08:43:23
Authority key identifier: FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
Certificate issuer:       /CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Certificate serial:       018FB26A73BA6D1ED28240B36A4FB4E972B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
Manifest number:          118C
Signing time:             Sun 26 May 2024 01:01:11 +0000
Manifest this update:     Sun 26 May 2024 01:01:11 +0000
Manifest next update:     Mon 27 May 2024 01:01:11 +0000
Files and hashes:         1: _TSxP72Tgd-Exofwa80HTkp1WAM.crl (hash: 1nMeG0kdBFs11HBqK5d9l3tPPkmWg54Z0ik+/r16Sfc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 18:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:6a:73:ba:6d:1e:d2:82:40:b3:6a:4f:b4:e9:72:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd34b13fbd9381df84c687f06bcd074e4a755803
        Validity
            Not Before: May 26 01:01:11 2024 GMT
            Not After : May 27 01:01:11 2024 GMT
        Subject: CN=6e58ec021d79e947ec6c55c0b7a4b76e79084323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:9c:5a:6b:c9:9d:bd:9f:69:73:06:11:9e:
                    b6:eb:eb:13:08:66:4f:8f:47:e6:5c:3b:6b:64:a5:
                    d2:74:e0:0d:ab:de:ba:e7:35:8c:7d:c2:c2:31:04:
                    be:ae:bd:03:b1:08:75:8c:39:cb:28:75:a6:41:e3:
                    7d:28:00:2a:d8:1a:02:fa:7f:63:e9:4c:af:9b:cd:
                    51:f4:be:c6:7a:86:b5:5c:af:66:62:80:c5:35:11:
                    92:7f:6c:31:99:cf:e4:30:8c:da:a9:15:7e:91:ed:
                    a4:6d:d2:15:8d:a8:1d:0c:0c:f8:03:72:54:cc:5a:
                    02:d8:6d:47:99:2a:f2:1b:d6:ce:5e:53:b9:52:3f:
                    14:36:5a:b2:3d:6e:ea:98:33:32:c2:99:f7:e3:e0:
                    7c:63:0b:6f:80:80:ce:0d:3b:4e:77:31:81:59:4f:
                    f5:4f:5e:b2:43:f9:cb:3e:83:a5:fb:c2:9d:2d:8c:
                    fe:e4:f7:70:b2:c6:8c:8c:45:e2:c4:d2:12:06:51:
                    00:d6:cb:f5:eb:9e:f7:8d:da:e2:40:2f:b2:34:25:
                    5d:7a:7a:cc:67:c1:ab:43:28:3b:35:44:7f:92:a5:
                    f4:57:d4:76:1f:5e:20:70:75:0a:c8:33:da:38:75:
                    b3:fc:24:a9:d3:74:5a:a8:8c:65:ea:de:f8:98:45:
                    65:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:58:EC:02:1D:79:E9:47:EC:6C:55:C0:B7:A4:B7:6E:79:08:43:23
            X509v3 Authority Key Identifier:
                keyid:FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2a:6e:b7:f9:2c:52:95:e9:d2:84:43:f7:d4:28:81:f2:08:
         b9:e5:f7:96:29:d8:b9:34:24:76:23:06:74:84:70:09:cf:5b:
         95:06:48:31:04:82:8e:9a:d5:e4:56:f3:d2:08:bb:78:7a:20:
         1e:ce:53:3c:2b:99:09:a5:60:79:10:92:a6:13:25:ce:bc:10:
         0d:88:6e:e7:34:8b:95:2d:48:ed:5d:bc:83:a0:09:bd:57:22:
         9e:a1:0b:e8:87:c5:a8:ed:c6:b0:44:98:25:6c:de:c4:e1:12:
         b9:47:ea:97:72:8c:a7:61:d1:ec:d0:14:a0:6f:54:fe:97:f4:
         8a:b3:42:53:66:10:07:47:29:0d:00:e1:fb:6e:f3:61:61:8e:
         11:78:8b:cd:ab:f2:d8:89:fd:ef:00:ef:53:ab:00:54:7b:5e:
         39:79:dc:41:9b:e6:24:a3:85:dc:03:7f:df:72:bd:7b:cd:65:
         ca:4b:fe:fa:a2:fa:48:bf:90:44:64:a1:c4:f7:9f:c8:06:fe:
         ca:1d:25:0c:77:21:1a:6c:0f:b8:98:5b:e4:9e:7d:6d:8f:f9:
         59:87:84:cc:24:72:f1:45:8e:0e:b9:17:07:4d:f6:01:ae:1f:
         80:2a:e2:d1:cd:f7:a9:89:a5:6c:53:58:eb:83:a9:28:be:b5:
         ff:a7:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 02:15:32 2024 by rpki-client on console-fra.rpki-client.org