Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File:                     Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier:          Z0epe3d5McmvNaQ7Asumy/Jpt6FcQIm7JmSO7Heu6es=
Subject key identifier:   F5:F7:A9:8C:C9:E8:39:9D:FB:03:A0:C6:F1:FA:63:C6:40:3C:7C:43
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer:       /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial:       018F87ED97077D6B7CB60CBAA72C11B58A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number:          0AF7
Signing time:             Fri 17 May 2024 19:00:45 +0000
Manifest this update:     Fri 17 May 2024 19:00:45 +0000
Manifest next update:     Sat 18 May 2024 19:00:45 +0000
Files and hashes:         1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: +yZ7nyB6fADYflxWSKtDzFQaloxdHcj7GhdwQXAcr6Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:97:07:7d:6b:7c:b6:0c:ba:a7:2c:11:b5:8a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
        Validity
            Not Before: May 17 19:00:45 2024 GMT
            Not After : May 18 19:00:45 2024 GMT
        Subject: CN=f5f7a98cc9e8399dfb03a0c6f1fa63c6403c7c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:3d:b7:51:85:e6:83:27:26:8e:07:f4:d3:
                    32:55:2c:c7:32:b7:8a:83:8e:f9:0c:39:36:f0:4c:
                    a2:1d:49:c9:a5:a8:60:03:c2:2d:30:ca:f2:de:3e:
                    fb:9f:af:bb:23:67:50:cd:53:67:da:9e:76:aa:c1:
                    9f:c6:ab:c7:ed:17:af:13:20:55:cb:5f:86:8b:af:
                    7b:40:79:16:e1:7b:8a:68:44:ab:5e:55:00:51:bf:
                    fe:00:da:36:64:bd:76:b2:97:3a:ac:ae:bd:4f:40:
                    fd:81:21:87:75:da:9c:8a:f3:38:26:18:9c:75:df:
                    aa:ab:68:0c:4e:fd:a9:78:6e:d3:4d:f3:3c:b8:4d:
                    e0:76:75:cb:60:c5:ab:80:17:20:65:72:a9:0b:db:
                    2c:82:4b:d1:24:54:96:99:50:bf:2a:93:e6:d0:b0:
                    9b:b4:f2:94:d6:59:e0:43:a3:a1:87:a5:8d:1c:39:
                    82:ac:7d:ab:91:78:7b:c9:f3:5c:30:02:02:51:7a:
                    16:00:2e:32:d4:c3:7b:58:be:43:65:ab:1b:bc:93:
                    1b:5e:a8:05:01:19:4c:8b:f5:6a:c7:2b:c7:a2:51:
                    30:48:84:7d:14:43:f7:f5:51:ff:b4:d7:ab:76:27:
                    37:41:62:c5:e9:f0:43:27:69:ad:33:f8:06:27:3b:
                    d3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F7:A9:8C:C9:E8:39:9D:FB:03:A0:C6:F1:FA:63:C6:40:3C:7C:43
            X509v3 Authority Key Identifier:
                keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e2:37:26:59:09:65:ce:fc:4d:98:c0:0a:22:53:87:c5:3a:
         ad:d2:0d:b3:c4:ca:eb:16:4f:da:7b:d3:33:5e:62:f0:93:cc:
         e4:1f:b9:21:68:5e:80:ec:e6:ee:ee:ce:f1:ee:00:80:be:9b:
         93:2b:e0:d6:62:fd:6e:d6:15:c7:97:bd:4a:f8:44:88:0e:2e:
         62:fc:30:86:23:a1:9e:45:42:1c:e6:35:21:2d:9b:7e:13:76:
         d7:ab:d5:f1:cc:95:32:b0:93:50:03:6d:e8:90:33:90:d8:9c:
         ac:a1:5a:ba:7e:28:8d:85:8e:93:e0:71:c3:42:e9:7e:91:82:
         15:36:0a:a7:3b:1b:de:53:c5:f5:cc:dd:f2:f2:3a:a2:93:58:
         e8:36:c3:f8:93:1c:71:51:b1:a5:15:bd:b6:db:31:ba:91:32:
         c8:a1:8a:0b:1f:c7:75:b2:8f:11:b2:43:9e:ce:1a:de:3d:b5:
         f4:1d:1f:fe:84:91:80:31:8c:41:c8:bb:12:6c:57:9d:cb:b0:
         88:58:c5:26:9a:8d:63:fd:c2:6b:2f:39:62:02:4c:ef:1b:bf:
         48:be:d1:18:66:25:94:78:c9:e7:fa:71:aa:20:2e:77:e5:60:
         0d:45:4c:e8:85:6b:83:1f:a9:2e:a0:2e:ca:19:eb:ac:d4:28:
         48:67:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:36:56 2024 by rpki-client on console-fra.rpki-client.org