Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
File:                     m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft (raw, json)
Hash identifier:          ZbkoEqAVzIN00wTUuQUP70bV9Zi2skameVL2YqBKU1s=
Subject key identifier:   4D:3E:C6:BA:83:59:B7:6E:52:1C:8E:BA:E0:43:FF:90:98:06:C0:C7
Authority key identifier: 9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
Certificate issuer:       /CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Certificate serial:       018F87B6C3BCB093C6CDB8E22515ED3F5ABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
Manifest number:          0FF9
Signing time:             Fri 17 May 2024 18:00:52 +0000
Manifest this update:     Fri 17 May 2024 18:00:52 +0000
Manifest next update:     Sat 18 May 2024 18:00:52 +0000
Files and hashes:         1: m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl (hash: aYz3ivmaUxnwdVIIOt0QbSEoePO79z7xEg7U8n919cA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c3:bc:b0:93:c6:cd:b8:e2:25:15:ed:3f:5a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
        Validity
            Not Before: May 17 18:00:52 2024 GMT
            Not After : May 18 18:00:52 2024 GMT
        Subject: CN=4d3ec6ba8359b76e521c8ebae043ff909806c0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:26:a8:f2:47:07:4f:5e:0f:ba:1a:af:64:
                    ca:64:47:55:2f:ac:af:dc:5c:89:e7:33:bf:15:21:
                    d6:49:50:5f:b8:af:d8:d0:ee:e0:e3:2c:10:8f:bb:
                    02:53:7c:40:6a:c1:f1:89:9b:f7:ba:c8:08:23:41:
                    ec:d5:95:e5:08:a3:1c:8e:8d:82:29:be:1c:8d:65:
                    c5:9e:89:5e:f8:ee:97:a4:d0:0d:d1:66:62:38:cf:
                    83:92:8f:26:2a:e4:d4:0a:2a:83:7a:d6:b3:25:af:
                    d7:71:a3:6d:c2:6f:a5:59:00:38:41:86:70:f6:9f:
                    df:6a:5b:e5:61:aa:d5:5e:67:84:e3:07:06:1e:6b:
                    f2:ce:66:47:d0:31:de:e4:b5:1a:f0:b9:48:de:f1:
                    00:f8:ec:c6:9a:d6:f3:a1:ec:7b:f6:09:fa:26:22:
                    52:f2:29:12:23:cc:53:90:7b:6e:7f:a2:d2:b4:d4:
                    d4:69:01:a5:a8:aa:eb:ef:ce:22:c2:db:cb:62:05:
                    5b:be:b7:d5:58:b5:bb:00:07:28:a1:5d:76:14:4e:
                    52:b3:dd:56:90:30:94:b5:6d:c9:ec:ed:3f:e8:02:
                    69:ed:45:5d:ed:bc:bd:c9:7b:3e:d7:72:f4:40:59:
                    8a:2d:5e:63:04:c0:ef:4c:92:f1:2c:c4:65:c8:03:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3E:C6:BA:83:59:B7:6E:52:1C:8E:BA:E0:43:FF:90:98:06:C0:C7
            X509v3 Authority Key Identifier:
                keyid:9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:41:90:4a:38:78:04:b6:5b:de:30:f3:a2:0f:46:5a:09:c0:
         d0:07:17:ce:d7:37:55:76:69:72:52:fb:e0:67:49:72:d3:3b:
         88:cd:6f:5b:e5:ec:ef:93:a9:70:77:ad:30:97:fa:04:a4:76:
         af:52:e9:3c:34:27:82:a5:cb:39:08:09:7d:f9:a7:6e:d5:30:
         37:7f:25:32:19:97:43:f8:48:c2:7e:be:5b:0c:8d:79:8a:bd:
         ea:db:f8:ed:5c:87:86:b4:c4:b7:29:1d:01:7c:2b:87:bd:f1:
         cc:40:94:65:d1:c0:47:0e:a5:5e:7e:dd:39:c3:6a:72:f7:cc:
         d8:b6:7f:31:d2:e7:d7:35:45:01:a4:3d:17:4a:67:ea:39:4f:
         96:5d:cb:01:7e:37:23:41:4d:25:98:56:65:7e:53:4f:4e:1b:
         13:2f:8c:c9:8e:1c:e6:f5:6d:9a:9f:44:75:b1:c3:49:ca:c0:
         0b:08:2c:c9:81:a3:46:12:49:2a:b7:05:45:ed:5d:f7:7a:1a:
         fa:2c:80:d4:63:f9:dc:6c:9d:71:12:03:2b:cd:44:ee:a1:9f:
         f1:45:01:2b:21:92:75:17:bb:f1:49:d1:0d:d5:07:23:d6:cd:
         f8:e8:67:dc:3c:af:c2:e8:04:db:90:85:ee:da:45:49:f6:be:
         d2:d2:28:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:04 2024 by rpki-client on console-fra.rpki-client.org