Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
File:                     T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft (raw, json)
Hash identifier:          0kyNw1SfTZqpN8Iqct9ecpj3fMiepi3V2jq16oYDZ3U=
Subject key identifier:   E1:79:78:64:5A:A5:7E:CC:AC:FD:9C:49:8C:DB:05:6A:23:7B:2C:FC
Authority key identifier: 4F:5B:CB:FB:D0:08:45:8A:09:BB:14:D1:AC:9F:03:21:72:E3:B9:00
Certificate issuer:       /CN=4f5bcbfbd008458a09bb14d1ac9f032172e3b900
Certificate serial:       018F885B282CD382D5E4F976EC4465A61D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
Manifest number:          FA
Signing time:             Fri 17 May 2024 21:00:26 +0000
Manifest this update:     Fri 17 May 2024 21:00:26 +0000
Manifest next update:     Sat 18 May 2024 21:00:26 +0000
Files and hashes:         1: T1vL-9AIRYoJuxTRrJ8DIXLjuQA.crl (hash: 1Xxw80JUFSBEeZRuYoAcmg7pkH2D6LFrCsL/FAKdRbg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:28:2c:d3:82:d5:e4:f9:76:ec:44:65:a6:1d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f5bcbfbd008458a09bb14d1ac9f032172e3b900
        Validity
            Not Before: May 17 21:00:26 2024 GMT
            Not After : May 18 21:00:26 2024 GMT
        Subject: CN=e17978645aa57eccacfd9c498cdb056a237b2cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:73:37:33:18:46:53:a4:5c:9e:84:24:38:
                    00:27:ae:d1:27:c5:70:4a:60:66:a0:64:7e:85:18:
                    48:a7:40:ce:3b:78:84:7b:c6:e4:88:f4:7c:ec:9b:
                    c4:db:cb:26:93:65:0a:90:1a:cd:c2:8d:41:84:2f:
                    66:de:80:33:cb:f7:40:7e:6b:44:1e:f9:ed:50:1c:
                    8d:a7:10:cd:b2:14:b0:3c:72:2a:45:e0:8d:44:10:
                    7c:e3:0c:ad:f1:14:2e:7c:00:19:27:76:27:7e:12:
                    48:10:ce:61:df:4f:3a:0c:6c:2e:06:c9:62:42:af:
                    67:6b:f7:88:a7:45:bc:09:73:57:37:b5:19:77:42:
                    69:f1:d0:5e:77:07:03:ab:48:ab:80:12:ce:01:88:
                    29:b5:60:d1:3f:43:d1:fb:33:04:a6:fb:b5:7d:41:
                    77:d3:d2:4f:ad:6b:04:fc:f8:96:72:be:d5:8c:4f:
                    8c:06:07:a9:4e:af:69:e0:04:f5:4d:84:30:a6:fd:
                    47:c6:39:4e:bd:43:86:34:8b:62:ee:26:ae:f4:62:
                    ee:27:cd:7a:60:d3:fa:10:9f:9a:a8:28:39:90:40:
                    d5:df:c8:2c:36:a3:de:2a:9f:7e:db:73:f0:7f:9e:
                    50:29:73:ac:a0:4a:bb:ba:8c:bb:29:38:33:43:28:
                    9c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:79:78:64:5A:A5:7E:CC:AC:FD:9C:49:8C:DB:05:6A:23:7B:2C:FC
            X509v3 Authority Key Identifier:
                keyid:4F:5B:CB:FB:D0:08:45:8A:09:BB:14:D1:AC:9F:03:21:72:E3:B9:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:75:72:56:ad:03:55:58:bc:b5:ff:13:e1:46:0d:79:ba:57:
         19:55:2c:15:f9:79:7c:83:14:13:91:36:91:5a:21:a0:e6:e0:
         52:aa:77:26:8c:77:3b:ec:d6:53:cb:cd:15:25:b5:7c:37:d4:
         86:59:ba:2e:33:6b:80:a4:92:ed:4a:90:cb:0b:41:d7:02:2b:
         23:06:b2:b2:bf:07:1e:af:91:94:0d:32:09:cd:59:4d:2b:34:
         fc:4b:12:18:30:fb:80:b8:b7:19:52:fe:36:b6:a8:c6:3c:da:
         7c:a2:01:ac:69:7b:a0:a8:ff:90:2e:d8:c8:3b:82:2f:48:00:
         7d:81:1f:ac:d6:be:83:af:d0:35:40:24:41:21:6d:2a:b3:1e:
         cf:c5:5b:b1:a0:4f:6a:ec:7d:6a:0e:bd:d3:04:c2:a0:9b:4c:
         66:77:f6:17:8d:c2:99:3c:1c:14:1e:6b:cf:6e:5b:bb:73:63:
         3a:dc:62:e6:92:c8:13:cc:c1:51:3c:ca:1d:00:08:a9:d0:dc:
         02:fc:b4:16:df:19:ee:5d:7b:5d:5e:e1:07:df:cf:a7:6a:65:
         4f:59:38:61:db:d4:ee:fa:0c:f4:49:66:f2:33:57:78:a5:ff:
         91:44:8f:06:31:5e:1c:a2:cc:c3:dd:ee:77:a3:e3:be:70:c0:
         07:1d:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:38:53 2024 by rpki-client on console-fra.rpki-client.org