Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File:                     8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier:          /KcMRhR3O2pezY0ZYqHo0UO6qS79vie0HOKFj6pCbBQ=
Subject key identifier:   8A:01:72:5D:29:F3:15:0C:18:A8:A6:D0:56:65:D4:6A:98:3D:3C:73
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer:       /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial:       018F4F481000AF8EC568ECBF6293D289DCF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 19:01:13 +0000
Manifest this update:     Mon 06 May 2024 19:01:13 +0000
Manifest next update:     Tue 07 May 2024 19:01:13 +0000
Files and hashes:         1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: a9MVOEXDvHc7G4Swp9iaggzP1GWvoOz/4hcQNzAT2Qg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:48:10:00:af:8e:c5:68:ec:bf:62:93:d2:89:dc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
        Validity
            Not Before: May  6 19:01:13 2024 GMT
            Not After : May  7 19:01:13 2024 GMT
        Subject: CN=8a01725d29f3150c18a8a6d05665d46a983d3c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a5:74:23:65:58:00:db:f2:3b:3c:42:65:3b:
                    ac:19:63:99:c1:7e:98:b1:53:b9:56:14:52:aa:ca:
                    0e:28:80:70:7b:a2:12:52:11:fc:5d:c3:09:6d:99:
                    a9:62:3a:de:0c:80:4b:81:e6:4a:e3:be:1c:80:ff:
                    5d:a5:40:ff:64:f1:f3:ec:1f:d3:87:37:2e:12:4b:
                    14:a0:e2:c2:d6:ab:ca:0c:d7:52:db:c9:dc:66:6e:
                    dc:ac:d4:7c:01:26:a5:0b:e1:01:43:dd:1a:ff:21:
                    df:0e:78:3f:b1:2e:13:71:1a:a3:95:10:23:d3:e3:
                    20:f4:84:68:e1:e2:90:6f:af:b7:d6:b5:a6:4b:5b:
                    4a:00:0f:f6:e1:0f:c9:fb:3c:9a:75:12:89:41:a0:
                    a3:de:d0:fe:b8:ac:20:45:74:82:b9:1e:8e:2f:3b:
                    2b:c0:e0:66:5e:03:1b:0f:55:53:04:86:fd:d7:f6:
                    57:38:a9:31:0a:e6:0b:10:64:f2:38:84:9e:4a:4f:
                    b1:0f:3b:58:56:10:71:64:92:97:ff:5d:e7:23:89:
                    63:40:19:1e:c7:ef:29:6c:7b:85:f5:12:30:c3:0c:
                    42:d7:32:f3:3c:8f:43:4f:e3:13:5d:08:e8:93:7e:
                    a1:d0:b0:03:7d:e7:a1:b1:fb:c7:f7:c5:13:9f:1e:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:01:72:5D:29:F3:15:0C:18:A8:A6:D0:56:65:D4:6A:98:3D:3C:73
            X509v3 Authority Key Identifier:
                keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:37:53:c9:61:fd:ea:b3:d9:55:92:c2:57:d0:cb:8c:2e:69:
         de:52:08:b0:bc:da:3e:bb:86:de:20:8e:ee:60:49:8e:27:66:
         e2:61:67:5d:dc:f8:ef:4c:cf:5d:00:ae:87:19:b7:c2:a5:44:
         bb:be:1b:53:1b:f2:f5:ee:c7:b3:76:6d:e3:66:b4:c6:78:15:
         05:f2:f4:7f:ee:78:f1:9f:c8:df:91:33:4d:b5:ad:10:99:86:
         63:9d:00:49:3a:b8:c6:d3:e2:af:c6:aa:4f:31:e2:55:a1:76:
         3c:c3:98:17:1c:3a:da:02:b8:a1:2d:73:12:33:db:7a:ed:d4:
         84:c8:f9:12:8d:d7:ec:25:40:d9:6a:cb:e7:82:4b:4b:d6:6a:
         19:e3:b8:2d:5e:47:35:62:a4:b1:46:c0:4b:76:41:4f:5b:95:
         05:3e:96:00:36:5c:17:b0:f4:07:d6:68:a6:e8:67:5a:06:08:
         a8:a9:e0:65:09:ba:86:e2:17:11:2b:e5:f2:2a:b6:70:ba:cb:
         4a:db:d0:1c:a5:4c:65:78:26:3e:28:25:43:63:eb:71:2b:0e:
         c5:81:88:a2:42:24:5c:cd:7d:b5:e5:21:55:4a:a2:2d:9b:a5:
         b1:46:db:3f:e0:17:fe:7f:dd:6c:7c:85:52:c0:ff:f2:f1:6f:
         d5:32:1b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:42:36 2024 by rpki-client on console-ams.rpki-client.org