Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.mft
File:                     Ff2K1dRwC4Nmca1mEUZkzzMDt-8.mft (raw, json)
Hash identifier:          TZxo/7fAcfJjUJGTqZmJERRA24uFnubRiRJXGjE6XIE=
Subject key identifier:   04:F6:8E:80:E9:FE:06:3A:C9:DA:A4:E0:B8:D4:A5:BE:63:B9:DC:FC
Authority key identifier: 15:FD:8A:D5:D4:70:0B:83:66:71:AD:66:11:46:64:CF:33:03:B7:EF
Certificate issuer:       /CN=15fd8ad5d4700b836671ad66114664cf3303b7ef
Certificate serial:       018FD29BC1FE3D9307093339EECB4446F7CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.mft
Manifest number:          119F
Signing time:             Sat 01 Jun 2024 07:02:54 +0000
Manifest this update:     Sat 01 Jun 2024 07:02:54 +0000
Manifest next update:     Sun 02 Jun 2024 07:02:54 +0000
Files and hashes:         1: Ff2K1dRwC4Nmca1mEUZkzzMDt-8.crl (hash: Lf8euhHejPSSaRH5f1VGev9VypENFY/ooFk/svdB6oY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 07:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d2:9b:c1:fe:3d:93:07:09:33:39:ee:cb:44:46:f7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fd8ad5d4700b836671ad66114664cf3303b7ef
        Validity
            Not Before: Jun  1 07:02:54 2024 GMT
            Not After : Jun  2 07:02:54 2024 GMT
        Subject: CN=04f68e80e9fe063ac9daa4e0b8d4a5be63b9dcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:53:0c:87:da:54:9d:84:9e:a4:9a:20:35:
                    a6:02:b0:d8:d9:db:47:5a:dc:15:bd:45:ba:c1:60:
                    7b:a0:59:92:69:e6:67:74:b9:6d:fa:28:ba:50:54:
                    6d:1e:9e:1d:e1:30:40:77:5b:d5:4b:58:a9:bf:5c:
                    5e:c1:4c:24:4e:11:d7:41:d7:10:36:b1:7b:28:4b:
                    5c:5a:b9:e8:88:7e:e3:f1:86:b7:fc:cc:7c:39:36:
                    ef:a1:22:77:2c:b6:b1:45:b4:1b:0a:83:dc:ef:08:
                    44:04:a6:7e:be:33:3b:58:86:66:62:e5:2a:e5:8e:
                    bd:81:e7:71:17:33:16:30:bd:07:e9:24:d9:8a:9c:
                    b6:df:2e:41:77:09:fe:ef:65:a8:3d:3a:25:b4:9a:
                    59:69:b6:c7:31:1a:29:32:68:3f:bc:bb:c0:b6:7f:
                    d1:0c:8e:71:c9:14:11:af:d6:8a:58:b2:24:4a:51:
                    a2:18:93:82:29:bc:11:d5:e6:d4:39:31:71:a8:6d:
                    6f:55:5c:1a:39:66:56:f7:79:5f:8c:49:74:3d:c8:
                    60:51:67:4a:b5:21:9d:52:d5:da:25:ab:cf:25:9a:
                    ac:b4:37:3a:58:d4:40:1c:0c:af:57:fd:73:22:10:
                    ac:05:e5:3c:3a:83:c2:40:8a:18:d2:f3:52:db:0f:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F6:8E:80:E9:FE:06:3A:C9:DA:A4:E0:B8:D4:A5:BE:63:B9:DC:FC
            X509v3 Authority Key Identifier:
                keyid:15:FD:8A:D5:D4:70:0B:83:66:71:AD:66:11:46:64:CF:33:03:B7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/204af5-b249-46d0-9126-282f728a8c44/1/Ff2K1dRwC4Nmca1mEUZkzzMDt-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:58:e1:d4:e3:53:82:5b:7e:74:af:bd:de:9a:8a:6a:cd:05:
         81:05:28:b1:d8:44:1b:d6:a1:52:9f:75:08:47:27:19:05:71:
         86:85:86:c2:7d:e1:50:37:3e:d1:97:a1:e8:a5:8a:b0:8b:9d:
         f1:8b:85:f0:11:d4:df:67:32:b6:31:f7:f6:f1:3a:41:37:0d:
         88:63:4c:ae:ab:f0:39:3b:13:6b:ad:66:7e:01:21:c5:f1:45:
         52:89:61:e4:a6:d9:88:e5:6a:c5:07:b6:0f:28:45:6b:cb:9b:
         dc:96:0a:9c:0e:ad:22:e8:ce:0f:ed:3b:25:06:ea:29:15:26:
         5f:74:99:a3:7c:bf:44:a2:84:07:3d:e4:3c:44:80:de:0e:40:
         57:0a:92:02:0f:4f:6c:c3:38:4f:d9:cf:5a:cd:a4:70:a1:97:
         72:99:8c:a5:44:09:13:e6:54:9e:64:6d:a7:8a:c0:3d:7b:db:
         a1:79:17:92:97:92:50:4d:ea:59:de:62:6e:46:0f:43:41:e3:
         e2:f3:99:f0:30:59:bc:68:50:90:6f:2a:d4:93:e2:2d:88:4d:
         f4:9a:83:e4:a3:08:62:31:3f:c4:f8:df:68:83:9d:db:72:e5:
         a1:7c:05:55:a2:c9:72:d7:c3:f9:f0:dd:a0:4c:a7:b1:2e:b5:
         51:c5:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:39 2024 by rpki-client on console-ams.rpki-client.org