Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File:                     0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier:          fcsh0GVYmbzQiFmAK/zshrYfCp9CC4Ksp4+pEP+xLig=
Subject key identifier:   3B:04:33:44:D1:17:67:A2:51:14:C1:85:C7:89:5A:37:F7:05:CF:3D
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer:       /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial:       018F546EE9F889836F6175DF219C5AE311DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number:          06F1
Signing time:             Tue 07 May 2024 19:01:46 +0000
Manifest this update:     Tue 07 May 2024 19:01:46 +0000
Manifest next update:     Wed 08 May 2024 19:01:46 +0000
Files and hashes:         1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: dtMKv7x+AErt6olet6RF/vd3CONS2ZEx6Uaru0xJhmI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 19:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:6e:e9:f8:89:83:6f:61:75:df:21:9c:5a:e3:11:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
        Validity
            Not Before: May  7 19:01:46 2024 GMT
            Not After : May  8 19:01:46 2024 GMT
        Subject: CN=3b043344d11767a25114c185c7895a37f705cf3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:59:4d:b7:a2:b9:d4:85:97:0b:62:e2:5d:
                    3d:f0:50:e9:88:fd:5c:13:ca:53:04:39:57:0f:71:
                    02:58:b4:21:0d:58:88:c5:2b:77:3b:71:83:ec:0c:
                    ca:82:af:70:c9:19:94:13:a2:a3:a6:cc:89:15:b8:
                    bd:d6:95:64:af:a4:ad:2b:75:83:5f:02:3c:78:61:
                    06:6e:b9:64:a2:bb:09:7c:ba:d5:30:18:b8:dc:48:
                    5a:ce:79:95:61:1d:b3:bc:9d:ed:db:e3:c3:47:8e:
                    c5:55:eb:ac:08:e8:21:06:fd:e6:34:e1:ec:4c:73:
                    31:3b:b7:6e:f0:f4:c4:c4:0d:a7:f3:2e:ed:0d:bf:
                    eb:94:75:f5:16:fb:f3:bc:ea:d3:04:33:39:5f:14:
                    1b:1d:9f:a1:d7:41:d1:cb:06:f8:4d:cf:25:31:78:
                    46:31:05:c1:32:86:1c:5f:5a:90:3d:aa:6e:76:a7:
                    7d:88:54:6e:f5:f1:b2:5f:5c:e1:5b:5d:ad:d8:9d:
                    e4:d3:a5:3f:91:ea:a2:24:b5:18:fb:3e:5c:f5:06:
                    b4:ae:62:5e:ca:67:ac:a3:84:2e:97:d4:b4:66:5f:
                    93:20:2d:f1:f8:7c:09:0e:32:2c:92:e8:15:bf:94:
                    37:d8:23:a0:5d:d4:55:28:57:ed:33:39:e3:a5:b5:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:04:33:44:D1:17:67:A2:51:14:C1:85:C7:89:5A:37:F7:05:CF:3D
            X509v3 Authority Key Identifier:
                keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:dd:4d:69:8d:22:39:92:5c:db:bd:2e:f3:b7:5e:48:b1:86:
         bb:eb:47:b3:35:e4:d9:dc:8f:de:29:de:ef:f3:29:bf:18:e0:
         c2:8c:17:56:16:48:bc:37:3a:91:9f:20:ec:60:06:ca:ce:ae:
         4b:5e:1f:02:3d:e5:a8:cd:8d:b8:83:63:aa:c2:ba:c9:6a:d0:
         2e:12:71:b3:b7:19:fe:fd:75:3f:73:68:c7:ed:42:09:5e:e7:
         e9:e5:20:2c:a4:e5:45:99:5f:38:18:0d:88:a6:12:d3:90:63:
         d5:18:88:1c:c8:e8:97:67:f4:98:c4:16:97:ce:32:91:55:16:
         1e:51:b8:63:f9:66:aa:fe:db:2f:eb:5b:96:11:78:a3:5c:39:
         67:52:43:a3:90:89:e0:28:f3:a4:7b:da:f9:4e:c8:62:48:18:
         b5:25:69:08:24:fe:d7:e2:ad:5d:79:10:c8:45:4c:d8:d0:32:
         a9:34:52:e4:6b:e1:9c:2e:80:c0:f2:bb:c5:1c:f3:52:06:60:
         22:91:12:65:da:96:28:9e:97:05:5a:78:05:55:77:ca:5e:e9:
         e4:a7:a5:4a:27:b2:94:a7:a7:c4:21:62:38:b7:7e:e6:6d:f1:
         4c:bf:68:06:53:02:20:fc:b5:5e:7a:a9:68:34:f7:43:e5:7c:
         df:9e:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:35:13 2024 by rpki-client on console-ams.rpki-client.org