Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File:                     tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier:          Ac7wQii+4IPJvbZ56b12qd2WKEixXq6j6LnBMXGdgkk=
Subject key identifier:   05:3B:36:4A:B4:99:75:33:9E:0E:93:12:40:35:85:7C:86:DD:DD:D7
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer:       /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial:       018F874996737A6A180139FC366BA65BEFDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number:          07D5
Signing time:             Fri 17 May 2024 16:01:37 +0000
Manifest this update:     Fri 17 May 2024 16:01:37 +0000
Manifest next update:     Sat 18 May 2024 16:01:37 +0000
Files and hashes:         1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: ZC2iNqaAT0C3NE71dectEKyD/LLSBmwKC0IE0KALnhc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:96:73:7a:6a:18:01:39:fc:36:6b:a6:5b:ef:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
        Validity
            Not Before: May 17 16:01:37 2024 GMT
            Not After : May 18 16:01:37 2024 GMT
        Subject: CN=053b364ab49975339e0e93124035857c86ddddd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c3:2d:4d:63:e6:31:7f:de:fe:49:8c:88:bb:
                    4c:b0:d9:60:25:4b:69:44:fc:95:fc:d8:83:1b:95:
                    4b:5d:38:a6:db:03:2c:bc:18:12:0d:d2:b4:46:10:
                    b4:15:c4:47:e7:bc:e6:62:11:0f:a1:c7:94:c5:69:
                    a6:a8:c1:f6:6c:af:76:13:73:fb:42:de:68:35:06:
                    7f:b0:c3:57:02:fd:d1:b0:2f:03:11:01:71:b6:09:
                    33:62:59:d0:ba:eb:d2:aa:62:9c:53:97:c9:8c:76:
                    1e:b3:59:ed:08:e9:4a:b3:68:3e:01:c7:05:b2:1c:
                    cb:f0:f1:95:cf:83:69:06:8a:e8:4c:6e:a5:06:2f:
                    1d:57:51:5b:c8:df:08:86:49:c2:bf:be:01:2a:14:
                    89:15:21:fb:88:1b:53:9f:bd:52:ec:68:a7:1d:db:
                    ea:fa:aa:c1:e9:98:d6:6f:d6:69:a7:47:02:3f:e5:
                    65:26:75:d9:4f:ae:ad:3b:33:e5:23:a7:18:1d:c0:
                    af:71:c7:25:ff:32:ec:2f:a3:b6:58:74:75:0f:46:
                    6b:e5:ef:20:c8:08:0e:28:6b:17:be:fc:64:a9:90:
                    40:67:47:2d:e1:e8:5c:52:a5:3c:b2:f3:4d:5d:6f:
                    44:ec:69:d7:ad:43:1a:33:40:7f:ce:3e:a1:ac:56:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3B:36:4A:B4:99:75:33:9E:0E:93:12:40:35:85:7C:86:DD:DD:D7
            X509v3 Authority Key Identifier:
                keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cb:f1:9a:c7:20:6e:89:dc:91:59:eb:7c:c8:78:ff:1d:6e:
         55:a0:0e:6d:44:ea:08:a4:32:06:2e:15:7f:7b:fd:e0:f2:1e:
         0d:bf:f8:3e:52:1f:9a:ac:db:89:58:15:1b:f8:10:89:04:34:
         3f:84:1b:1d:7b:81:73:69:97:ea:3c:04:5f:0d:41:bf:a2:5f:
         0b:42:ae:6f:57:e6:7c:4f:6c:76:00:d7:b2:0a:07:dd:09:ec:
         e9:dd:a9:eb:ab:91:b2:d5:cf:c5:3e:1d:26:af:18:04:67:4d:
         5b:06:3a:a6:02:f5:dc:e5:b9:e1:9f:b9:d3:db:da:ec:c8:f1:
         9b:e4:12:d1:9d:80:28:18:95:ef:4b:93:2e:e8:90:4d:2a:64:
         df:b7:73:32:47:ec:b2:76:86:a9:bb:9b:fc:f3:4b:b5:cc:60:
         50:c5:99:56:0b:01:2f:9b:fc:dd:ab:0c:7c:5e:50:1f:29:8f:
         41:20:06:4d:2e:ce:21:f1:7d:54:b8:f1:e9:ca:ca:f4:d2:6d:
         4e:b3:34:56:84:77:4c:e8:62:3e:55:f3:f9:f9:83:77:af:e8:
         20:98:ef:ce:ab:6f:c0:33:28:85:de:6e:36:5b:d0:a6:ea:29:
         3f:92:8e:a4:89:9e:26:0b:98:c6:da:8a:df:0f:d5:cf:5a:df:
         fd:42:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:45:26 2024 by rpki-client on console-fra.rpki-client.org