Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft
File:                     giKx_lqaAWNQKFrAeI08yrPrORk.mft (raw, json)
Hash identifier:          tyaroaWRtOgwLYjOwnMVly6IjYuJlpoXP2Ti6Zgv1ns=
Subject key identifier:   FF:CE:7E:63:AF:FD:35:39:53:9A:EC:A0:EF:1E:B2:F3:A3:6E:E7:CB
Authority key identifier: 82:22:B1:FE:5A:9A:01:63:50:28:5A:C0:78:8D:3C:CA:B3:EB:39:19
Certificate issuer:       /CN=8222b1fe5a9a016350285ac0788d3ccab3eb3919
Certificate serial:       018F87B6AAEE0FF6B885E09BCA6661DBB635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/giKx_lqaAWNQKFrAeI08yrPrORk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft
Manifest number:          02C0
Signing time:             Fri 17 May 2024 18:00:46 +0000
Manifest this update:     Fri 17 May 2024 18:00:46 +0000
Manifest next update:     Sat 18 May 2024 18:00:46 +0000
Files and hashes:         1: giKx_lqaAWNQKFrAeI08yrPrORk.crl (hash: Bo4UMoC4WwGAVod5PLOylaBs2EALpB+V2GEwFYwmr2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/giKx_lqaAWNQKFrAeI08yrPrORk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:aa:ee:0f:f6:b8:85:e0:9b:ca:66:61:db:b6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8222b1fe5a9a016350285ac0788d3ccab3eb3919
        Validity
            Not Before: May 17 18:00:46 2024 GMT
            Not After : May 18 18:00:46 2024 GMT
        Subject: CN=ffce7e63affd3539539aeca0ef1eb2f3a36ee7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:43:74:cb:f3:8b:5e:27:10:dc:ef:22:b9:
                    ca:54:bf:d9:1e:a2:be:a0:10:b0:4a:fc:60:f6:0f:
                    09:ab:a9:f7:4e:74:bb:32:3c:6a:9f:f8:c3:56:a4:
                    06:48:5d:91:e0:6f:38:2f:b6:fa:97:ff:77:2e:0b:
                    67:a9:68:eb:ee:29:90:ac:99:0a:dc:57:f6:71:80:
                    b6:35:81:dd:d6:52:58:e5:5d:ef:a9:f8:5d:ac:e5:
                    a8:3d:d0:4d:29:74:f1:15:f7:cf:29:82:f1:88:6d:
                    b1:61:5b:fd:26:54:7a:ba:f4:f0:0f:c8:e6:60:24:
                    6d:75:ef:b1:47:f6:fd:d1:7a:56:d7:4c:f9:b6:a2:
                    f6:80:1b:72:9f:d8:78:95:e9:f0:a8:2f:ea:fc:e1:
                    af:65:14:7e:49:da:d4:09:b9:38:f6:ad:60:de:dd:
                    03:a4:d7:33:b2:ef:26:0a:dd:3e:9f:8c:2c:52:9c:
                    4c:38:7b:45:6e:f6:ea:7d:ad:bd:74:76:ca:8e:e6:
                    9e:23:a8:dc:48:24:b5:a7:54:df:ff:2f:eb:14:28:
                    db:20:66:4b:24:e2:d8:76:ad:61:bd:20:6c:2c:ea:
                    fa:7d:c5:c9:bd:61:cd:26:38:6d:ef:fd:c1:be:78:
                    63:a2:83:6e:3c:7b:d9:e4:cb:b6:19:d9:e7:01:31:
                    aa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CE:7E:63:AF:FD:35:39:53:9A:EC:A0:EF:1E:B2:F3:A3:6E:E7:CB
            X509v3 Authority Key Identifier:
                keyid:82:22:B1:FE:5A:9A:01:63:50:28:5A:C0:78:8D:3C:CA:B3:EB:39:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giKx_lqaAWNQKFrAeI08yrPrORk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:dd:f0:0a:1b:9f:ba:84:35:3d:bb:93:f2:a5:b2:cf:d4:4a:
         85:b3:03:0a:aa:50:f8:e2:80:d5:af:a2:0e:4f:f6:91:ee:78:
         04:44:bc:f4:cc:e7:42:e8:6e:22:d4:06:cc:94:5b:87:6b:36:
         6d:93:ba:fb:9a:2a:f6:50:a2:3d:2a:7b:2d:35:9c:82:9d:65:
         6e:b6:a9:fa:73:e0:94:fb:30:9f:77:1a:80:3c:67:9a:f3:95:
         8d:ef:da:d6:36:bb:c3:31:b0:d9:e6:90:ed:a3:dc:cc:af:cb:
         96:b7:c1:f9:4b:cf:dc:5b:c0:9d:51:9c:6f:9e:cc:86:ab:f0:
         a8:f7:b8:00:68:c3:ed:1b:f3:2c:2d:b1:dc:8b:19:b7:58:89:
         39:7d:da:43:f6:0e:c4:70:b7:59:ef:34:9f:79:05:83:6d:61:
         77:26:a2:83:87:c0:a0:64:27:4e:42:ca:a5:ab:54:e0:88:83:
         3a:c0:3d:fb:f2:ac:0d:71:ff:e5:b4:22:82:4d:5e:ae:97:8c:
         98:6e:c0:48:86:3f:9f:ba:e1:74:22:35:03:00:73:9f:7f:2d:
         75:16:b9:70:ca:d1:e3:d2:e7:ca:64:bb:23:a5:88:fa:04:11:
         a2:2b:75:a4:5c:94:59:f4:1b:f8:da:a8:81:ac:46:af:a3:cd:
         5b:b8:01:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:48 2024 by rpki-client on console-ams.rpki-client.org