Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File:                     tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier:          b7cq8p6T06i481X+iniM4fjVNkoeuAkIer6MGjgtRbY=
Subject key identifier:   70:7B:5A:E7:B7:B6:7D:BB:19:04:93:B0:CF:1B:A9:02:49:81:35:32
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer:       /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial:       018F8635B2784B7F9F1E956E26525856CE3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number:          0EC4
Signing time:             Fri 17 May 2024 11:00:16 +0000
Manifest this update:     Fri 17 May 2024 11:00:16 +0000
Manifest next update:     Sat 18 May 2024 11:00:16 +0000
Files and hashes:         1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: /sj8L/P3/RID46aK52w9hiHiGsbkUVoJqGxjJaSUkhg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:b2:78:4b:7f:9f:1e:95:6e:26:52:58:56:ce:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
        Validity
            Not Before: May 17 11:00:16 2024 GMT
            Not After : May 18 11:00:16 2024 GMT
        Subject: CN=707b5ae7b7b67dbb190493b0cf1ba90249813532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:31:0f:99:ee:db:a6:03:47:92:43:4b:c2:ac:
                    50:03:13:3a:91:b3:3e:77:9e:43:15:b8:63:eb:01:
                    1b:21:d4:ec:06:a4:df:08:88:28:b1:16:ce:96:31:
                    b7:ac:e2:95:3f:a0:c6:e3:5d:c6:2f:1a:65:28:3f:
                    80:a0:16:4f:9a:22:ff:fe:96:59:f8:b1:c7:88:ff:
                    69:ad:46:41:b4:ea:15:71:42:64:57:7b:a8:e7:db:
                    0e:6f:6c:8b:a9:df:ba:cb:7f:88:25:9c:ae:1e:b0:
                    01:2f:ac:92:60:e3:26:61:a3:60:94:70:74:1c:27:
                    7a:f9:63:41:b5:c1:ee:a9:1f:9a:92:55:43:75:16:
                    bb:de:79:ed:0a:32:32:26:fb:f1:7f:c5:38:9b:7d:
                    df:02:42:f7:ea:8e:e9:f3:9a:e7:20:1d:8f:f7:db:
                    23:88:e6:83:b5:d3:06:41:a2:b3:d5:9c:23:68:e6:
                    a1:ab:80:0b:bf:bf:c0:41:cd:79:da:72:30:e8:0d:
                    78:9f:19:fe:d1:85:25:67:10:1b:90:dd:cc:94:28:
                    e0:d7:29:c1:49:29:44:81:56:d8:21:5b:a0:8c:fe:
                    d3:33:c8:e9:9d:8e:6f:a8:d3:01:70:0e:af:a1:c8:
                    19:79:65:db:d4:c6:54:cb:13:17:b2:4a:cf:e4:25:
                    09:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7B:5A:E7:B7:B6:7D:BB:19:04:93:B0:CF:1B:A9:02:49:81:35:32
            X509v3 Authority Key Identifier:
                keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b6:11:2f:0c:0d:fd:08:cb:7b:0a:be:af:96:a4:26:12:79:
         ba:03:42:3b:54:75:bd:99:0a:7e:9e:51:69:7d:6f:71:9a:62:
         d9:5a:a4:66:35:04:22:76:d1:0f:f2:ca:93:eb:1a:a6:c2:9e:
         7f:a0:f7:4e:bf:34:55:c8:80:7f:e0:2a:8f:15:64:3f:fd:04:
         ee:37:82:fa:2d:aa:d3:23:d8:40:9d:b1:26:a5:2f:ae:e3:aa:
         8d:4f:f7:6a:30:61:93:67:49:e0:a8:b8:40:f2:f3:0e:01:15:
         55:2f:fc:50:fd:e7:ac:2c:87:96:22:41:22:94:25:1a:d1:a3:
         90:f2:3c:40:c8:d5:fc:be:a0:ca:2b:d6:e2:16:37:a7:05:ff:
         c1:53:97:58:d3:f1:78:b2:36:45:73:4a:6c:97:9a:51:54:8f:
         8a:74:a3:e2:f1:77:37:52:7c:2b:6f:80:98:07:ce:0e:a7:c7:
         3e:d3:0e:ce:f1:c7:b4:d9:93:da:f4:d6:a5:6d:76:ea:bf:1f:
         fc:c2:cc:4b:aa:1b:4b:39:2e:d9:31:a2:94:19:7e:50:dd:a3:
         ad:ea:d1:1a:fe:01:1d:75:b8:2b:ef:1d:63:a2:10:c9:6f:37:
         1d:3f:9a:20:6d:72:ce:6b:d0:40:08:4c:e6:5c:3a:69:f5:db:
         d6:05:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:05:08 2024 by rpki-client on console-ams.rpki-client.org