Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File:                     Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier:          JlZilYNnKM3fHo9j7N48DtTieiw7zrNuM85z56etaBc=
Subject key identifier:   D8:FA:E9:05:B3:37:91:A3:FB:33:54:BA:F8:FC:5B:E6:5B:09:0D:2A
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer:       /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial:       018F551306E11D5F22326D572E81CDAF9B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number:          115A
Signing time:             Tue 07 May 2024 22:01:01 +0000
Manifest this update:     Tue 07 May 2024 22:01:01 +0000
Manifest next update:     Wed 08 May 2024 22:01:01 +0000
Files and hashes:         1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: mVNfIfK1D6vylyhmgwThcMHL1PsYI0Tj1L+8VDfnx9c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:13:06:e1:1d:5f:22:32:6d:57:2e:81:cd:af:9b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
        Validity
            Not Before: May  7 22:01:01 2024 GMT
            Not After : May  8 22:01:01 2024 GMT
        Subject: CN=d8fae905b33791a3fb3354baf8fc5be65b090d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:05:8f:c2:c5:e6:5b:9c:4f:9c:d5:27:0e:3f:
                    99:42:1d:96:c9:5d:7f:14:57:30:cc:63:a8:2b:3e:
                    21:44:53:27:99:24:21:6c:6c:be:a9:36:19:2f:64:
                    a1:aa:f1:7b:5a:0e:4e:7b:15:1c:bb:0c:bf:bd:b0:
                    72:d5:d2:ba:d0:17:07:68:99:b8:cc:e5:c6:0e:e1:
                    1c:37:55:6c:c8:25:e5:c2:53:66:7e:30:f8:4a:bc:
                    86:f4:d7:42:c6:0b:89:8e:e6:df:7d:5e:05:08:0a:
                    05:48:2e:8d:47:39:53:88:97:2a:a6:7f:2c:21:41:
                    c4:13:62:2e:d1:a8:be:71:e2:a8:8f:43:66:f7:24:
                    29:24:fe:3a:77:b0:c8:6b:12:68:d1:8d:86:c8:75:
                    f6:8c:7e:69:b4:fd:61:a3:d7:81:20:05:7e:16:bf:
                    60:4c:ac:4d:d8:46:9b:ff:aa:b6:21:36:be:c6:5e:
                    33:0f:e0:94:50:75:71:e7:8c:1e:a0:a3:66:c8:d1:
                    cb:f0:53:e4:25:fe:4f:de:2c:29:8c:35:94:9a:c8:
                    41:49:9e:86:49:41:c4:fd:f6:65:44:b6:de:f0:d9:
                    4c:a5:d7:6a:3d:cc:d6:ec:bf:63:48:b4:e0:b7:8f:
                    e4:7d:9e:aa:1d:6d:fd:e7:0d:17:d9:0e:bc:7d:4a:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FA:E9:05:B3:37:91:A3:FB:33:54:BA:F8:FC:5B:E6:5B:09:0D:2A
            X509v3 Authority Key Identifier:
                keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:0d:b9:56:36:7e:fb:e3:f1:22:db:84:d3:f7:39:7b:f3:
         f7:07:fe:c2:4b:a9:d9:f1:f0:df:e4:31:28:a9:26:cd:53:a9:
         93:02:ca:ba:05:ec:e6:81:31:3c:19:62:59:5d:2a:5b:a0:01:
         d4:04:69:f5:c0:50:e8:c3:3b:c9:e7:8d:f3:aa:26:f3:5b:6d:
         05:5b:6a:6f:27:e7:fe:ec:84:94:73:cc:1c:7d:e6:12:f2:f1:
         94:f3:f9:62:ae:cf:ac:47:d5:01:dd:95:9c:b6:0b:5e:8f:e2:
         4b:19:6c:58:6c:e7:fe:7b:fc:c4:4d:56:19:4a:d5:7c:04:ff:
         b2:01:7b:33:33:56:e1:45:3b:43:fe:7f:eb:cb:f5:38:84:15:
         50:8f:4a:68:e3:fb:6a:3a:6a:05:33:67:e2:99:ef:fb:41:e9:
         c8:fa:6f:87:b9:99:ef:a3:87:07:a5:e7:90:ab:86:33:ee:d2:
         42:25:ca:0a:ce:da:97:9c:41:cd:d7:d0:ae:fa:2b:70:3e:12:
         40:44:6e:88:de:5d:3c:c0:27:80:d0:93:e4:ba:17:2e:67:1c:
         b1:04:af:c2:f7:71:5c:c8:96:22:54:97:02:59:20:6a:cd:af:
         fb:ab:62:f6:9b:35:99:2c:b4:54:5d:fb:1f:ca:e3:f6:22:6d:
         53:4a:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:25:38 2024 by rpki-client on console-fra.rpki-client.org