Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
File:                     t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json)
Hash identifier:          gMymrgQ2f16VyaCkssT7Hs9no/2ZLyidnT4b0bD4KN4=
Subject key identifier:   2C:28:79:AB:0A:D8:6C:6C:32:7B:28:7B:0E:09:3B:57:A6:9C:A2:30
Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
Certificate issuer:       /CN=b77452cd2535e3e9357dff881885ead91490a463
Certificate serial:       018F87B648C186C0B20358243E90CF608AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
Manifest number:          012D
Signing time:             Fri 17 May 2024 18:00:21 +0000
Manifest this update:     Fri 17 May 2024 18:00:21 +0000
Manifest next update:     Sat 18 May 2024 18:00:21 +0000
Files and hashes:         1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: p8btviGHa+UUX/lbi1MGLeXTeKwUJUVTVHN1pewca6M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:48:c1:86:c0:b2:03:58:24:3e:90:cf:60:8a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463
        Validity
            Not Before: May 17 18:00:21 2024 GMT
            Not After : May 18 18:00:21 2024 GMT
        Subject: CN=2c2879ab0ad86c6c327b287b0e093b57a69ca230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:ee:44:dd:3d:f3:66:0c:52:e4:5a:b0:61:
                    d2:6c:1b:ea:d2:70:88:2a:9b:62:28:3d:e0:ab:e9:
                    d1:c7:a6:76:91:d6:5a:ff:23:76:ae:af:a3:b3:3b:
                    b8:05:78:6e:7a:4f:69:8c:22:7f:1c:35:8a:13:ba:
                    dc:a8:f6:cb:f4:93:a4:e8:1b:6f:55:65:e5:47:7d:
                    3f:45:8b:36:dd:8f:25:85:62:4c:55:49:96:aa:8c:
                    ef:16:5a:5a:00:4f:02:a8:a0:0a:b1:5a:a0:0c:79:
                    88:a0:d8:e2:ab:5e:1d:a0:9b:e8:4c:66:dc:26:4c:
                    d9:76:13:41:be:1c:5d:11:59:42:09:9b:34:fc:08:
                    89:6e:19:fa:9f:d3:d2:46:58:4c:5f:f3:ae:de:7c:
                    61:a6:fa:2f:52:fe:97:62:9a:19:d6:54:4c:40:b1:
                    ac:8c:6c:8d:1f:42:56:76:a9:79:ba:ab:0d:d8:96:
                    a4:b9:05:07:f8:e8:c0:b8:08:00:15:a8:d6:8d:72:
                    5c:2c:61:4c:88:43:0e:4f:b0:dd:9e:21:10:37:7f:
                    3e:27:e5:ad:b8:3c:4b:bf:08:dc:a7:46:80:28:cd:
                    dd:73:4e:ca:c2:f3:cf:d6:00:ed:19:07:0b:c5:99:
                    4a:f7:b1:f5:1d:ef:0b:11:45:a5:07:c9:4e:03:41:
                    87:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:28:79:AB:0A:D8:6C:6C:32:7B:28:7B:0E:09:3B:57:A6:9C:A2:30
            X509v3 Authority Key Identifier:
                keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:66:f9:bb:a9:22:ff:25:da:84:91:eb:3d:d3:6f:9c:ca:40:
         1b:68:b7:cb:19:d1:71:94:d3:52:f6:35:22:f2:14:d4:43:5e:
         8c:aa:9c:3e:c0:a6:a3:8c:9d:85:8d:54:67:3a:f2:bb:4a:cb:
         d3:e1:0c:d1:ab:6e:26:b2:30:c6:3a:bb:5b:52:43:85:0c:29:
         9c:ac:25:74:e0:20:d0:96:02:69:b7:bb:d9:a4:fa:b5:f6:d0:
         1c:3d:65:17:37:48:d2:3e:30:2c:87:d5:20:2b:32:c9:98:28:
         fd:b9:eb:56:9a:5f:52:c4:03:d5:13:06:32:4b:2c:00:6e:10:
         46:24:bb:1d:12:52:60:94:11:54:93:d5:7b:4b:ba:ea:a0:a0:
         8f:b8:cb:f6:9e:fd:fe:9c:8e:01:ea:09:65:3e:73:ef:84:58:
         db:41:77:89:d3:9f:73:73:79:b6:25:f7:6c:73:9a:8e:75:37:
         1b:b5:df:b2:80:1b:d9:ac:db:69:6f:0b:d6:67:6c:6e:2f:b2:
         d0:74:2d:cf:4e:78:58:1e:cb:fc:a9:3a:bf:00:e0:8b:c3:60:
         68:b7:46:be:4c:c5:bf:ff:09:2f:78:6c:0d:10:fa:1a:e8:7b:
         d3:09:bd:6f:e0:2c:8c:77:33:5f:24:27:d2:34:c3:02:53:24:
         4f:1f:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:00:00 2024 by rpki-client on console-fra.rpki-client.org