Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File:                     b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier:          /9gN/uQNpG0PCaBJBb5gM77Kl3p+I5/t256qAKWBN1Y=
Subject key identifier:   63:00:05:85:FE:80:53:CB:96:FD:CA:74:99:B4:30:E4:AC:E2:5B:0F
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer:       /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial:       018F8748BFE1D405E61BBABFD886FED76B73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number:          0652
Signing time:             Fri 17 May 2024 16:00:42 +0000
Manifest this update:     Fri 17 May 2024 16:00:42 +0000
Manifest next update:     Sat 18 May 2024 16:00:42 +0000
Files and hashes:         1: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: Uju3ackoVCC9llPiR1i4rJRYmhSMKQ6Yq6WyX47P9IY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bf:e1:d4:05:e6:1b:ba:bf:d8:86:fe:d7:6b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
        Validity
            Not Before: May 17 16:00:42 2024 GMT
            Not After : May 18 16:00:42 2024 GMT
        Subject: CN=63000585fe8053cb96fdca7499b430e4ace25b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:49:19:62:a6:59:95:59:b4:f0:20:91:d8:
                    d7:64:1b:fc:c1:20:a7:64:38:c2:dc:95:82:ca:79:
                    fd:bd:bc:9c:33:fe:77:4f:83:cc:56:4e:6f:b7:26:
                    bc:74:a7:5a:18:e2:60:fe:32:84:8f:6a:31:19:29:
                    65:7d:f4:7f:f8:d4:fc:89:05:a6:7c:9e:10:5e:fb:
                    3f:d4:60:76:57:95:6a:28:b4:df:4b:25:fc:9c:79:
                    d4:ce:eb:b9:b4:4f:7f:f9:0b:4b:b7:b5:8b:c0:bf:
                    0d:55:fa:b7:97:eb:2c:12:b9:33:5b:79:9b:9c:f5:
                    d8:11:31:2f:9f:96:36:f1:c8:0e:e9:7f:ab:ab:5e:
                    eb:bd:5a:9d:3d:ec:d9:8d:d6:1e:63:25:06:b1:8e:
                    44:54:51:68:28:39:b5:ba:57:58:24:be:2e:c4:5f:
                    04:03:46:f6:c4:e2:0f:24:b0:1c:d2:64:7d:d1:16:
                    8e:06:99:02:66:ef:23:aa:80:6d:e5:12:b4:5a:f4:
                    e3:0a:20:69:cd:1d:4d:77:08:e7:8f:b3:49:ae:c6:
                    51:de:7b:9b:c1:d6:ca:9a:e6:07:32:66:aa:38:34:
                    84:2a:f5:49:63:8c:a5:21:a4:b9:0b:11:6e:11:38:
                    42:2b:73:f8:65:b7:36:f8:db:b3:fd:4b:b8:24:4c:
                    33:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:00:05:85:FE:80:53:CB:96:FD:CA:74:99:B4:30:E4:AC:E2:5B:0F
            X509v3 Authority Key Identifier:
                keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ea:8f:b1:d5:1e:6a:78:53:2b:1a:b5:28:fa:23:d6:49:a8:
         e7:71:c4:28:9b:12:ed:87:4f:84:83:63:7e:89:53:33:29:de:
         e4:da:18:18:12:bc:bb:0b:0d:9b:a1:2c:6b:e4:49:05:bc:a3:
         73:d0:38:0d:a1:01:9c:ce:70:30:66:a9:5b:2f:b7:b7:b8:d8:
         f5:5d:ba:2b:40:64:ae:f7:89:68:20:c3:4f:56:99:46:e5:af:
         04:74:1c:73:e8:ef:98:e3:b6:2c:22:31:08:c6:91:5c:10:36:
         e0:7c:ef:c3:71:72:9e:10:ab:5d:c6:bb:f5:c4:f3:4b:b8:67:
         26:fa:ca:f5:31:ef:e5:d0:b4:f6:c8:68:cc:17:f2:61:1c:cf:
         c0:89:99:c0:3d:4c:29:15:60:53:2a:23:82:96:a4:5e:5e:aa:
         f7:25:ad:dc:02:52:e8:29:7e:6d:74:1e:92:57:21:01:10:84:
         67:ee:9e:30:d3:93:c6:f3:64:68:25:6d:f4:dd:00:da:9f:ff:
         4f:b0:70:d0:f9:9c:3d:09:41:de:e7:6a:f9:0e:60:2e:0c:18:
         10:bd:91:a1:58:78:40:fa:11:19:8d:c6:a6:31:31:83:54:fe:
         e6:26:c4:fe:1e:62:93:c7:4c:e0:24:af:bb:f7:24:ae:53:7c:
         d6:ab:a0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:48:18 2024 by rpki-client on console-fra.rpki-client.org