Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File:                     Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier:          eulEkfEFgepj1mIefwua705N4aiYBGciia9mmf3esuY=
Subject key identifier:   76:53:B2:5A:74:2C:73:43:96:0B:4C:4A:A2:98:64:89:6E:7E:31:27
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer:       /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial:       018F8749356426E8B2FB25FD4DF0466AD920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number:          01A4
Signing time:             Fri 17 May 2024 16:01:12 +0000
Manifest this update:     Fri 17 May 2024 16:01:12 +0000
Manifest next update:     Sat 18 May 2024 16:01:12 +0000
Files and hashes:         1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: 3LFpQyXJh98MFHEXX3nPSF6hW12R0vc0hc0wDKA6jl0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:35:64:26:e8:b2:fb:25:fd:4d:f0:46:6a:d9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
        Validity
            Not Before: May 17 16:01:12 2024 GMT
            Not After : May 18 16:01:12 2024 GMT
        Subject: CN=7653b25a742c7343960b4c4aa29864896e7e3127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:dc:0f:44:01:65:06:6b:86:cf:cf:ec:77:
                    f2:6d:22:c2:fb:4c:57:64:d4:d3:2d:14:bb:46:4d:
                    77:d2:51:12:68:2f:88:41:4a:dd:b8:ee:f0:3d:db:
                    b3:74:1b:48:15:8e:9a:8a:96:8a:4c:3c:24:83:d3:
                    61:7d:10:b7:9e:bc:6a:be:62:e2:ba:04:e4:d1:b2:
                    30:7c:b2:d1:59:af:e7:37:c3:2a:96:91:86:22:97:
                    3a:54:84:da:51:bc:7f:8e:34:92:dd:16:e2:f0:7b:
                    de:c3:7f:ba:13:36:cd:ed:7b:ae:e2:e6:c6:bc:48:
                    e3:e2:64:f3:0e:5d:20:84:2f:87:3a:5d:0d:b4:67:
                    bf:72:02:66:c5:fe:69:00:e5:a2:16:cc:94:24:56:
                    2a:5c:8c:4b:a3:e2:9d:eb:7e:59:4b:7b:6f:71:92:
                    45:47:05:13:f7:64:2b:4a:f1:7d:77:2e:a5:68:10:
                    a1:0d:34:35:5c:5b:ff:0d:a0:e9:eb:5a:59:29:e6:
                    51:61:32:0e:b2:ba:0d:17:a0:6f:04:9c:03:2d:70:
                    a3:78:bb:83:db:e2:ec:e4:be:88:31:4f:ee:6d:36:
                    cd:74:bd:4a:88:9f:5f:bf:be:c6:bc:3d:80:c0:fe:
                    cc:ff:5d:55:be:e9:ca:bf:58:c3:5d:a4:03:0a:e2:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:B2:5A:74:2C:73:43:96:0B:4C:4A:A2:98:64:89:6E:7E:31:27
            X509v3 Authority Key Identifier:
                keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:92:10:c5:d3:3d:82:3b:3c:4b:07:52:a2:e6:02:4a:9e:aa:
         82:98:f6:15:22:c9:93:ea:94:a5:ac:67:61:80:08:3d:d7:3e:
         78:15:71:9d:11:2c:13:cb:ac:dc:10:ad:87:24:d1:b3:d7:5e:
         ef:a3:52:41:26:79:9b:8a:31:f5:e7:99:b9:e8:23:e0:24:10:
         b8:c3:be:83:f8:2e:8f:61:2e:b8:ee:f6:5d:32:23:a7:e1:bc:
         67:9f:b3:02:0c:51:22:06:8f:e8:08:68:d0:b0:ce:87:6d:77:
         ac:6b:02:94:55:f4:b3:2d:0e:26:74:8a:a3:81:31:a4:8d:2d:
         26:1a:5c:51:f6:e6:07:89:d6:fb:2b:64:ea:ab:d0:48:16:92:
         4b:53:d4:b3:13:7b:8a:12:2e:8a:99:d4:a6:6f:b4:44:21:4f:
         86:fe:84:19:dd:1b:b2:10:f8:f8:c3:c8:48:47:d7:c9:15:26:
         73:b8:e6:ff:ae:0e:16:48:1a:13:31:49:4d:0e:f5:7f:73:3b:
         df:02:24:cc:89:a1:e0:ee:6e:3d:1e:0a:b3:19:84:71:c1:e0:
         81:7d:23:43:f9:c3:b1:fe:c1:17:5f:ae:d3:03:63:68:d1:47:
         ca:75:02:c4:b6:69:79:c2:7c:4b:54:ce:ca:c7:50:f1:01:b0:
         84:47:71:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:48 2024 by rpki-client on console-ams.rpki-client.org