Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
File:                     h00SbPtCScNLlJJESW1rSTeJWBQ.mft (raw, json)
Hash identifier:          VMtrYZN2BomtKBsxiJHOdofrKCo52wc/NsFImFpKY4Y=
Subject key identifier:   1D:9B:E2:AD:9E:A2:70:80:4E:AE:5A:9E:D1:74:AB:1D:96:F3:99:99
Authority key identifier: 87:4D:12:6C:FB:42:49:C3:4B:94:92:44:49:6D:6B:49:37:89:58:14
Certificate issuer:       /CN=874d126cfb4249c34b949244496d6b4937895814
Certificate serial:       018F874ACF332483E04106862681873E8D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h00SbPtCScNLlJJESW1rSTeJWBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
Manifest number:          063D
Signing time:             Fri 17 May 2024 16:02:57 +0000
Manifest this update:     Fri 17 May 2024 16:02:57 +0000
Manifest next update:     Sat 18 May 2024 16:02:57 +0000
Files and hashes:         1: h00SbPtCScNLlJJESW1rSTeJWBQ.crl (hash: JcQ6T6mrFGX73L+h62KEYNr980DrVB/In/9CfNgWljU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h00SbPtCScNLlJJESW1rSTeJWBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:cf:33:24:83:e0:41:06:86:26:81:87:3e:8d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874d126cfb4249c34b949244496d6b4937895814
        Validity
            Not Before: May 17 16:02:57 2024 GMT
            Not After : May 18 16:02:57 2024 GMT
        Subject: CN=1d9be2ad9ea270804eae5a9ed174ab1d96f39999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:65:77:98:1e:d9:3c:9f:01:84:14:c5:7f:
                    25:3c:0a:24:11:e7:4b:38:fd:ed:17:c0:5b:f3:4b:
                    a8:f7:98:2e:93:1c:81:06:91:cb:4c:3b:e3:80:49:
                    19:bb:53:dc:f5:3f:cf:de:f2:ce:26:e3:65:e0:6a:
                    48:7e:57:34:e7:a9:f8:2e:c8:8a:8f:eb:3b:4c:18:
                    74:cc:44:0b:c1:bc:8b:cc:67:81:55:20:22:16:42:
                    28:e9:8e:c3:ea:78:c8:2a:37:31:23:06:a1:24:62:
                    95:50:73:f9:13:b8:78:94:46:3f:ac:84:08:d9:7e:
                    0b:6f:9e:8a:93:2d:0d:3d:51:a6:44:3b:a0:2f:ef:
                    89:e7:04:cc:76:62:67:b9:f4:d1:4d:16:81:c4:7f:
                    19:3c:76:3c:8f:90:1d:1c:d0:a8:5d:3a:28:84:cf:
                    40:c5:e7:a2:ed:b3:1e:35:f6:49:15:f0:a5:d5:5d:
                    d2:19:c7:be:d1:b6:b3:45:b3:7e:93:85:49:71:10:
                    b9:18:21:63:d1:df:d5:50:40:72:48:6c:02:71:d8:
                    75:7d:4e:ea:52:28:ed:2a:a4:8e:cd:43:52:76:a3:
                    54:c9:48:50:b8:72:30:5e:c1:29:c0:43:f0:41:99:
                    b7:00:01:05:47:c2:a5:a1:83:e4:66:cd:56:30:0a:
                    89:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9B:E2:AD:9E:A2:70:80:4E:AE:5A:9E:D1:74:AB:1D:96:F3:99:99
            X509v3 Authority Key Identifier:
                keyid:87:4D:12:6C:FB:42:49:C3:4B:94:92:44:49:6D:6B:49:37:89:58:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h00SbPtCScNLlJJESW1rSTeJWBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6d:c1:83:44:9e:c0:2c:d2:aa:e3:2e:d9:45:c0:13:35:5f:
         df:44:6d:b2:9a:4f:87:4b:19:70:f3:41:a0:21:dc:cd:5f:b7:
         cd:b7:e5:86:25:fd:94:81:0d:46:74:4d:ff:b6:6b:7a:82:73:
         65:1e:43:d3:e0:82:41:b8:e9:7b:88:73:37:cd:e0:4d:94:4b:
         0c:bf:33:ff:52:d9:77:db:85:3e:d5:3f:68:35:12:c6:85:85:
         2b:21:27:e2:ad:55:08:45:47:64:6a:3b:fe:61:33:75:56:d8:
         6e:c2:f8:ab:aa:ea:94:f1:2d:2d:23:5c:ae:78:7d:3a:e3:e5:
         03:03:2f:98:12:95:8e:e5:4d:ce:fa:0b:50:c8:f3:23:05:08:
         9d:49:25:ee:61:24:11:88:00:9f:7c:b7:68:53:33:aa:e8:8d:
         35:b2:68:0f:e0:5c:a5:cd:ae:d3:26:8d:9a:99:c8:02:13:26:
         bc:4d:54:8c:fe:ad:62:8f:c7:f8:d7:98:29:9e:e3:9d:31:7a:
         50:50:ef:e7:df:bf:0e:97:42:a4:3f:35:28:3c:2a:1d:ee:0e:
         ee:ad:a8:b2:bf:39:31:5d:8a:00:40:ec:e8:1b:87:21:40:a9:
         83:64:a3:77:69:f7:51:6a:7c:0a:a7:f0:58:0c:f5:90:27:2d:
         58:1e:6a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:09:10 2024 by rpki-client on console-ams.rpki-client.org