Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
File:                     tsaaSiFb3h0yk03chd6vj9nJRHk.mft (raw, json)
Hash identifier:          FEDQLAVdbSau+gacUsO7Y7UPFr3IctDsnD1JULmkhBA=
Subject key identifier:   E9:DA:87:7A:B4:C8:9F:C3:0A:F6:2F:01:F4:8F:CB:28:DF:D7:15:AE
Authority key identifier: B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79
Certificate issuer:       /CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
Certificate serial:       018F87B61DF822A73257DCEB9A154004F1A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
Manifest number:          0924
Signing time:             Fri 17 May 2024 18:00:10 +0000
Manifest this update:     Fri 17 May 2024 18:00:10 +0000
Manifest next update:     Sat 18 May 2024 18:00:10 +0000
Files and hashes:         1: tsaaSiFb3h0yk03chd6vj9nJRHk.crl (hash: Y63Qpf1m3BCbKZZUOS+N3jW/ysE++Q0r/Q/HkdT7OAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:1d:f8:22:a7:32:57:dc:eb:9a:15:40:04:f1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
        Validity
            Not Before: May 17 18:00:10 2024 GMT
            Not After : May 18 18:00:10 2024 GMT
        Subject: CN=e9da877ab4c89fc30af62f01f48fcb28dfd715ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:3e:dd:ea:a9:32:9d:fd:d2:2f:f9:d0:7d:
                    66:cc:3f:78:ea:22:6e:ea:28:4c:9e:68:81:15:4c:
                    50:b5:34:f5:5b:06:45:21:e0:22:2d:f3:87:0d:3c:
                    ba:9a:b1:80:88:45:c0:d1:cb:a5:85:3b:08:60:5c:
                    2c:a1:81:1e:db:62:0a:30:5f:50:ff:6f:70:4f:7e:
                    c8:5b:ca:92:2b:24:a2:3f:b0:6c:60:47:a6:b4:77:
                    82:07:0f:df:57:cc:47:d8:7c:7e:ca:68:b2:6e:f6:
                    0a:c2:fe:4e:dc:46:9e:35:5a:d4:2a:4a:e8:ff:bd:
                    2b:d8:b6:2a:a4:ce:a8:5f:a4:55:98:68:44:4a:e1:
                    be:1b:d6:15:25:34:04:41:5b:c6:5a:f4:41:58:f8:
                    bc:8e:0f:f9:75:12:b7:f4:87:81:02:60:55:75:17:
                    ef:cd:20:4e:4f:fe:25:ed:5b:64:d6:e5:f9:be:ca:
                    f5:10:b6:41:a6:c6:fb:41:4c:49:3c:ff:b5:7d:a8:
                    0e:6d:05:dd:5e:cb:85:32:28:83:84:77:66:a2:c8:
                    82:2e:3c:a8:18:a9:f3:0f:a7:d4:c5:fb:ad:53:76:
                    56:20:81:ec:0a:b5:a4:9e:18:fa:51:c6:56:6b:0a:
                    d2:e1:b6:4d:8b:c1:d0:61:37:68:66:98:78:c6:5b:
                    97:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DA:87:7A:B4:C8:9F:C3:0A:F6:2F:01:F4:8F:CB:28:DF:D7:15:AE
            X509v3 Authority Key Identifier:
                keyid:B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b2:8a:fb:a0:f0:0d:6c:cb:1e:0f:e6:f3:36:ce:08:84:8a:
         5f:e6:f0:c8:d0:a4:57:e3:a2:7a:40:4a:03:61:7a:a1:ef:f3:
         5b:23:a6:4e:16:51:30:26:55:08:65:39:ad:77:e3:42:c2:2a:
         af:23:06:5f:45:20:06:39:08:70:3c:ba:bf:70:60:87:f7:d5:
         59:3c:f5:ca:b7:16:b4:e4:3b:11:0f:50:4d:f9:ea:45:6a:f1:
         a7:78:f9:82:5d:9c:59:23:cf:9a:ed:76:1e:46:38:1d:bf:ca:
         85:a8:9c:7c:9e:c6:58:37:c5:54:05:bb:ca:37:33:ff:30:c3:
         4d:10:8f:05:93:85:51:71:8a:1d:9e:bf:c9:ba:5d:3f:b5:30:
         5b:56:c9:8e:79:1d:0c:a5:05:2e:55:5b:37:bb:df:5c:91:85:
         04:af:8c:4d:34:de:66:58:de:81:4f:1e:77:b5:61:e5:ca:78:
         06:6d:fe:04:a6:1f:b4:3b:56:3f:d6:2f:20:2b:14:1e:55:60:
         6e:cd:e3:9f:9c:9f:b7:06:e9:b5:df:b9:24:1f:b5:a0:83:ff:
         09:da:62:11:66:d8:75:a7:c0:ff:31:f0:ff:ce:9f:7c:d9:ca:
         85:6f:5c:f2:a2:8a:63:ee:4b:f2:53:2f:05:1c:8d:ae:fa:5a:
         c5:9d:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----