Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File:                     8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier:          W3ZFUdA4N6U8osS9NSMaBVJq67hF8HffEoz9vgjXikE=
Subject key identifier:   87:64:4C:AC:58:E4:D1:51:06:A1:7D:20:48:00:D8:95:1C:70:69:70
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer:       /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial:       018F45A1A2474F515237F92AB75EEA90AC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number:          0519
Signing time:             Sat 04 May 2024 22:02:51 +0000
Manifest this update:     Sat 04 May 2024 22:02:51 +0000
Manifest next update:     Sun 05 May 2024 22:02:51 +0000
Files and hashes:         1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: 7za4P+ybhxa46TM3yXYlxg+QjX0javdE9zkn+RPWxaw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a1:a2:47:4f:51:52:37:f9:2a:b7:5e:ea:90:ac:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
        Validity
            Not Before: May  4 22:02:51 2024 GMT
            Not After : May  5 22:02:51 2024 GMT
        Subject: CN=87644cac58e4d15106a17d204800d8951c706970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:1c:e5:9f:9e:c7:35:60:dc:59:7e:34:d6:
                    83:bb:20:fc:ca:01:bc:74:8d:53:4d:17:ee:e6:47:
                    52:c3:3f:63:6d:6f:10:4f:b8:ca:58:f7:f1:8a:26:
                    0e:e4:b0:e5:cd:d4:89:2a:63:29:9a:cf:d6:e4:68:
                    fc:b6:58:0e:39:ad:4d:71:4b:f6:92:cf:27:99:87:
                    2d:fc:3c:95:12:4f:53:3d:52:68:5a:84:8b:46:be:
                    fa:cf:a7:3d:e9:0f:70:0b:70:c7:4b:65:61:c2:a2:
                    e1:7e:55:7b:57:6e:50:c7:77:44:ed:f7:a0:14:f5:
                    7a:a1:2a:4c:9d:3d:e6:89:66:df:5a:34:3d:c4:d2:
                    4c:ad:6e:0a:04:ab:04:0f:65:6d:0f:c2:4d:5d:af:
                    b4:d8:b1:06:e4:1d:56:2c:1d:79:d3:35:c8:d7:3d:
                    95:af:d1:5c:ee:d6:d1:96:51:d6:aa:56:8c:46:d7:
                    b6:a7:ba:00:b3:f1:5d:59:db:d2:41:fc:c0:40:8a:
                    14:5c:fc:76:79:9f:fc:43:cf:8e:ed:0a:a2:02:3a:
                    4d:94:02:72:7d:72:50:ed:b9:78:13:12:b9:c7:02:
                    bc:74:f3:4e:3a:1c:77:17:2d:e6:60:b7:ce:e1:bf:
                    fe:75:e5:a1:90:a3:0d:da:d8:c1:2c:f0:67:6b:95:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:64:4C:AC:58:E4:D1:51:06:A1:7D:20:48:00:D8:95:1C:70:69:70
            X509v3 Authority Key Identifier:
                keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d7:85:a8:a1:66:d0:24:b1:bd:e9:12:eb:9d:87:5a:15:70:
         6b:96:be:b5:38:01:84:5d:60:24:cb:1a:ba:fb:59:e9:65:f1:
         3b:65:93:88:0b:4d:26:1e:6a:91:56:a7:3b:56:43:9a:69:e5:
         0d:ff:6d:97:43:eb:ee:0c:70:aa:79:4e:2f:1d:69:5e:d1:76:
         2e:cb:2c:bc:5c:e0:12:2a:48:78:1c:e9:60:34:3b:09:40:ee:
         29:93:b9:79:88:16:58:ef:1d:bc:b6:6c:31:7d:3d:b8:9f:96:
         2b:42:a1:5b:70:b1:ce:68:ef:0f:8a:07:ca:b3:97:52:cb:82:
         d2:bb:8e:57:20:54:b0:86:17:e7:1a:6b:5c:81:70:81:ba:98:
         e1:e6:db:c6:a9:e7:22:a4:13:57:ae:bd:68:63:14:bc:e9:2d:
         77:3c:e7:86:e1:b0:a4:41:9f:8f:89:53:a1:e7:aa:05:d9:48:
         9d:fd:cd:e8:71:ab:88:6e:d2:cb:0f:74:bb:56:5e:97:f9:37:
         a1:c3:c8:af:11:bc:c8:b7:2a:7f:eb:17:4d:32:d8:2d:7a:6a:
         5f:4f:42:eb:3f:b3:22:cb:72:1c:43:39:85:0d:5d:a0:27:0e:
         3b:3d:98:2c:c0:fa:01:22:aa:e3:f3:fd:40:92:64:9f:5d:e1:
         9c:12:45:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:22:04 2024 by rpki-client on console-ams.rpki-client.org