Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File:                     tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier:          WK9cCmvN4+br5nd83dAoqYKgQUQSM8GijSirIsdXekM=
Subject key identifier:   8E:0A:29:2A:E9:95:8D:17:87:E3:58:98:43:B9:FE:9D:47:EE:50:C0
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer:       /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial:       018F874ACE106573CD8B67109A57D7E166CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number:          01F2
Signing time:             Fri 17 May 2024 16:02:57 +0000
Manifest this update:     Fri 17 May 2024 16:02:57 +0000
Manifest next update:     Sat 18 May 2024 16:02:57 +0000
Files and hashes:         1: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: Xn59bGzb7bEM0V2OfC+bdrK2YyZ34cKAH7ngs5WrELU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ce:10:65:73:cd:8b:67:10:9a:57:d7:e1:66:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
        Validity
            Not Before: May 17 16:02:57 2024 GMT
            Not After : May 18 16:02:57 2024 GMT
        Subject: CN=8e0a292ae9958d1787e3589843b9fe9d47ee50c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:63:4e:22:b9:d2:9c:62:fe:42:48:82:d1:
                    32:93:09:4b:14:54:a0:89:5c:95:ee:1b:c7:97:36:
                    0a:f3:c3:c1:66:21:6b:ec:ac:74:32:d8:95:d0:e8:
                    02:bf:7d:ab:64:66:4e:1b:c5:a6:64:55:7f:2b:91:
                    ea:3b:7a:6a:58:46:0e:3a:ad:05:d3:ee:cf:40:4a:
                    58:32:33:f5:44:bf:73:70:69:81:18:70:15:a1:56:
                    ef:85:30:04:b4:b6:67:b7:27:fd:31:75:bc:a8:f2:
                    bb:51:6a:98:ae:bf:5b:e7:fa:71:7b:c4:73:18:18:
                    10:52:81:36:16:e0:65:b2:88:8b:6c:dc:d8:c2:c5:
                    fa:26:a8:09:ef:2d:11:09:0a:14:17:d4:de:22:24:
                    bd:7b:cd:76:3d:bf:53:19:b0:b3:76:82:2e:7f:3e:
                    81:a7:60:85:ca:d6:30:16:aa:12:2f:74:31:94:64:
                    73:d6:63:7a:2f:48:a9:2b:18:00:fd:ed:1c:12:78:
                    26:b0:fd:b0:cf:6d:16:1d:3d:38:19:29:8c:95:f4:
                    0a:89:7f:e6:3e:4d:ff:2c:9f:5c:16:25:8b:76:2f:
                    ee:3a:98:83:32:35:8f:52:43:5f:dd:c2:fa:ee:49:
                    4a:28:b9:fb:dd:6c:79:52:67:c4:b6:6d:92:f6:22:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0A:29:2A:E9:95:8D:17:87:E3:58:98:43:B9:FE:9D:47:EE:50:C0
            X509v3 Authority Key Identifier:
                keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4b:29:4d:15:9b:1f:5f:d6:d6:ac:37:5f:c4:80:da:55:75:
         6b:a8:69:78:7a:51:4f:55:01:a4:41:e6:3a:e9:d1:42:83:b8:
         a6:a4:05:d6:31:c7:44:f4:8b:eb:ca:53:d9:e4:89:e8:ff:dd:
         7c:57:ea:14:18:2a:69:eb:1d:d1:da:dc:e1:84:c6:71:0e:19:
         f7:52:78:23:f3:f8:c7:33:c2:1a:6f:7c:d7:45:11:18:e7:70:
         7f:48:89:3b:9f:b0:2b:44:b6:55:bd:7a:d8:b8:ab:20:bd:8e:
         ba:b3:88:23:ab:3c:95:b4:af:0c:e3:92:53:3d:e0:08:54:c3:
         bc:12:9a:4d:29:54:19:59:ba:5d:ce:11:bd:40:ba:4f:4d:ee:
         28:c5:7e:de:fe:58:9b:27:0d:f9:e8:aa:db:f9:61:04:84:58:
         55:33:b4:32:16:0e:a6:93:77:47:70:af:2c:ae:1d:04:da:0b:
         8a:14:cb:bf:30:02:21:a8:1a:3a:d1:59:3f:75:92:93:2a:9b:
         b9:27:84:cc:f7:ad:70:66:98:7f:fc:73:fb:ea:ad:7f:cf:e0:
         ab:89:33:44:91:16:0e:37:24:54:6c:26:cc:f2:cf:f0:48:07:
         de:5a:c0:a1:03:b2:f0:ba:0a:73:f5:34:f2:51:79:1e:bc:1b:
         44:f9:82:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:13:20 2024 by rpki-client on console-ams.rpki-client.org