Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
File:                     tPo4W-BSv6QF36zSnyarbwAeYEc.mft (raw, json)
Hash identifier:          x12dvKe3U7CNTJP6r5tvC5hGUbgAEdi9sJIqhOlKAjc=
Subject key identifier:   41:09:B8:67:5D:83:02:9C:56:E9:83:64:15:F6:07:5E:0F:C3:0E:62
Authority key identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
Certificate issuer:       /CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Certificate serial:       0191FA10A7B6CAECA3B6EF80591AC44C23B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
Manifest number:          0136
Signing time:             Mon 16 Sep 2024 09:01:21 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:21 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:21 +0000
Files and hashes:         1: tPo4W-BSv6QF36zSnyarbwAeYEc.crl (hash: 7V0bTVLq8wnFMhvFnPF9IIzU/WNE1X2AmJMau9AAMhk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:a7:b6:ca:ec:a3:b6:ef:80:59:1a:c4:4c:23:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
        Validity
            Not Before: Sep 16 09:01:21 2024 GMT
            Not After : Sep 17 09:01:21 2024 GMT
        Subject: CN=4109b8675d83029c56e9836415f6075e0fc30e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:ab:57:fb:a5:eb:51:80:04:11:2b:5a:e1:
                    d6:31:f4:57:16:9d:05:ac:bc:bb:60:42:47:b3:9f:
                    ad:f1:01:d7:2c:7f:b3:53:4b:32:35:55:3d:49:02:
                    12:1b:1b:98:0d:97:cc:1b:08:8e:70:3b:1a:0b:2e:
                    6e:8e:e1:19:fe:b7:ce:80:ef:93:37:ca:9b:71:64:
                    97:b0:7b:8e:1b:71:db:f6:9a:00:03:b1:f4:9e:aa:
                    ad:86:d8:92:b9:d8:4d:94:95:10:d5:85:09:95:e9:
                    8d:d7:f1:e3:1f:fd:99:68:7b:f0:17:51:70:23:73:
                    02:44:89:f5:d5:1f:45:69:76:67:09:83:5b:45:4e:
                    31:b3:9e:f9:10:ec:3d:74:7b:83:7b:42:7d:68:f1:
                    ac:87:d4:3d:40:43:6a:70:d1:5e:79:c2:1d:c0:3a:
                    4a:0e:4a:b9:de:e9:30:d4:8a:b3:c3:d8:c1:79:c1:
                    2f:ea:ce:57:2a:5a:2e:ed:6e:89:74:ca:40:dd:9d:
                    ff:82:e9:9b:b1:20:15:fd:2a:7a:f6:83:15:2c:58:
                    a1:c6:89:75:9d:a9:73:e4:68:39:42:71:9a:9f:17:
                    04:c4:5a:7f:c5:b6:37:64:9e:db:70:26:8f:c6:0d:
                    d4:1a:7c:79:d1:e2:4b:26:d8:db:fd:a9:ed:9f:bf:
                    15:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:09:B8:67:5D:83:02:9C:56:E9:83:64:15:F6:07:5E:0F:C3:0E:62
            X509v3 Authority Key Identifier:
                keyid:B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1e:f5:4a:a5:1c:3b:4f:bc:c6:4e:6d:39:8e:11:c9:80:99:
         7f:3e:5f:a9:e0:42:7e:7c:25:9c:6c:ef:26:cf:a0:14:ac:04:
         3d:cf:01:80:ed:cb:7d:3c:71:7d:79:01:89:ec:a5:af:c9:da:
         d4:8c:5a:c1:f3:4e:2d:9b:bf:56:36:6d:37:16:e6:04:02:f5:
         2b:b1:88:da:fd:99:87:92:40:d2:85:b4:81:61:d1:98:d5:89:
         11:72:46:59:5e:f8:45:62:91:ab:eb:33:0f:f4:b0:18:da:f0:
         b3:39:4a:e7:82:cc:5d:5b:1c:4f:0a:7d:54:62:db:e8:63:98:
         cc:e2:8e:4f:9e:c7:00:8c:63:a8:29:d0:a4:9d:f6:6d:09:49:
         45:1a:b2:d6:7c:56:10:7d:f9:9d:3e:fa:1a:1c:49:b9:b2:d6:
         f4:fb:57:3f:22:fb:a4:e9:0a:c1:82:2a:8c:5b:3c:98:81:e4:
         40:55:1d:96:91:4e:01:dd:62:f3:28:96:d7:24:fe:a7:3c:87:
         e9:4f:28:d3:a8:32:f2:36:59:99:05:8a:2c:a6:65:0d:18:35:
         b0:c2:58:08:a9:c1:29:83:b9:b7:58:60:72:60:9e:fc:b2:68:
         5e:64:ac:ba:89:9e:bc:f8:3f:37:f1:fc:cf:d5:d8:48:48:54:
         bc:74:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:19:32 2024 by rpki-client on console-ams.rpki-client.org