Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
File:                     fqQd0tUnX7allrJhoCfMjX-fNGw.mft (raw, json)
Hash identifier:          BPQPZaTMRImecL5QWdFzTao4YLjlGLYmBYqUrnJZsL0=
Subject key identifier:   82:D6:59:40:14:C1:27:AC:89:1B:A2:F9:92:F6:FF:6F:DE:CE:F3:46
Authority key identifier: 7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
Certificate issuer:       /CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Certificate serial:       018F87484EE6DF3FA18EF796F1FEA41A8333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
Manifest number:          0860
Signing time:             Fri 17 May 2024 16:00:13 +0000
Manifest this update:     Fri 17 May 2024 16:00:13 +0000
Manifest next update:     Sat 18 May 2024 16:00:13 +0000
Files and hashes:         1: fqQd0tUnX7allrJhoCfMjX-fNGw.crl (hash: dszPUuETUed0MdYqXxinacvYAE0VQhkD0AIsW0jiXgc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:4e:e6:df:3f:a1:8e:f7:96:f1:fe:a4:1a:83:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
        Validity
            Not Before: May 17 16:00:13 2024 GMT
            Not After : May 18 16:00:13 2024 GMT
        Subject: CN=82d6594014c127ac891ba2f992f6ff6fdecef346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:73:2d:cf:1a:28:78:f9:7e:ee:e4:26:88:
                    3b:da:55:3d:bb:56:8c:97:e3:6f:01:73:0b:c1:2e:
                    e5:4b:62:c7:20:1c:73:df:7e:90:1f:bf:2e:ed:85:
                    38:fe:10:99:00:94:21:86:3c:9c:54:9b:c1:77:6f:
                    f9:9f:81:34:49:97:69:81:2a:ca:45:19:b5:b2:c9:
                    32:a2:c0:34:03:71:7d:b2:28:19:e4:43:d9:9f:44:
                    f6:12:18:f9:b3:dc:8f:4f:2f:28:a5:68:40:85:4e:
                    89:0e:7a:d7:3b:2b:d9:87:b1:0e:5c:62:18:60:6c:
                    21:17:1e:f8:f9:77:0b:c6:11:61:db:41:c5:72:0f:
                    69:de:a2:eb:b3:55:a1:85:6a:6b:c3:03:c2:e4:d0:
                    c4:45:df:a3:8e:2e:2a:91:91:ce:eb:e3:37:90:60:
                    a6:f2:1f:f5:e5:4f:81:f8:27:e2:d7:4c:68:f8:74:
                    eb:77:29:6a:02:49:bd:b0:69:02:5b:96:81:f6:32:
                    7c:aa:16:c3:1d:2e:29:d3:77:8a:3d:fe:bf:3f:2f:
                    ee:2d:4a:20:da:ec:5d:00:63:e5:52:ff:00:0a:b8:
                    1e:77:55:5c:70:e8:88:fc:1b:3d:ad:d9:f1:e9:7d:
                    65:e9:95:77:98:0c:60:ce:7f:db:d1:fe:72:9d:23:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D6:59:40:14:C1:27:AC:89:1B:A2:F9:92:F6:FF:6F:DE:CE:F3:46
            X509v3 Authority Key Identifier:
                keyid:7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:58:c2:68:ea:0a:e9:68:57:74:fb:2a:ea:69:c7:59:95:72:
         76:2a:ba:66:e9:93:41:fe:31:50:b1:fc:51:34:c9:db:5e:79:
         5a:e5:99:5f:dd:05:60:21:31:08:b2:c2:9d:b8:48:6b:35:ff:
         ae:9e:d2:01:40:cf:2f:72:39:aa:e9:67:ff:9b:1e:b8:26:73:
         8c:4b:2e:a6:68:43:99:23:fb:92:5b:42:43:13:02:40:4d:ca:
         d8:5d:42:20:bd:b8:7e:cd:7a:d4:63:26:04:d7:f6:98:8c:58:
         b9:c5:5f:0c:ad:08:06:e1:74:25:06:33:19:08:f1:e3:a9:75:
         09:3e:46:ff:37:09:96:e9:cf:0b:76:4c:df:af:2b:62:a6:16:
         b9:da:98:ed:fb:c7:21:69:c0:13:e7:cb:ff:ed:6b:77:be:a9:
         32:95:a0:b6:fc:52:46:34:ca:77:ea:94:ca:9d:06:ee:e7:dc:
         38:9e:72:68:e6:57:bf:8c:3e:e2:5a:14:56:5c:ec:9d:72:fa:
         ad:d5:8c:98:18:fd:eb:74:2d:3b:11:65:81:34:d2:ef:56:7f:
         af:bb:b6:5f:03:9e:46:50:4e:06:90:7d:01:9f:cd:2b:40:a8:
         b7:99:b0:61:d4:d5:98:63:c2:0e:ac:8a:66:78:b8:b6:2c:e5:
         d5:f6:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:13:33 2024 by rpki-client on console-ams.rpki-client.org