Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
File:                     Y31k1HJWO36HP1t5-RydP__D2_k.mft (raw, json)
Hash identifier:          NQ0O61neJ98SRrc4001Nzu6RZTt823mwJmMXjkQnY6w=
Subject key identifier:   54:2C:C0:1B:B0:11:0F:88:FC:F4:E8:50:5A:B3:80:C7:A0:3E:E9:66
Authority key identifier: 63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9
Certificate issuer:       /CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
Certificate serial:       018F87B6CCF449C993AF5DBEDDAEA0414EE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
Manifest number:          0A33
Signing time:             Fri 17 May 2024 18:00:54 +0000
Manifest this update:     Fri 17 May 2024 18:00:54 +0000
Manifest next update:     Sat 18 May 2024 18:00:54 +0000
Files and hashes:         1: Y31k1HJWO36HP1t5-RydP__D2_k.crl (hash: peSLgluVgKjkrnQtIvzUzgYoOjEH4Zf4mBlWA2cmWxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:cc:f4:49:c9:93:af:5d:be:dd:ae:a0:41:4e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
        Validity
            Not Before: May 17 18:00:54 2024 GMT
            Not After : May 18 18:00:54 2024 GMT
        Subject: CN=542cc01bb0110f88fcf4e8505ab380c7a03ee966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:a7:b9:be:49:b9:0f:e8:6e:5c:32:59:f4:
                    bb:7b:5e:36:50:39:eb:35:5a:87:b3:41:48:b5:80:
                    48:c6:02:2b:a2:39:8c:4b:c9:c7:89:ad:e1:33:54:
                    00:15:df:41:ad:f8:ba:05:1c:7b:2c:1e:a2:a3:17:
                    68:01:e0:ab:51:35:0e:e8:1b:51:64:66:b0:d7:2b:
                    e4:47:59:ed:59:3a:7a:bf:d6:d3:66:4f:17:12:66:
                    96:ca:17:87:28:39:94:6b:19:be:32:d8:74:4a:f9:
                    6a:55:3f:41:ec:e4:80:80:55:d9:23:70:94:f4:59:
                    8e:8a:e3:09:b1:94:6e:61:ce:a7:a7:0e:d6:3d:44:
                    a9:f9:39:71:c0:4e:fe:51:e8:11:2d:54:e1:24:04:
                    a8:06:ec:53:45:59:c3:c4:83:c9:7a:3e:ff:bf:a3:
                    10:8e:c3:71:f7:33:35:cd:34:ca:cd:e0:7f:6b:99:
                    b4:67:47:d7:4e:5c:78:89:43:f0:83:81:ce:65:33:
                    be:e8:fc:cd:b9:bd:db:3c:f9:93:82:58:ad:02:ba:
                    12:de:ec:bf:8c:b9:6d:e7:e5:45:fe:8f:6e:96:5a:
                    ba:cd:35:6f:12:bd:b1:d9:68:96:21:5f:47:a4:1b:
                    85:85:a2:ab:b3:f0:0f:05:10:05:ef:8e:2b:8c:40:
                    e5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2C:C0:1B:B0:11:0F:88:FC:F4:E8:50:5A:B3:80:C7:A0:3E:E9:66
            X509v3 Authority Key Identifier:
                keyid:63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:7b:aa:90:ad:a7:5a:26:07:17:3e:91:77:36:3e:98:0e:08:
         61:5c:ad:b1:f3:29:9d:be:45:92:80:3d:b9:fc:9a:e9:99:ab:
         e1:d0:e9:24:72:90:c1:53:1c:1e:7a:d5:42:a7:7c:b6:e7:4c:
         ec:c4:2f:30:54:23:f7:57:a1:14:f1:5b:b7:ad:66:de:3b:9e:
         b8:a3:9d:79:7d:b9:e3:a4:6e:5b:cb:ff:6e:f2:61:26:16:1b:
         9b:b3:83:34:42:44:65:ab:9a:0c:4e:81:5e:ba:91:ff:9d:f5:
         76:a2:47:66:4e:d1:df:31:48:0a:4a:90:1a:8a:be:a3:59:6d:
         d0:6b:17:9a:40:cb:1b:dc:f4:8e:82:ee:6c:88:06:c0:19:98:
         a7:88:4e:0d:8c:43:13:67:8a:b6:fd:e3:cd:61:1d:7b:18:c8:
         d2:df:8d:3b:9d:84:2a:ad:9b:e0:47:74:92:c8:1b:08:39:4d:
         35:b2:f5:e2:12:08:61:ff:22:96:bc:ef:a5:51:bf:f0:3a:8d:
         13:39:66:41:22:4c:59:8a:fd:16:ab:68:fe:ce:86:4d:9e:d8:
         b4:4b:0c:64:c6:57:10:69:90:c8:57:04:9a:4a:9b:c3:32:ac:
         81:fc:9b:0c:aa:cc:7b:28:14:96:51:ef:c0:1b:23:26:84:c6:
         77:2d:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:09 2024 by rpki-client on console-fra.rpki-client.org