Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/604e1d-0653-404a-a0ec-f16e8c8940b9/1/8VUt6Otv9gg88eC2nhde9IdYn5o.mft
File:                     8VUt6Otv9gg88eC2nhde9IdYn5o.mft (raw, json)
Hash identifier:          j/f8eBySCFeRSUqzR7tYYmnBToEO0bHTBCeYaLZFmEY=
Subject key identifier:   5D:F3:6A:E3:15:2E:18:E9:17:ED:0A:97:67:AA:DC:F3:47:78:04:86
Authority key identifier: F1:55:2D:E8:EB:6F:F6:08:3C:F1:E0:B6:9E:17:5E:F4:87:58:9F:9A
Certificate issuer:       /CN=f1552de8eb6ff6083cf1e0b69e175ef487589f9a
Certificate serial:       018F1D121B661C429CDBC16DBA602127E77B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VUt6Otv9gg88eC2nhde9IdYn5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/604e1d-0653-404a-a0ec-f16e8c8940b9/1/8VUt6Otv9gg88eC2nhde9IdYn5o.mft
Manifest number:          0AF4
Signing time:             Sat 27 Apr 2024 01:01:16 +0000
Manifest this update:     Sat 27 Apr 2024 01:01:16 +0000
Manifest next update:     Sun 28 Apr 2024 01:01:16 +0000
Files and hashes:         1: 8VUt6Otv9gg88eC2nhde9IdYn5o.crl (hash: VlZD1jG4P6WG3OzL9488dooUwhLtOqWQnv6exiCFHeY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/604e1d-0653-404a-a0ec-f16e8c8940b9/1/8VUt6Otv9gg88eC2nhde9IdYn5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/604e1d-0653-404a-a0ec-f16e8c8940b9/1/8VUt6Otv9gg88eC2nhde9IdYn5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VUt6Otv9gg88eC2nhde9IdYn5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 01:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1d:12:1b:66:1c:42:9c:db:c1:6d:ba:60:21:27:e7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1552de8eb6ff6083cf1e0b69e175ef487589f9a
        Validity
            Not Before: Apr 27 01:01:16 2024 GMT
            Not After : Apr 28 01:01:16 2024 GMT
        Subject: CN=5df36ae3152e18e917ed0a9767aadcf347780486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:55:fb:42:a8:0f:2c:e4:4a:df:81:b9:be:85:
                    fe:a6:bd:19:2a:a2:4a:b7:9f:8e:26:a0:66:97:bd:
                    b1:9e:a0:bc:d3:f9:32:9c:db:fa:e1:03:11:dd:04:
                    e1:27:75:92:a7:e8:42:8f:b0:74:2e:00:37:8c:aa:
                    2e:46:42:aa:23:0b:98:cf:f6:67:4b:8f:0e:79:3f:
                    6e:b0:ca:d2:99:9c:57:ae:0a:e1:49:a6:a8:32:a3:
                    67:62:3f:bc:8a:2f:1b:98:c0:cc:55:a4:c2:26:c9:
                    bb:2c:30:94:cf:d1:e2:13:61:74:b7:46:48:be:3a:
                    0a:82:16:96:7b:b9:b6:0a:db:7c:9d:d7:bd:05:48:
                    8d:79:e1:e5:cc:9b:53:e5:0f:6c:f4:ef:1b:02:6c:
                    2b:9e:89:c3:63:d8:96:65:f5:6a:b0:22:ab:e2:bf:
                    af:22:9c:24:be:f1:ae:be:dc:e0:53:bf:9b:8a:48:
                    68:9e:7a:f2:88:c7:0e:46:67:a7:b2:fe:d0:2c:ad:
                    62:f2:88:ee:13:5d:55:ae:0a:86:d9:b5:d6:d4:18:
                    c8:3b:41:30:be:2f:7d:3d:fe:1c:d9:50:62:1e:e9:
                    2d:c2:e1:f2:b5:52:91:13:42:ac:4f:0b:fa:cd:f0:
                    b2:49:38:4e:ef:02:f3:3f:e9:c9:e4:d5:25:8a:11:
                    25:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F3:6A:E3:15:2E:18:E9:17:ED:0A:97:67:AA:DC:F3:47:78:04:86
            X509v3 Authority Key Identifier:
                keyid:F1:55:2D:E8:EB:6F:F6:08:3C:F1:E0:B6:9E:17:5E:F4:87:58:9F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VUt6Otv9gg88eC2nhde9IdYn5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/604e1d-0653-404a-a0ec-f16e8c8940b9/1/8VUt6Otv9gg88eC2nhde9IdYn5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/604e1d-0653-404a-a0ec-f16e8c8940b9/1/8VUt6Otv9gg88eC2nhde9IdYn5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c8:54:9f:cf:12:ea:65:b0:7b:c8:5d:f9:61:1b:be:4a:74:
         2d:3f:f1:fc:55:29:3d:99:85:be:a6:a3:ab:06:b5:31:ae:1d:
         35:28:04:08:d1:6f:46:77:74:d8:0a:15:99:33:43:78:a2:11:
         53:16:59:61:84:dd:f5:14:8f:02:ba:d6:ac:04:62:43:28:f1:
         b4:cb:75:ab:b8:f0:90:70:85:da:c2:96:b4:d3:3c:8c:2f:2a:
         82:d7:4c:42:aa:81:cb:d7:18:b8:4c:43:8c:77:14:c8:92:32:
         18:88:89:ba:70:0d:55:05:a1:52:ac:6e:ae:63:f0:d7:8a:dc:
         1d:f6:0f:91:f1:1a:b0:e3:8e:7b:97:47:d1:3c:c9:89:d1:f5:
         10:7f:a8:dc:4d:04:70:fd:b3:90:ce:6b:c1:2b:92:5d:b2:93:
         2f:d4:b5:46:8c:f3:53:3b:90:c3:b7:74:51:98:15:6c:c6:4a:
         09:22:da:06:fa:db:82:e9:06:ac:50:be:55:ae:8f:09:33:0c:
         de:d0:7d:0f:96:56:f4:f6:21:cd:ff:af:0f:89:1f:12:68:b7:
         0b:8f:e9:c2:36:65:0f:ba:a5:1b:04:e5:7b:1a:f7:44:29:62:
         3e:43:8b:f2:7d:67:05:9d:c5:24:d4:8d:6e:75:ac:d3:db:c2:
         f1:63:a6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 11:07:42 2024 by rpki-client on console-ams.rpki-client.org