Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft
File:                     hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft (raw, json)
Hash identifier:          YcotHyJv8bkhIrPEzzbtzs9rjk6ynG2rPOMY3hIanfQ=
Subject key identifier:   BF:75:89:1E:A1:AB:1E:05:D2:58:31:1A:00:1E:C3:5E:AB:93:0A:09
Authority key identifier: 87:37:F3:37:1A:DB:AD:0E:23:D9:02:93:F8:93:53:61:ED:C4:8C:79
Certificate issuer:       /CN=8737f3371adbad0e23d90293f8935361edc48c79
Certificate serial:       018F8749642309EFE739D4AA011EB3F35CF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft
Manifest number:          0246
Signing time:             Fri 17 May 2024 16:01:24 +0000
Manifest this update:     Fri 17 May 2024 16:01:24 +0000
Manifest next update:     Sat 18 May 2024 16:01:24 +0000
Files and hashes:         1: hzfzNxrbrQ4j2QKT-JNTYe3EjHk.crl (hash: 0klNth9ynZizHx+MA46b/4xCrRSU6/jWHHD2dwXpAG8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:64:23:09:ef:e7:39:d4:aa:01:1e:b3:f3:5c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8737f3371adbad0e23d90293f8935361edc48c79
        Validity
            Not Before: May 17 16:01:24 2024 GMT
            Not After : May 18 16:01:24 2024 GMT
        Subject: CN=bf75891ea1ab1e05d258311a001ec35eab930a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2d:76:dd:2f:19:c3:6a:ec:ba:18:55:c2:52:
                    af:f4:48:0c:24:22:08:e2:c8:b0:2d:21:65:75:f9:
                    68:d0:b2:ea:bc:44:40:72:01:04:de:24:70:c3:d5:
                    e1:d9:b5:da:d3:43:df:fd:1d:26:5c:c5:6c:9d:80:
                    c3:96:0b:07:5c:8f:db:77:eb:ec:7a:bd:78:5b:16:
                    05:b5:b1:38:28:f6:ad:d5:21:27:4e:4a:0d:1c:c6:
                    6b:26:a8:18:f8:28:c5:8f:3b:e1:25:dc:d1:93:92:
                    b3:ba:fd:52:6c:e9:50:f4:4c:2e:c8:2e:06:e1:fd:
                    a8:f7:c1:49:18:9e:9a:dc:7c:bd:3a:ed:c5:a7:d1:
                    9c:77:53:0f:e8:03:a7:f8:28:90:df:06:69:d0:37:
                    0d:26:6b:94:41:67:94:52:ae:08:7c:ef:0c:31:99:
                    8d:10:74:09:65:e2:db:7c:2c:61:9c:82:47:c7:22:
                    ac:2a:6a:a9:63:4d:ab:fb:82:87:f8:b5:27:e1:bf:
                    e9:96:0b:32:c2:49:24:98:ab:87:97:f5:f7:15:a7:
                    e7:b8:14:5f:98:e4:54:53:24:9b:8d:ae:fd:57:38:
                    dc:15:14:00:b9:f3:b1:02:28:d9:a1:87:05:c8:a1:
                    7c:0a:34:ce:9c:09:b9:5b:c1:7a:b7:8f:86:6e:fb:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:89:1E:A1:AB:1E:05:D2:58:31:1A:00:1E:C3:5E:AB:93:0A:09
            X509v3 Authority Key Identifier:
                keyid:87:37:F3:37:1A:DB:AD:0E:23:D9:02:93:F8:93:53:61:ED:C4:8C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ec:8b:f3:bf:2c:9f:41:a0:9b:65:f0:ba:82:f1:76:65:c5:
         3b:1a:5e:93:76:0d:cf:73:c1:cf:b2:06:00:7c:ce:08:92:2f:
         65:19:29:69:ad:2e:c7:0a:6c:cf:f9:58:d0:4e:97:43:8b:af:
         57:f2:bf:78:b0:d6:12:db:f2:38:ee:08:f8:b0:92:ba:20:77:
         60:73:3f:82:2c:be:b8:3c:c1:06:35:50:e0:62:7c:c5:ed:42:
         a3:7b:2f:ba:43:ec:1f:dc:f0:62:6f:9e:47:a7:e6:39:3f:49:
         6f:d4:06:ec:89:a4:e9:94:fd:30:f1:4e:43:ac:d0:7f:26:ad:
         93:a6:6b:31:94:a3:69:ac:8f:92:10:bf:3e:f3:c9:bd:02:8a:
         2f:fc:f1:f6:2c:09:5f:ba:4e:79:ed:30:0d:ad:b5:35:c5:e8:
         47:ec:36:e1:3c:ff:bd:66:e5:8c:72:ac:bf:07:86:8e:b0:fe:
         3c:ce:66:5e:8c:47:4d:d2:1d:25:45:d4:ac:44:42:6c:40:01:
         e2:f1:bd:73:1a:ad:77:22:53:ea:83:ad:a1:82:85:35:49:a3:
         43:b2:95:d7:ce:c6:6c:2f:8d:0b:82:8b:68:67:f1:51:5e:59:
         b0:01:8b:08:48:37:c8:4b:eb:b2:90:5d:c9:26:1a:d2:25:5d:
         bb:81:4e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:29 2024 by rpki-client on console-ams.rpki-client.org