Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft
File:                     qfBi_X8yUpX76ehotu_TGma7HbU.mft (raw, json)
Hash identifier:          rOWWxEwTZoPQzvu6KTMnBvT5S+hRaqNQSpEFD3tywDs=
Subject key identifier:   14:AD:F0:E5:AB:7A:B5:B0:17:FC:C0:68:A8:FB:66:60:F2:1F:8A:92
Authority key identifier: A9:F0:62:FD:7F:32:52:95:FB:E9:E8:68:B6:EF:D3:1A:66:BB:1D:B5
Certificate issuer:       /CN=a9f062fd7f325295fbe9e868b6efd31a66bb1db5
Certificate serial:       018F87497DBF76A764859F0785850486DCE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfBi_X8yUpX76ehotu_TGma7HbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft
Manifest number:          0B6C
Signing time:             Fri 17 May 2024 16:01:31 +0000
Manifest this update:     Fri 17 May 2024 16:01:31 +0000
Manifest next update:     Sat 18 May 2024 16:01:31 +0000
Files and hashes:         1: qfBi_X8yUpX76ehotu_TGma7HbU.crl (hash: j8IX8QRHrJMSuAYDzO5CCEHcD+ZjaAmnkgC0IvJi2Uw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qfBi_X8yUpX76ehotu_TGma7HbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:7d:bf:76:a7:64:85:9f:07:85:85:04:86:dc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9f062fd7f325295fbe9e868b6efd31a66bb1db5
        Validity
            Not Before: May 17 16:01:31 2024 GMT
            Not After : May 18 16:01:31 2024 GMT
        Subject: CN=14adf0e5ab7ab5b017fcc068a8fb6660f21f8a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:bb:c8:ba:a6:83:71:5d:e6:03:4b:31:f7:
                    b9:c8:39:be:89:42:6f:2c:f6:14:a1:db:00:91:30:
                    21:fd:9b:31:41:76:79:4d:f2:ea:ee:1a:f6:e9:da:
                    bf:a9:3b:11:0d:d4:51:05:88:63:e5:c6:4e:6d:4b:
                    5d:59:b3:e8:a7:df:af:84:52:46:06:4e:6c:01:7c:
                    f1:0f:f0:00:84:51:24:ee:b8:55:30:75:ea:e2:c5:
                    e2:23:9d:1f:97:c9:ea:d8:45:5e:a8:c7:eb:62:9a:
                    5a:e8:3e:73:3c:91:f4:17:c0:47:0a:63:59:f7:86:
                    6e:f4:88:fc:b3:26:82:17:2b:ef:e3:49:97:1e:f8:
                    36:d0:27:5d:ac:48:0c:2e:49:7d:78:2a:a5:05:6c:
                    aa:99:bb:a5:a5:fc:1f:fe:a5:39:a6:c6:be:e5:5d:
                    0b:ae:fa:72:ce:f4:b2:58:d1:ca:66:54:85:38:da:
                    06:49:e7:09:73:36:fe:44:c4:1e:53:6b:bc:90:2a:
                    1c:bf:15:75:ef:35:e0:27:03:c5:71:fd:d2:62:8c:
                    f9:e6:e3:70:8b:d1:b5:07:46:92:2f:bd:4b:a7:c4:
                    c5:2f:f5:3c:70:1b:a9:09:80:46:de:e2:f2:16:e4:
                    ba:d7:ab:59:69:1a:84:fa:e7:34:35:a8:59:7b:65:
                    78:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AD:F0:E5:AB:7A:B5:B0:17:FC:C0:68:A8:FB:66:60:F2:1F:8A:92
            X509v3 Authority Key Identifier:
                keyid:A9:F0:62:FD:7F:32:52:95:FB:E9:E8:68:B6:EF:D3:1A:66:BB:1D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfBi_X8yUpX76ehotu_TGma7HbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:6e:62:01:8c:88:b8:46:a9:59:8d:de:e0:2e:3a:a8:1d:
         18:06:a5:ca:bd:83:3e:42:b5:ff:d6:c4:de:f7:7b:0f:93:bb:
         34:2f:ee:7c:4c:60:31:d1:4e:06:50:2d:b7:a7:c3:b5:7c:59:
         59:a2:83:86:94:4e:75:99:dc:c1:6c:be:c9:05:f9:6f:d8:7a:
         aa:da:ab:57:96:4b:f7:1b:1d:d4:bb:3c:ef:31:0a:c5:32:73:
         2d:b2:37:a7:2a:54:48:0e:0c:6f:ac:76:d1:8c:8a:ab:8c:b7:
         19:ed:0c:62:12:f4:cd:67:a2:7c:e8:00:8f:07:d7:52:46:10:
         03:00:f3:fe:9e:d2:fd:4c:dd:d0:09:e9:79:50:a0:94:96:54:
         30:7a:38:86:ec:f5:d5:2a:2f:5f:6b:d2:e3:52:68:72:89:45:
         29:8f:f9:61:ee:28:5f:24:07:48:c7:0a:45:ad:f8:e5:d4:6b:
         4d:1a:0c:af:19:a0:77:19:f6:e7:fe:2e:11:4d:b6:17:30:2b:
         1e:80:ef:1a:d6:01:4d:58:15:24:ac:91:2b:22:dc:db:b5:94:
         d6:ba:8e:50:73:36:3f:0c:e5:53:78:f0:15:c5:b4:15:d1:31:
         94:ab:e0:ac:c1:e6:68:27:8b:e5:ba:0e:71:5b:7a:34:52:ef:
         3f:f5:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:14:53 2024 by rpki-client on console-ams.rpki-client.org