Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
File:                     pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json)
Hash identifier:          7IhCY3ITCNvuXPFs+qkQdptg9QwdkJUMRpQR/G+RDfs=
Subject key identifier:   A3:21:BF:D1:05:4C:50:06:50:11:CD:6A:3E:25:C5:4E:B5:EF:DC:E0
Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Certificate issuer:       /CN=a4c9f067007684facca9be8ce02da4676c09972a
Certificate serial:       018F87B678081C55ED5A6CEE9948ADFFBBBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
Manifest number:          01AF
Signing time:             Fri 17 May 2024 18:00:33 +0000
Manifest this update:     Fri 17 May 2024 18:00:33 +0000
Manifest next update:     Sat 18 May 2024 18:00:33 +0000
Files and hashes:         1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: E4/pojxP4VmziJyvZ5e6syFeOeAPLz+WKeYR5X+kPro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:78:08:1c:55:ed:5a:6c:ee:99:48:ad:ff:bb:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a
        Validity
            Not Before: May 17 18:00:33 2024 GMT
            Not After : May 18 18:00:33 2024 GMT
        Subject: CN=a321bfd1054c50065011cd6a3e25c54eb5efdce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:d0:8e:57:88:32:7c:ea:39:45:b9:a8:ff:
                    33:40:f3:62:05:12:e9:a7:eb:09:fd:51:b8:69:b6:
                    93:b1:b8:0c:3a:57:05:0d:2b:43:61:84:a7:73:72:
                    26:7d:2f:5b:49:8e:bd:4b:65:d1:f2:ba:2a:8e:a6:
                    ac:75:93:5a:54:92:71:08:4c:a7:70:29:e3:60:de:
                    3b:37:ac:1a:73:da:0e:06:31:7e:26:a2:28:27:17:
                    96:f1:1d:dc:91:2b:ce:02:fc:af:c2:a0:fa:ff:b6:
                    a8:2f:f0:d2:b7:69:23:0d:89:a5:09:25:80:64:84:
                    68:06:66:9a:5a:30:65:8c:9c:e0:89:c6:b1:1a:94:
                    fc:cf:6f:8d:cd:8b:d8:8d:ee:9a:b6:9f:85:4f:6f:
                    a4:50:32:16:b9:2a:8b:62:3b:ae:6e:8c:72:f2:40:
                    94:07:c9:73:ae:ce:cd:88:f9:28:4b:b2:88:23:d9:
                    b6:47:25:a3:13:9c:77:97:87:6a:98:3f:8b:02:d8:
                    dd:c0:30:0f:bd:ec:f5:e2:1a:bd:6c:76:89:83:d1:
                    06:14:f1:fe:9b:d4:93:d1:54:52:c7:b6:74:bb:6b:
                    72:02:bd:4b:bd:8e:9a:18:eb:77:9e:d9:4b:de:8e:
                    a0:c0:ef:b5:bc:da:7d:84:49:48:52:86:1a:8b:4d:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:21:BF:D1:05:4C:50:06:50:11:CD:6A:3E:25:C5:4E:B5:EF:DC:E0
            X509v3 Authority Key Identifier:
                keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:30:73:b8:4f:5a:55:69:d7:bd:16:33:8f:6a:c8:3e:f5:56:
         65:db:85:df:ec:1c:aa:d3:1a:f6:9d:37:e7:18:72:3b:bd:c7:
         ac:9d:20:c2:66:04:4a:6d:8c:4c:de:dd:2b:91:18:7d:c7:f4:
         14:da:1b:ff:17:ea:f8:03:9f:95:e4:02:13:86:f8:89:7c:e1:
         b5:d3:b0:47:ce:d8:16:fa:70:d7:aa:c7:63:df:f1:82:ff:77:
         69:da:c0:74:5d:01:d1:00:4c:df:4e:7b:fc:2c:d4:7f:67:a9:
         c5:7a:70:82:70:80:96:20:8b:4f:73:25:ac:8f:51:4b:57:94:
         d0:d5:91:34:35:a9:1d:d9:11:c6:a2:d8:03:90:af:f8:5e:09:
         52:9f:99:a9:ee:00:41:69:1a:80:3e:9b:fd:a0:ae:9d:a6:a7:
         af:0b:72:42:99:15:74:5a:d8:23:c3:4d:4b:8e:bf:2e:50:34:
         82:78:05:66:0f:11:85:3a:93:38:f5:d3:e5:81:61:79:22:dd:
         cd:8d:24:1e:6d:37:5e:24:b4:3e:07:30:22:78:34:94:03:86:
         7d:39:d1:bc:2a:17:3c:a9:d6:bf:07:aa:e8:62:82:63:54:f5:
         68:36:e1:e9:35:2f:68:74:a9:4f:dd:6e:83:11:09:2f:c3:c2:
         51:a0:ea:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:23 2024 by rpki-client on console-fra.rpki-client.org