Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
File:                     hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft (raw, json)
Hash identifier:          /rzA1/vjM2iyfQzh5kCElnqNH0jeNms+say80cRf2go=
Subject key identifier:   F6:33:2D:0F:32:F6:81:51:79:48:4E:16:8C:23:7E:E1:F6:7A:3B:72
Authority key identifier: 84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
Certificate issuer:       /CN=84ac851a2bfaae15e85e162baa0788c85912a932
Certificate serial:       018F874991652A16FAC1C21A822AE6CAD5E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
Manifest number:          0DAA
Signing time:             Fri 17 May 2024 16:01:36 +0000
Manifest this update:     Fri 17 May 2024 16:01:36 +0000
Manifest next update:     Sat 18 May 2024 16:01:36 +0000
Files and hashes:         1: hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl (hash: +/1M1JD9IOLvQ4G5Uwb3E0dIkSlER11jW31vvwtQFBM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:91:65:2a:16:fa:c1:c2:1a:82:2a:e6:ca:d5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ac851a2bfaae15e85e162baa0788c85912a932
        Validity
            Not Before: May 17 16:01:36 2024 GMT
            Not After : May 18 16:01:36 2024 GMT
        Subject: CN=f6332d0f32f6815179484e168c237ee1f67a3b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:7c:30:1b:47:03:70:c0:86:a6:2a:06:16:
                    25:e9:80:5b:eb:85:20:5f:9c:f3:52:a1:20:9f:b1:
                    ec:33:87:4f:9e:ce:2d:b8:30:5f:f6:bc:70:3d:16:
                    58:e1:5f:64:c9:40:f6:ec:a6:ac:aa:a3:8d:6c:b3:
                    a4:42:c1:db:60:2f:e6:ef:e4:56:c3:d0:37:76:76:
                    7c:f8:c0:cf:ef:30:39:37:6e:5f:3a:ad:24:e8:e3:
                    c5:86:1c:b9:a0:2e:69:43:40:06:da:6a:ea:f1:b1:
                    66:4b:6f:6a:75:e8:7b:85:6c:ed:61:ba:15:89:12:
                    c9:3e:1d:d5:4e:56:0c:d6:d3:a0:9d:a9:9e:80:f6:
                    5b:fc:c5:f9:89:bf:56:7a:a1:aa:cf:11:30:41:a4:
                    67:22:54:bc:d2:f4:78:fe:ef:05:0b:66:5a:8c:49:
                    eb:53:ac:5f:0b:3f:c7:99:5a:94:b3:b2:fa:53:43:
                    cf:ae:c0:56:2c:eb:06:c9:bc:b2:6a:18:1e:03:1f:
                    a0:ce:9e:56:7f:2d:cd:e8:6c:96:1f:0b:5a:a6:1e:
                    9b:ea:6e:23:aa:44:95:13:43:4c:f5:f8:4c:1d:d8:
                    67:0a:0a:9e:d0:64:38:e6:d8:52:07:7b:6a:c7:c2:
                    21:a5:d6:8d:e4:90:51:73:81:f0:ad:cb:0a:82:3d:
                    4f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:33:2D:0F:32:F6:81:51:79:48:4E:16:8C:23:7E:E1:F6:7A:3B:72
            X509v3 Authority Key Identifier:
                keyid:84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:97:40:c5:60:c2:d9:90:fd:30:da:59:c3:6d:73:8b:ab:73:
         11:c3:42:2e:2a:6e:e9:49:7b:6f:1a:a4:e2:4f:be:0f:0c:fa:
         e0:fb:79:4b:f0:b6:ce:b9:29:58:ea:cf:a8:26:c8:4d:b7:83:
         6d:5b:da:74:34:e4:25:69:df:67:6e:00:23:fa:5d:d2:0d:b0:
         d4:94:fc:ef:cd:1f:1d:c1:68:00:a2:82:d4:aa:23:94:52:e9:
         67:e0:aa:9c:70:22:58:26:9e:03:78:8f:b3:7d:60:bf:41:2b:
         b8:0f:ad:d0:32:11:7c:36:7e:1f:40:60:d8:7a:67:7a:28:b3:
         75:17:3c:61:c4:90:aa:c3:42:2c:ea:cb:c3:a1:c3:ec:7f:a6:
         a4:83:8d:8f:66:32:4a:29:80:b9:1a:f3:49:0e:42:bc:72:23:
         3b:e7:b3:0c:45:df:17:c6:e1:d2:fc:37:74:80:0a:4d:bf:33:
         13:4b:95:8a:31:7f:2e:f2:6a:75:e7:8d:b0:cd:78:53:97:a7:
         87:65:ee:f0:3d:16:50:bf:07:56:cd:9a:c4:ef:dc:a7:0d:13:
         f0:2b:fb:9f:e4:04:82:b4:24:72:65:92:ae:13:a1:7b:10:d6:
         25:bf:4c:0f:21:c8:41:00:b3:d5:f8:23:db:68:0b:95:02:64:
         ea:03:8a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:09:35 2024 by rpki-client on console-fra.rpki-client.org