Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
File:                     tgLHVGpnwMWYp0_yv1w5IyU079U.mft (raw, json)
Hash identifier:          FlRxLlpeFK+CLVoyaexBNp3nlFf5YyYh/UyzhvSPwDo=
Subject key identifier:   D9:73:66:CC:40:FF:FD:DB:EA:B8:CF:46:5E:62:16:41:99:88:91:37
Authority key identifier: B6:02:C7:54:6A:67:C0:C5:98:A7:4F:F2:BF:5C:39:23:25:34:EF:D5
Certificate issuer:       /CN=b602c7546a67c0c598a74ff2bf5c39232534efd5
Certificate serial:       018F87B66511268EB296DC9B785ABD59DE49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
Manifest number:          1024
Signing time:             Fri 17 May 2024 18:00:28 +0000
Manifest this update:     Fri 17 May 2024 18:00:28 +0000
Manifest next update:     Sat 18 May 2024 18:00:28 +0000
Files and hashes:         1: tgLHVGpnwMWYp0_yv1w5IyU079U.crl (hash: h9rGctJtCyQtJtNVO5JFhu8X3jQ6jkbOZhYMNdXW4FY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:65:11:26:8e:b2:96:dc:9b:78:5a:bd:59:de:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b602c7546a67c0c598a74ff2bf5c39232534efd5
        Validity
            Not Before: May 17 18:00:28 2024 GMT
            Not After : May 18 18:00:28 2024 GMT
        Subject: CN=d97366cc40fffddbeab8cf465e62164199889137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3d:b6:46:b6:11:d5:82:1c:fc:8e:4f:ad:e2:
                    83:95:0b:ee:af:94:40:f8:44:69:ca:06:dc:c0:12:
                    01:c7:8c:cb:40:f1:e6:a3:53:e8:b8:23:67:52:da:
                    c9:09:62:0c:cb:4e:ea:30:3b:62:49:38:a7:cc:c7:
                    80:41:c5:a1:f9:8b:6c:7f:bf:b3:5f:53:7d:98:3a:
                    69:b0:7b:ba:7f:40:94:06:68:96:b9:3f:68:42:25:
                    a3:18:cf:85:60:d0:cc:86:61:96:ba:63:b7:e6:e9:
                    da:ba:99:54:ad:b9:fa:97:40:71:28:68:c0:18:79:
                    1b:88:99:8a:37:29:93:c4:f0:1c:34:64:a4:7c:e8:
                    ed:36:be:fc:a4:1b:77:e6:ac:b1:ef:ae:67:b0:b1:
                    43:38:06:cf:9b:ca:ad:e8:1e:23:ef:bc:65:2e:e5:
                    0d:5f:05:03:20:66:54:26:75:62:2c:e8:44:49:70:
                    6a:1b:1f:8a:de:91:e5:ad:61:88:ae:eb:86:26:d5:
                    fd:59:bf:ba:df:f5:97:5f:d0:40:06:5d:d7:22:53:
                    b0:2c:d4:03:1e:d5:db:3e:cc:51:1c:61:eb:e9:af:
                    8d:99:e3:5c:5a:cd:6a:b5:b9:3c:97:03:65:86:72:
                    6c:2e:18:ca:57:18:98:0e:48:fc:84:30:f1:04:57:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:73:66:CC:40:FF:FD:DB:EA:B8:CF:46:5E:62:16:41:99:88:91:37
            X509v3 Authority Key Identifier:
                keyid:B6:02:C7:54:6A:67:C0:C5:98:A7:4F:F2:BF:5C:39:23:25:34:EF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:dc:8b:10:41:d1:8c:5e:eb:0d:5d:ef:a3:6c:52:61:8a:
         c9:8d:4f:cd:a0:43:e8:ea:55:c3:01:a2:d9:05:65:e2:1c:80:
         72:66:a8:75:2f:af:c9:41:0b:3a:86:c1:28:a1:70:87:9b:c1:
         83:06:3b:6b:7e:b5:be:57:4d:9a:14:92:cc:e9:e1:a6:73:d8:
         d1:70:49:c2:62:2c:a0:12:e4:23:04:7d:cc:2d:df:14:5e:10:
         2a:17:e0:cf:6d:d4:df:c3:50:cc:e6:ec:99:39:2b:c2:05:06:
         fa:f8:f0:a4:b1:9c:60:ff:d8:c5:96:ea:70:3e:32:af:a3:f4:
         14:6a:f7:b8:7c:4a:2c:7b:e4:04:c4:e5:a8:a2:df:92:f9:93:
         cd:2b:f3:15:ae:c0:9e:f7:e8:1e:87:66:dc:0e:20:02:85:11:
         0e:c1:a3:8c:6d:f6:cb:77:30:0f:d7:8d:37:f1:ac:87:ec:b2:
         20:82:28:9d:e0:ca:cc:15:d7:51:a3:d1:36:ef:6a:28:e4:eb:
         fe:4c:ee:7d:5e:9e:23:90:8a:f0:b8:f5:27:ee:b3:4f:4b:ba:
         bc:33:b5:57:37:43:2d:9d:64:e6:90:b9:e0:4c:f7:90:d1:ca:
         56:eb:1b:09:77:79:1a:4f:7b:7e:2b:33:d1:4d:77:e8:c7:92:
         e3:0a:3c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:20 2024 by rpki-client on console-ams.rpki-client.org