Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
File:                     rTaQk6MtG34Ou-MkRRxY10iuzUI.mft (raw, json)
Hash identifier:          y23dIVETJ5HV02U5Dz2pWi7JJ1eLbdUnkj6ja18czdQ=
Subject key identifier:   56:56:3D:75:26:47:66:18:B2:26:BE:47:BC:F8:34:AD:B4:4A:28:40
Authority key identifier: AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
Certificate issuer:       /CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Certificate serial:       018F8824758D7DA2CC875245B3CE0C208231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
Manifest number:          8E
Signing time:             Fri 17 May 2024 20:00:41 +0000
Manifest this update:     Fri 17 May 2024 20:00:41 +0000
Manifest next update:     Sat 18 May 2024 20:00:41 +0000
Files and hashes:         1: rTaQk6MtG34Ou-MkRRxY10iuzUI.crl (hash: jYz/8Oo5q+NuK3R0GrI82rTGKRBP4/FUMksn1izkMoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:75:8d:7d:a2:cc:87:52:45:b3:ce:0c:20:82:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
        Validity
            Not Before: May 17 20:00:41 2024 GMT
            Not After : May 18 20:00:41 2024 GMT
        Subject: CN=56563d7526476618b226be47bcf834adb44a2840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:fd:de:72:15:50:8d:91:c8:92:df:1b:19:
                    87:00:8e:b5:d7:1a:af:27:92:b4:7c:f4:3e:84:48:
                    de:d7:22:3c:1e:5f:68:d9:80:07:2b:50:e6:af:ec:
                    8c:2c:33:63:10:3f:51:34:3f:93:ec:f4:40:cb:ab:
                    cc:19:5e:47:ee:f4:9f:57:c7:a1:aa:f2:11:1b:fc:
                    86:e9:08:a8:68:0d:6d:68:08:fa:93:c3:9d:b2:c9:
                    c7:42:3e:43:d7:47:8a:43:fe:27:b8:14:ce:2a:b8:
                    a4:22:ab:c2:53:fb:3a:8b:e3:1a:31:46:a2:03:80:
                    01:00:c8:61:1c:86:22:80:af:b7:96:2b:1b:1e:d9:
                    d8:d4:35:56:d9:6c:46:d3:fc:a6:ad:e8:51:53:f2:
                    70:f3:86:6d:3e:85:e0:03:7b:d6:ec:56:d7:db:70:
                    19:6d:ba:1f:b9:c1:a9:92:4a:bc:f6:b9:82:4c:5b:
                    2d:0f:6f:0e:e7:9c:51:1b:ea:73:5b:c6:ce:65:e7:
                    c3:e6:e1:b8:06:ca:81:81:06:1a:8b:7a:94:33:3b:
                    b3:be:52:23:df:ee:5d:b2:c9:9d:0f:87:28:0c:85:
                    f0:29:30:86:eb:73:b7:09:2e:fe:b8:7e:48:36:19:
                    8b:eb:84:2c:1d:c3:d8:de:08:d9:ba:89:0b:a9:01:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:56:3D:75:26:47:66:18:B2:26:BE:47:BC:F8:34:AD:B4:4A:28:40
            X509v3 Authority Key Identifier:
                keyid:AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0d:06:90:b2:a1:83:e1:84:55:e9:d2:d2:10:59:b7:70:4c:
         2a:04:db:a7:60:71:25:1a:3d:fb:67:c5:59:bc:e3:de:a7:e9:
         48:49:33:98:13:af:ea:66:a5:9f:29:4d:0d:61:bf:5b:c7:c7:
         53:1c:9a:07:28:4c:87:3f:d6:1e:68:75:eb:10:4e:0b:1d:dc:
         84:e2:28:99:b4:a0:66:fd:9e:e4:14:01:56:0e:ee:7f:cb:c1:
         41:e5:39:a5:ed:f2:34:c0:eb:e7:25:a7:a7:07:80:55:ef:7b:
         22:ce:45:e7:c0:c7:e2:c3:d4:a7:2a:14:d2:07:ca:40:b7:75:
         56:8b:99:ca:12:9a:13:8c:d6:3a:2e:b9:ad:7e:ff:46:b2:20:
         21:3d:09:07:d1:09:49:c8:47:47:78:51:34:9c:a0:0c:e1:09:
         2a:8c:a2:6d:33:c4:1b:cb:90:57:dc:ae:4e:b1:08:8e:a3:17:
         74:9d:c7:9f:86:6a:31:7b:8f:b5:27:d6:74:89:f1:c3:b5:dd:
         ac:be:d2:51:7d:5e:e0:0d:48:e9:97:40:f7:de:54:1b:78:b8:
         29:a2:c4:86:b5:4b:3e:2a:3e:62:84:9c:68:2d:d3:f9:a4:2a:
         04:2a:98:6b:bf:91:ff:47:54:68:e1:c5:b8:1b:b8:49:cd:3c:
         48:d6:d7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:35 2024 by rpki-client on console-fra.rpki-client.org