Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File:                     fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier:          Ou1yLvlnE3FF1TnllE9rMnz7yH1U7jZHEV2xQQq87Rs=
Subject key identifier:   56:2D:8D:FB:00:27:6A:68:28:0E:66:03:74:50:3F:5A:B2:B2:25:84
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer:       /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial:       018F863636E36F5860FC0B73B01A8D4AF03A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number:          0250
Signing time:             Fri 17 May 2024 11:00:50 +0000
Manifest this update:     Fri 17 May 2024 11:00:50 +0000
Manifest next update:     Sat 18 May 2024 11:00:50 +0000
Files and hashes:         1: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: nqY7CpNineH0TXskAmWfcXmTREHJeb9G2ALsYkBz1kw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:36:e3:6f:58:60:fc:0b:73:b0:1a:8d:4a:f0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
        Validity
            Not Before: May 17 11:00:50 2024 GMT
            Not After : May 18 11:00:50 2024 GMT
        Subject: CN=562d8dfb00276a68280e660374503f5ab2b22584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:9a:7c:7e:5f:ef:a4:6d:61:1f:42:45:5b:
                    d4:d1:48:19:50:d0:1a:97:55:1f:ad:7c:96:80:72:
                    6e:14:a6:d7:01:76:81:57:31:1f:81:16:bb:cf:24:
                    46:26:33:b6:13:72:7c:50:74:3d:78:7f:0f:14:e2:
                    37:5d:5d:39:a4:a0:1e:5c:15:ed:8d:70:ce:3f:21:
                    70:01:71:67:0e:f9:ce:ae:15:f4:0d:4c:fc:3a:43:
                    5f:3f:d6:62:96:fc:e8:72:88:bb:b8:d5:f6:c0:eb:
                    d1:9c:10:22:e8:61:f1:53:32:46:29:c0:14:57:b5:
                    55:01:6f:e5:6c:c0:ab:15:d2:f7:69:45:a2:ae:86:
                    e4:93:3d:d1:2a:54:f1:fa:88:af:00:71:5c:e5:a1:
                    34:f5:70:6a:fc:8c:df:d4:8b:97:68:bc:66:dd:24:
                    08:a7:c0:07:39:00:f6:8e:2a:cc:60:e9:90:28:68:
                    53:5b:66:af:30:7a:0d:3c:b1:0b:ad:17:82:75:4b:
                    7d:01:a7:51:29:5f:79:83:26:2a:1c:65:e9:e1:f7:
                    b2:34:54:2b:eb:ec:a6:ad:10:25:af:14:db:0f:32:
                    9a:a1:9b:e4:fa:92:30:f3:59:6b:1d:fc:ac:f9:6e:
                    c8:5a:7c:25:de:1b:03:97:60:e5:44:f3:fd:82:ec:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2D:8D:FB:00:27:6A:68:28:0E:66:03:74:50:3F:5A:B2:B2:25:84
            X509v3 Authority Key Identifier:
                keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f4:7c:5f:0d:1c:1c:de:06:af:b1:da:0a:d9:19:8d:54:92:
         c0:44:47:ce:0a:93:58:d1:05:4b:0c:55:43:2e:ee:57:2e:25:
         36:25:52:07:9d:18:1d:1e:a3:7e:14:37:24:2f:1b:a4:2a:98:
         a8:2e:e7:0a:fd:39:65:af:0b:c0:2b:87:45:16:46:e4:df:ae:
         91:c0:03:fe:38:ca:d9:52:32:85:94:4c:e9:1e:86:ab:fa:f2:
         d7:7d:5b:ae:f1:96:04:36:21:00:47:ad:e1:6f:9e:cf:f9:1f:
         df:6f:b7:d2:35:ca:b8:c1:fc:88:60:e2:b6:a5:0c:02:3c:49:
         2a:76:64:87:c4:a5:9f:44:01:8e:53:bc:38:86:3b:da:ee:a0:
         0c:a6:d2:89:5f:72:ad:51:54:34:fe:cb:b1:7f:bc:e0:8d:1b:
         48:61:36:8f:e7:e3:15:46:8f:19:ba:b8:ed:f2:58:ee:06:5c:
         5e:a8:c7:23:e6:48:4a:85:88:11:08:95:ab:75:d1:83:62:f4:
         89:8a:a2:0f:94:38:c4:e8:7a:29:0c:78:e3:fb:ec:0b:8b:87:
         fe:50:91:0c:f6:bc:58:e4:26:1a:9c:2b:ff:63:1a:34:31:a3:
         7e:c0:73:59:c7:5b:f2:ca:04:49:c8:c9:61:ad:d7:25:a7:8a:
         53:ce:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:07 2024 by rpki-client on console-ams.rpki-client.org