Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft
File:                     Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft (raw, json)
Hash identifier:          S4RrMwPeuzwRRUhsjW4aJPAVUJPz8KjKwen9C0hwBhw=
Subject key identifier:   7F:CF:CC:C6:7E:26:3C:02:E2:11:9D:8E:BB:79:2F:67:0F:A6:D4:38
Authority key identifier: 4E:4E:A8:BB:F7:01:D8:FE:36:AA:86:43:71:25:91:58:6B:1F:B1:FA
Certificate issuer:       /CN=4e4ea8bbf701d8fe36aa8643712591586b1fb1fa
Certificate serial:       018F866C72DB7DCF9F77B83F490123359611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tk6ou_cB2P42qoZDcSWRWGsfsfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft
Manifest number:          01ED
Signing time:             Fri 17 May 2024 12:00:05 +0000
Manifest this update:     Fri 17 May 2024 12:00:05 +0000
Manifest next update:     Sat 18 May 2024 12:00:05 +0000
Files and hashes:         1: Tk6ou_cB2P42qoZDcSWRWGsfsfo.crl (hash: MGqy9LgBYYfRtmTeOMhY2Q7PQHIsBJ9QwoRL56HS+/A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tk6ou_cB2P42qoZDcSWRWGsfsfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:72:db:7d:cf:9f:77:b8:3f:49:01:23:35:96:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e4ea8bbf701d8fe36aa8643712591586b1fb1fa
        Validity
            Not Before: May 17 12:00:05 2024 GMT
            Not After : May 18 12:00:05 2024 GMT
        Subject: CN=7fcfccc67e263c02e2119d8ebb792f670fa6d438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:63:fa:61:96:97:66:1f:3c:b7:9c:7c:79:
                    fc:42:50:b5:ad:5a:01:74:ae:a7:0f:e7:f6:f4:e0:
                    f3:01:38:5b:97:a7:75:71:4b:24:bb:cd:11:78:68:
                    d2:95:db:a6:4a:db:02:4e:67:a7:1a:3b:43:bf:34:
                    fe:e6:d8:79:ae:92:c1:bc:da:a8:69:ee:8b:9a:19:
                    13:53:c1:a0:c0:2d:57:2b:dd:a1:c7:90:25:37:a7:
                    b4:78:eb:34:ce:e9:3c:65:2c:93:2c:30:9d:60:86:
                    4f:73:7e:39:3a:8c:ee:05:22:ff:a7:fb:4a:61:a2:
                    e0:bf:50:b3:9c:79:8f:7f:33:57:2c:20:2b:96:8f:
                    d5:5d:1e:d4:f4:01:a6:c2:5f:ae:f3:59:12:01:11:
                    82:0d:ee:b9:9e:e5:dd:e8:b8:8e:86:f3:96:fe:48:
                    ff:e7:20:43:fd:0e:30:2f:cb:75:f4:33:c6:7f:f9:
                    14:35:9d:a6:5d:85:4f:8e:97:d7:b1:50:ca:b3:f0:
                    1b:b7:94:a5:82:cd:f7:e9:8c:94:55:9b:cb:87:c5:
                    4b:36:a8:da:a6:30:05:66:9b:1e:2a:6a:9e:24:65:
                    59:77:34:0f:48:c3:9a:99:0d:a6:47:13:76:60:be:
                    4c:2e:93:46:ae:46:16:f9:bd:e1:d8:a0:22:43:84:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CF:CC:C6:7E:26:3C:02:E2:11:9D:8E:BB:79:2F:67:0F:A6:D4:38
            X509v3 Authority Key Identifier:
                keyid:4E:4E:A8:BB:F7:01:D8:FE:36:AA:86:43:71:25:91:58:6B:1F:B1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk6ou_cB2P42qoZDcSWRWGsfsfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:22:ce:b9:2c:df:29:1f:ab:aa:6b:34:2d:f3:0c:d5:3a:3f:
         62:4a:e2:4f:f2:0e:3b:5f:6e:af:09:71:34:2e:29:1d:ad:b7:
         ea:a6:45:51:01:73:4a:fd:f3:aa:2a:b0:3b:ca:ef:e0:90:b6:
         60:f6:03:83:fd:46:49:b5:94:a4:7b:a9:c3:93:ea:8d:ef:6b:
         22:8b:4a:98:8e:6e:54:14:2c:3c:e2:d1:cd:88:d6:ab:c7:5c:
         90:e3:95:4b:6c:c9:82:af:d7:96:2b:0d:39:02:0e:da:4c:9a:
         fd:c3:b2:ce:12:d9:bc:11:ca:f5:88:42:de:63:88:c8:02:bc:
         e6:d7:31:fb:5b:4a:b0:07:d3:19:9a:69:77:4c:3b:7d:ed:2a:
         16:fe:af:b3:6d:49:f5:35:89:ec:ed:f8:1a:e4:23:a2:fa:42:
         f0:23:c7:d8:1b:4f:dd:e6:9a:82:3c:85:99:60:4c:aa:72:90:
         22:3d:4d:70:95:4e:7f:02:ba:34:4a:db:2a:8f:df:58:f5:77:
         ee:3f:9f:44:8f:64:5a:99:d7:5b:08:9c:ca:dd:10:1e:7f:50:
         d0:a9:86:22:d7:3d:1f:ef:10:c8:44:8c:b3:2f:b5:c3:c4:be:
         9c:4e:a0:29:ac:08:c2:87:00:10:a9:a4:7a:b2:34:c2:8b:8d:
         2e:2a:23:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:31 2024 by rpki-client on console-ams.rpki-client.org