Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
File:                     lM53iNLj_vf8ANXOEz19bcAPhik.mft (raw, json)
Hash identifier:          IxN0WmyNpjH+k0SGVjoz70RRjUlBbsCcAgfJTfNSdls=
Subject key identifier:   B2:B9:42:FB:61:10:65:5C:E9:80:B8:EE:65:14:75:7D:26:83:46:F9
Authority key identifier: 94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
Certificate issuer:       /CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Certificate serial:       018F87B6960ED0F1FEBE307BA45590E9E5D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
Manifest number:          08EE
Signing time:             Fri 17 May 2024 18:00:41 +0000
Manifest this update:     Fri 17 May 2024 18:00:41 +0000
Manifest next update:     Sat 18 May 2024 18:00:41 +0000
Files and hashes:         1: lM53iNLj_vf8ANXOEz19bcAPhik.crl (hash: TAHIr6CJ6PmKGXTt7gtklICwIuSNyx9waW9agQIj650=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:96:0e:d0:f1:fe:be:30:7b:a4:55:90:e9:e5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
        Validity
            Not Before: May 17 18:00:41 2024 GMT
            Not After : May 18 18:00:41 2024 GMT
        Subject: CN=b2b942fb6110655ce980b8ee6514757d268346f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:5e:f3:50:d7:5f:d8:5a:5d:6d:91:fc:40:
                    ab:2b:4d:3e:11:39:c7:9d:e3:df:02:8f:b1:dd:2e:
                    28:05:35:ac:20:9c:43:a1:19:e5:bd:dd:f0:10:8a:
                    c2:04:ba:41:31:52:3a:d8:a3:1e:90:0e:b1:fb:97:
                    cf:92:e7:36:4d:d7:02:0f:5d:24:de:dd:ec:39:0d:
                    5a:79:f9:27:c5:96:39:a0:de:2e:f4:12:cb:b3:00:
                    0b:55:bc:0a:57:ab:7b:12:5f:9d:70:88:4b:1f:91:
                    c9:30:68:ff:13:70:9a:90:b1:74:ee:db:8c:b4:a6:
                    18:da:f3:3a:85:68:16:df:a1:83:e7:ec:12:8b:10:
                    45:7d:1d:fe:79:10:de:76:63:f8:f3:a6:75:9e:5a:
                    a0:70:1c:f5:8b:ab:23:3c:bc:cc:d8:0e:36:61:42:
                    fa:c6:8e:12:5d:d7:26:d3:ee:d7:ce:51:8a:54:e9:
                    33:13:14:0d:d1:f3:4f:5c:7f:6a:43:2a:39:9d:7b:
                    21:af:77:d9:a1:83:8c:c6:b1:15:34:bd:5a:9d:83:
                    4f:41:4e:72:1e:5f:bf:d6:88:59:7e:ce:71:65:6e:
                    55:67:02:2d:fd:8e:93:b2:47:8c:c6:fa:36:c1:ab:
                    d2:d6:df:33:ee:d2:c2:e9:d5:78:bf:94:16:c4:3b:
                    6c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B9:42:FB:61:10:65:5C:E9:80:B8:EE:65:14:75:7D:26:83:46:F9
            X509v3 Authority Key Identifier:
                keyid:94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:01:56:b0:19:bf:ff:05:6c:21:7f:f2:4b:72:0c:74:37:88:
         41:e3:46:4b:50:5f:96:f9:12:9d:9b:19:ff:8d:12:d9:53:1c:
         0d:58:99:54:dc:71:49:b2:12:59:49:ae:3e:89:76:bd:89:b2:
         e3:ef:46:5d:89:5b:05:48:18:61:ba:6b:bb:06:02:ca:48:79:
         73:3a:31:37:bc:ea:7e:98:ca:e4:1f:4e:b6:99:b0:fc:e4:d8:
         3e:77:fa:06:56:62:55:1c:1b:e0:49:dd:17:f5:c8:6a:29:c1:
         3f:3e:55:cb:f8:8e:dd:1b:cb:63:8f:ab:53:61:16:d6:0c:05:
         cd:c9:44:c3:b4:ba:3f:b6:c0:d8:c1:e7:57:19:f6:6a:bc:3f:
         11:6a:9e:d9:d5:08:09:aa:dd:f2:66:b1:f1:ea:e1:1e:53:ed:
         4e:f9:c5:78:3b:aa:a6:e5:16:52:47:e1:b6:e4:d4:a9:6f:d8:
         e2:d0:2f:5a:0c:81:d4:ba:0a:47:fc:92:ea:97:ef:3b:7f:6b:
         b0:44:aa:42:32:8f:91:e6:85:33:b2:4c:63:c7:c4:a7:75:2d:
         5c:1c:4a:41:20:56:26:f7:5c:11:89:a5:0b:e0:68:f7:ac:91:
         0b:f4:c3:f9:45:d2:66:d9:52:a8:3b:34:1f:70:ed:1c:7e:5e:
         91:d2:9c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:32 2024 by rpki-client on console-fra.rpki-client.org