Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
File:                     tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft (raw, json)
Hash identifier:          ZHl0mJAFK43hMwVrbf1Mh5SeCpjh0lNhb9AIm8kOnAc=
Subject key identifier:   50:5E:55:DD:6F:13:54:1D:FE:BF:B7:C9:32:AF:BA:A0:1B:FF:9A:B7
Authority key identifier: B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
Certificate issuer:       /CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Certificate serial:       018F87495BA10B5A5787E21F29329A3A480E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
Manifest number:          0960
Signing time:             Fri 17 May 2024 16:01:22 +0000
Manifest this update:     Fri 17 May 2024 16:01:22 +0000
Manifest next update:     Sat 18 May 2024 16:01:22 +0000
Files and hashes:         1: tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl (hash: yTYLan9NAQEnJvBWte0NUWM9nYC/eEHp8zGfusLAHjQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5b:a1:0b:5a:57:87:e2:1f:29:32:9a:3a:48:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
        Validity
            Not Before: May 17 16:01:22 2024 GMT
            Not After : May 18 16:01:22 2024 GMT
        Subject: CN=505e55dd6f13541dfebfb7c932afbaa01bff9ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:10:06:7e:1a:56:00:b0:36:71:39:32:39:0e:
                    71:93:f6:60:31:1e:8d:84:ff:40:e7:fa:8a:38:bd:
                    41:b4:78:05:7a:90:3c:ce:4b:41:b3:be:32:de:48:
                    cb:05:97:9c:ad:44:12:69:62:d1:00:f5:18:3f:ee:
                    d4:82:67:dc:1a:7d:54:dc:1c:d6:08:de:a0:a0:b8:
                    6c:8e:0e:01:05:e9:f6:bb:b8:95:11:da:57:58:e0:
                    09:f9:f4:85:07:86:59:d9:27:f6:a6:0d:79:07:e1:
                    01:c8:ec:ec:82:61:74:43:3e:63:53:e5:85:ab:d4:
                    24:5c:8b:51:38:61:43:89:c9:fd:3e:2b:92:51:4b:
                    1e:d6:a0:aa:b6:bc:e9:c2:7d:cf:ed:92:e3:e7:4b:
                    af:60:3e:18:01:e0:66:24:9b:5c:48:4a:e8:e2:d3:
                    50:5e:90:29:bd:92:40:e2:21:b6:0e:57:34:f1:00:
                    a4:f6:72:5c:2b:01:3f:79:21:50:05:c9:ba:d8:1d:
                    25:16:ec:9a:18:4f:99:e2:aa:64:f6:ac:a6:c9:b6:
                    90:bb:9d:dd:b8:f3:be:95:36:77:85:ff:f7:75:8f:
                    af:91:14:fd:44:00:00:e8:a3:e4:71:dc:17:96:39:
                    57:8e:fb:f9:38:04:e6:f4:f2:3e:1d:44:f1:2b:68:
                    73:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5E:55:DD:6F:13:54:1D:FE:BF:B7:C9:32:AF:BA:A0:1B:FF:9A:B7
            X509v3 Authority Key Identifier:
                keyid:B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:72:93:db:10:cd:66:b8:52:c8:cd:f8:84:54:bb:b5:49:
         f4:7f:fe:49:e7:59:5b:66:f0:4c:85:a1:89:79:3b:ff:83:68:
         ee:ce:01:14:fb:cb:78:c5:31:1c:ea:05:7d:2b:a9:76:2a:38:
         63:87:ac:58:ee:4d:93:a8:39:0f:f1:47:12:d0:ce:8f:37:ac:
         31:35:a8:1c:b6:2a:70:57:c3:1f:54:c0:f0:c8:0b:7d:3c:0b:
         34:aa:a0:de:91:18:ad:e0:1c:9c:e4:c2:7c:e2:5e:dc:68:37:
         22:4b:48:71:51:82:25:68:94:95:23:61:bb:b7:83:18:18:04:
         9c:50:03:92:74:04:f2:b4:d2:90:0c:e6:a3:f3:42:30:28:a3:
         47:85:82:b3:23:2e:8b:f6:cb:3a:9c:59:a3:89:46:8a:a8:f3:
         0f:ba:ef:68:04:90:0b:ef:a7:28:23:46:22:64:9d:7f:fe:17:
         bc:d5:7b:52:9f:52:c5:04:47:36:24:87:a2:b0:ed:57:18:f3:
         f4:71:9d:b9:4d:39:11:af:e2:27:3b:6c:b9:3c:c2:d2:e6:ed:
         7c:65:11:c0:e9:9c:2e:a9:b6:49:35:d2:66:6f:75:b1:73:45:
         00:ea:64:0a:f0:69:4c:e3:72:52:56:35:a5:8a:a7:2a:03:f0:
         42:39:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:06 2024 by rpki-client on console-ams.rpki-client.org