Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.mft
File:                     vwhJDuKbOzwpO91zIrWjOthA2AE.mft (raw, json)
Hash identifier:          hW8jAUuNwJ/3H+ZxV8H2upw2YG+o/OKFyk26frjXF48=
Subject key identifier:   B1:8C:5C:68:7C:9E:6C:0B:F5:F4:89:81:0F:F5:81:2E:93:2D:F6:8C
Authority key identifier: BF:08:49:0E:E2:9B:3B:3C:29:3B:DD:73:22:B5:A3:3A:D8:40:D8:01
Certificate issuer:       /CN=bf08490ee29b3b3c293bdd7322b5a33ad840d801
Certificate serial:       018F874936EB1876DD2EDC9DC6CEC1CA534B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vwhJDuKbOzwpO91zIrWjOthA2AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.mft
Manifest number:          06E7
Signing time:             Fri 17 May 2024 16:01:13 +0000
Manifest this update:     Fri 17 May 2024 16:01:13 +0000
Manifest next update:     Sat 18 May 2024 16:01:13 +0000
Files and hashes:         1: vwhJDuKbOzwpO91zIrWjOthA2AE.crl (hash: 3eWDHgxpgjJaQr/yd9LnOhoe+pZWUFlIsbQT57I0Ffs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vwhJDuKbOzwpO91zIrWjOthA2AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:36:eb:18:76:dd:2e:dc:9d:c6:ce:c1:ca:53:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf08490ee29b3b3c293bdd7322b5a33ad840d801
        Validity
            Not Before: May 17 16:01:13 2024 GMT
            Not After : May 18 16:01:13 2024 GMT
        Subject: CN=b18c5c687c9e6c0bf5f489810ff5812e932df68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:c2:84:38:0f:ce:2b:08:25:e7:bc:e4:42:
                    9d:2a:83:a8:99:81:37:d8:3f:69:ad:94:86:49:d6:
                    7c:48:33:17:8d:71:2a:aa:cd:17:3e:52:40:89:ed:
                    98:61:aa:90:bd:e6:9c:2a:f3:12:d4:4e:1d:bf:35:
                    db:9a:85:00:bf:c0:22:fc:03:29:c2:bb:e4:62:ef:
                    bb:79:5b:94:70:22:0d:18:75:98:99:d4:cc:09:ea:
                    fb:99:f3:72:f4:73:de:68:b8:18:d2:d1:6b:96:f0:
                    43:71:cc:24:40:c5:8f:7b:f0:6b:4c:e7:a8:67:bf:
                    77:5b:de:a4:48:27:16:d5:74:6e:c5:7d:2f:0f:f2:
                    c9:93:a5:2d:65:c1:21:b0:38:a8:26:8b:b0:20:6b:
                    7a:ad:60:11:b2:dc:a8:7a:84:55:d5:ad:22:78:d3:
                    e9:a7:ab:84:20:18:02:b8:44:0e:40:a2:a1:dd:29:
                    06:69:77:f2:88:b1:29:7e:73:cc:2d:da:f8:1c:1a:
                    88:dc:d6:f0:1c:d2:41:76:a1:f1:53:f7:e2:08:ed:
                    45:21:e4:b3:69:0c:a5:7b:8a:dc:de:5c:b0:71:00:
                    1f:50:3b:74:e2:0e:53:61:a7:47:c2:a4:4e:6d:f6:
                    f7:49:66:6b:bb:60:07:8f:90:49:fc:b7:21:7f:06:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8C:5C:68:7C:9E:6C:0B:F5:F4:89:81:0F:F5:81:2E:93:2D:F6:8C
            X509v3 Authority Key Identifier:
                keyid:BF:08:49:0E:E2:9B:3B:3C:29:3B:DD:73:22:B5:A3:3A:D8:40:D8:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwhJDuKbOzwpO91zIrWjOthA2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:05:69:6c:b2:89:cf:76:27:c7:1f:39:de:4f:86:85:73:49:
         80:60:18:ff:be:0a:d5:97:4e:6f:85:3c:79:54:d7:0d:b2:56:
         9a:8b:23:0a:02:61:64:9c:34:db:fd:82:02:ea:f9:7d:7d:ed:
         c2:54:41:1d:a6:43:b5:de:cf:1a:b6:02:da:19:c1:07:aa:75:
         20:13:1c:8a:81:c0:fd:a8:6e:fb:9a:b4:95:b5:bf:e0:d6:af:
         ff:e8:eb:ed:aa:55:18:58:c0:46:54:c5:4d:1f:e9:35:5e:26:
         34:76:63:ac:cf:1f:25:34:cd:bb:32:f7:7d:a3:1b:d3:9c:84:
         8e:67:77:a0:2b:5e:66:2e:30:03:f4:8c:e8:5a:78:ac:e9:de:
         40:90:3e:9a:dd:3c:e3:fb:f3:b1:56:64:49:70:88:df:94:3c:
         3f:a4:ee:1a:8d:e0:f2:f2:ca:40:cc:9e:ee:0a:c8:c8:40:b1:
         e0:1f:83:8c:90:b6:ed:6a:5e:23:fe:3e:a7:b1:53:f4:4f:4d:
         fe:97:34:46:23:cf:f2:e4:9d:f6:f0:c8:9c:38:57:e1:45:e7:
         b0:a8:00:16:0b:65:5d:44:c5:92:2d:a2:96:48:b7:57:83:07:
         06:01:5d:35:a7:c8:0e:22:a9:8e:3e:d3:7d:7f:ed:07:f8:48:
         d9:0b:d5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:37 2024 by rpki-client on console-ams.rpki-client.org