Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File:                     PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier:          ZzrO6iGZ5RKb4w8xRmbLF1sKvdLQ+8w85O1Zj7k3+KU=
Subject key identifier:   5D:13:1F:AC:60:87:66:E7:80:70:F8:E6:3C:85:D0:5D:F1:28:DD:17
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer:       /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial:       018F87B6457B4BE5D95002D766D01A51BEF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 18:00:20 +0000
Manifest this update:     Fri 17 May 2024 18:00:20 +0000
Manifest next update:     Sat 18 May 2024 18:00:20 +0000
Files and hashes:         1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: SL9sO7RIgTUNwq35m+DLIAL0XpWgDRXIvlzdNSCyo3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:45:7b:4b:e5:d9:50:02:d7:66:d0:1a:51:be:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
        Validity
            Not Before: May 17 18:00:20 2024 GMT
            Not After : May 18 18:00:20 2024 GMT
        Subject: CN=5d131fac608766e78070f8e63c85d05df128dd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:ae:ff:23:2d:e7:5b:23:a3:4f:25:7a:63:
                    75:05:81:c5:b4:ae:b4:5e:16:b0:45:07:c3:6f:af:
                    0d:38:a9:d9:73:4a:c4:3e:5d:c6:f9:01:99:83:1d:
                    58:f3:10:ae:8b:28:6b:f8:72:ef:1e:71:78:85:83:
                    c9:a6:23:52:e3:83:90:fd:d0:6d:bc:41:8e:28:a5:
                    12:e0:10:aa:34:16:7a:99:bd:0e:29:2f:f8:a1:25:
                    47:76:62:be:39:5f:52:ca:8d:8d:b1:ac:c7:99:5c:
                    fe:41:db:12:38:f8:1c:0f:af:7b:15:62:fc:bc:44:
                    63:46:b7:77:f1:d9:97:11:53:d3:1a:e4:d1:32:e0:
                    1d:ba:bb:38:44:4e:78:ed:74:2c:c9:c6:95:17:fa:
                    0b:f7:da:6c:15:ad:46:d0:b1:c0:f5:db:6a:39:3e:
                    11:b2:7d:a0:93:a3:87:d7:b6:3b:e1:56:20:4a:74:
                    31:d1:f3:15:4b:4a:71:4b:b3:0b:14:9b:65:09:98:
                    34:52:e9:68:ef:a5:61:81:34:a9:70:7a:3d:14:5b:
                    81:a5:9d:1a:cb:b8:28:9e:44:2b:b1:ed:91:e2:23:
                    91:71:84:33:5e:8a:76:05:2f:08:3d:24:39:8d:a7:
                    cc:9e:ae:ee:22:9e:f7:94:5b:49:c8:26:c0:0c:9e:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:13:1F:AC:60:87:66:E7:80:70:F8:E6:3C:85:D0:5D:F1:28:DD:17
            X509v3 Authority Key Identifier:
                keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:18:ae:43:57:5d:fa:58:56:c9:20:ef:e2:95:0c:f3:20:
         3e:c5:fc:ec:50:17:a6:43:ca:65:41:19:34:fa:e2:1a:25:01:
         1e:21:14:9a:97:71:47:e6:f0:d7:49:6a:51:37:dc:68:87:5e:
         bf:bb:e1:50:8d:91:ad:1f:d3:12:2d:14:94:ce:a2:e1:de:ca:
         07:6f:db:4b:56:da:1d:27:8d:73:3f:18:37:6f:81:da:f5:49:
         a8:83:b1:96:bd:9d:0a:ee:d8:47:27:6e:cc:e8:74:66:34:93:
         a5:3a:73:e1:95:58:23:a1:65:c2:40:eb:99:29:74:22:bf:99:
         96:88:93:e0:e5:b9:26:ae:09:02:9a:f8:51:6b:5c:88:71:7c:
         e4:03:a9:2e:f4:af:70:d3:cc:e9:ab:50:2a:6b:5f:1f:8e:d8:
         13:7e:58:bc:1f:29:56:44:db:18:19:10:94:1c:a2:01:2b:30:
         b4:cb:6d:a7:98:9d:c8:06:62:b3:33:ff:2c:36:1d:6b:3d:96:
         4b:58:e1:4d:e9:57:eb:39:38:03:49:71:c9:b3:9e:9c:65:fd:
         0d:9b:57:a5:a3:2c:cd:93:63:c8:15:b0:2a:87:9d:27:96:8b:
         6a:e5:40:36:67:8e:e5:48:80:df:a1:a0:c9:4c:d6:b6:df:bf:
         09:cf:5d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:23:44 2024 by rpki-client on console-fra.rpki-client.org