Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File:                     Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier:          jC0jG6fNGk2cSK3pfXVVnwVlurcAbx8q8XC4wAAl/jo=
Subject key identifier:   F8:41:4B:DE:4D:EA:0F:D7:64:87:92:93:80:C7:6B:62:52:16:50:3D
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer:       /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial:       018F8824A8ED64B6D265AB5BB27BD30AF636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number:          0B9F
Signing time:             Fri 17 May 2024 20:00:54 +0000
Manifest this update:     Fri 17 May 2024 20:00:54 +0000
Manifest next update:     Sat 18 May 2024 20:00:54 +0000
Files and hashes:         1: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: iTcixOYpF4SVaf1aNr1jZxxj6bosD2J0ZvzQy+C9D1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:a8:ed:64:b6:d2:65:ab:5b:b2:7b:d3:0a:f6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
        Validity
            Not Before: May 17 20:00:54 2024 GMT
            Not After : May 18 20:00:54 2024 GMT
        Subject: CN=f8414bde4dea0fd76487929380c76b625216503d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:0a:35:06:07:34:f8:0f:ba:03:67:ea:fc:
                    ce:fd:bd:e8:cf:1a:84:0e:60:83:9c:8c:66:c8:29:
                    40:ba:3b:23:71:cf:c0:1b:0d:de:43:bb:d1:f4:fa:
                    a5:6b:50:3e:eb:c4:d0:df:7b:5e:3b:e7:88:e3:9b:
                    f1:15:ca:e8:f3:42:4c:4f:23:27:74:06:aa:d4:10:
                    06:a4:80:7e:34:8f:d4:55:43:a6:99:8f:1c:2d:8b:
                    dc:ad:24:63:dd:49:36:25:33:ea:23:45:26:8f:59:
                    ec:66:6e:1a:e8:a0:5f:42:28:f6:70:54:8a:2d:14:
                    d2:14:fd:a3:eb:e7:c1:dc:68:86:ff:cb:61:af:bd:
                    80:ce:e9:b2:39:35:3e:3b:aa:f4:9d:a9:4d:2c:76:
                    7e:31:f5:3b:1c:cf:87:6c:25:e7:c8:f6:07:1d:53:
                    76:16:06:61:07:dd:6e:4a:44:34:7b:1e:12:fd:22:
                    62:6f:8f:df:8e:7f:e2:2d:82:77:76:52:f5:c4:54:
                    ce:f3:45:6a:e4:66:45:0f:40:61:35:03:ac:3e:c0:
                    9b:7a:51:95:08:7c:76:29:07:c3:e2:a9:03:24:a9:
                    ab:73:43:be:b8:67:08:4d:a4:9c:b2:51:dc:46:aa:
                    8e:7c:37:da:95:7d:4b:02:4f:b9:e7:69:41:30:2d:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:41:4B:DE:4D:EA:0F:D7:64:87:92:93:80:C7:6B:62:52:16:50:3D
            X509v3 Authority Key Identifier:
                keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:48:f4:6e:9e:4e:03:39:40:89:0a:a1:34:01:01:1b:6a:13:
         33:8f:91:a4:89:19:d3:8d:b8:e8:c6:ed:c6:32:21:14:89:a0:
         e0:bb:8c:e8:5b:53:a3:46:ab:d9:69:29:4a:fa:e2:2d:21:79:
         a3:e4:d7:49:10:b1:5d:15:77:db:cd:1a:88:f5:a0:a0:28:19:
         cf:6d:e0:ee:b6:28:0b:d5:7f:91:70:c4:56:f9:7a:a7:91:fe:
         69:cd:3f:5a:e3:9a:95:8c:34:cb:b2:57:72:b7:a7:20:1b:79:
         e1:1c:e8:67:a7:3d:c3:f0:7b:2f:2e:82:07:20:23:6d:06:e9:
         92:09:c9:13:cb:b3:06:fa:fb:f3:45:2d:e5:68:8f:2b:e5:02:
         54:d8:00:2f:9b:f7:3f:c3:06:1f:cb:11:f0:e6:d0:50:f7:91:
         ab:67:ed:00:1a:ef:80:14:b8:85:33:39:3c:8a:fc:0f:13:f6:
         a6:d9:c8:e2:db:6a:21:28:b6:15:10:95:ae:b6:77:04:7b:78:
         23:27:b6:ab:d0:2a:74:fd:2c:40:57:86:4e:50:b1:27:00:ab:
         ae:96:67:af:cd:ae:b4:88:fb:9b:8a:f4:95:6f:d4:7f:c5:54:
         27:63:54:05:87:85:16:58:57:2f:38:df:dd:60:58:a2:90:7c:
         50:55:c6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:06 2024 by rpki-client on console-ams.rpki-client.org