Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File:                     8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier:          0z7AiUd4PyHHAXQ0fHd8RhzozOqMvMiY3vzzzcTr0bg=
Subject key identifier:   3E:A9:7F:08:10:22:21:96:30:BF:F0:15:8A:32:E1:25:E5:29:1C:F0
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer:       /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial:       018F23B861EA0CC42D559AFBEA57015E81DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number:          08E9
Signing time:             Sun 28 Apr 2024 08:00:37 +0000
Manifest this update:     Sun 28 Apr 2024 08:00:37 +0000
Manifest next update:     Mon 29 Apr 2024 08:00:37 +0000
Files and hashes:         1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: v9WzudvXDNNbcfbUKMJL0OeMSOvomJojyJ6muvJfdpQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 01:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:b8:61:ea:0c:c4:2d:55:9a:fb:ea:57:01:5e:81:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
        Validity
            Not Before: Apr 28 08:00:37 2024 GMT
            Not After : Apr 29 08:00:37 2024 GMT
        Subject: CN=3ea97f081022219630bff0158a32e125e5291cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:31:82:7d:3f:9c:5c:47:b8:fe:6d:74:2a:
                    62:b6:9d:a7:8b:8a:85:c3:c3:e0:a4:21:96:7f:80:
                    34:79:db:d8:89:05:87:70:74:ed:91:25:24:a3:68:
                    0a:59:19:8a:43:fb:dc:9e:85:fa:88:f4:4b:85:41:
                    d0:3e:5b:ea:a0:d7:01:4a:36:43:4c:21:85:92:e0:
                    ce:59:80:cb:08:5c:35:87:e8:42:2d:56:53:47:05:
                    db:2c:d1:23:64:e2:89:12:97:5f:24:1d:3e:44:40:
                    85:54:32:b0:92:fa:d3:e1:9f:66:ff:56:61:0a:2a:
                    ca:58:d9:3b:ac:1b:e3:b7:3e:d6:2d:2c:5a:27:e3:
                    5e:ad:3d:4c:e7:3b:40:36:b0:8b:0e:c9:1b:4e:48:
                    6e:75:30:16:96:dc:b4:b3:d8:18:3c:91:7f:d1:6a:
                    4e:5d:a6:3e:bb:84:ba:a7:9c:73:10:9f:9f:83:73:
                    1d:7f:05:b9:06:7e:cd:1b:fd:0e:2f:98:36:90:c3:
                    9f:ea:55:fb:7d:12:3a:c4:79:54:c9:e6:d5:a8:85:
                    1c:1a:66:1e:36:39:ca:89:27:1a:0e:f8:6c:c7:a0:
                    9c:f8:14:1e:7c:de:a9:1b:d8:56:16:9a:cd:a7:21:
                    87:3c:a0:88:09:46:77:dc:47:f4:65:26:83:7c:e0:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A9:7F:08:10:22:21:96:30:BF:F0:15:8A:32:E1:25:E5:29:1C:F0
            X509v3 Authority Key Identifier:
                keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9a:f6:bb:f2:d0:81:63:04:f0:fc:f0:c8:18:8f:66:38:87:
         50:fa:a6:e3:18:c2:53:b8:85:1c:56:8a:23:99:76:a1:34:b2:
         4d:e9:be:a2:a5:89:7d:e5:5a:f3:0f:49:74:80:c4:15:c6:3e:
         88:eb:fe:72:5d:c3:01:4b:6f:46:60:b4:13:ed:7e:93:18:d1:
         d0:13:0f:0b:81:62:2d:4b:41:79:55:b3:0c:93:0a:3f:7c:9a:
         e6:6b:c6:63:99:9f:76:21:5e:96:e5:85:cb:cb:ab:6c:f3:cd:
         64:88:30:41:7a:48:81:de:21:04:70:c5:db:8c:83:6b:98:73:
         09:a8:25:a0:de:f9:fe:6e:0e:e4:da:86:88:2f:fd:a1:d3:6a:
         49:f0:6e:dd:0e:00:cb:2e:10:cb:6d:18:a2:a3:4c:de:0d:fd:
         61:9e:fb:67:64:51:e1:b2:5f:b7:c7:60:3e:a7:25:06:45:73:
         44:b3:44:46:a9:5d:54:2b:8d:69:73:d1:10:f6:0f:cf:fe:f9:
         ed:9f:90:aa:a4:de:fe:54:fa:aa:c2:a4:db:78:d5:35:d0:8e:
         17:1a:56:09:cd:5a:56:91:05:1f:a8:dc:6e:44:1f:24:ea:b7:
         7d:60:11:c4:ac:ea:0f:ac:41:b3:c5:79:c9:a4:40:47:1b:b9:
         5c:ed:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 09:08:03 2024 by rpki-client on console-ams.rpki-client.org