Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/tfaNwgTWi-AyolQmKOszpT9ZZZs.mft
File:                     tfaNwgTWi-AyolQmKOszpT9ZZZs.mft (raw, json)
Hash identifier:          TXwpGDcNZQqFyW9dnqfo6BYTSAMpSnXzbbvb83oNrrg=
Subject key identifier:   AC:EC:06:89:DF:4C:20:29:0D:97:E0:1A:B8:80:E9:18:69:C9:15:26
Authority key identifier: B5:F6:8D:C2:04:D6:8B:E0:32:A2:54:26:28:EB:33:A5:3F:59:65:9B
Certificate issuer:       /CN=b5f68dc204d68be032a2542628eb33a53f59659b
Certificate serial:       018F8749411BC71005B8B8937DCE6FB4A4E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfaNwgTWi-AyolQmKOszpT9ZZZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/tfaNwgTWi-AyolQmKOszpT9ZZZs.mft
Manifest number:          0709
Signing time:             Fri 17 May 2024 16:01:15 +0000
Manifest this update:     Fri 17 May 2024 16:01:15 +0000
Manifest next update:     Sat 18 May 2024 16:01:15 +0000
Files and hashes:         1: tfaNwgTWi-AyolQmKOszpT9ZZZs.crl (hash: Rk0dFjS1xCjEX3lwc9SUY48rIDlIJAf5DfRrOs0ItLQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/tfaNwgTWi-AyolQmKOszpT9ZZZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/tfaNwgTWi-AyolQmKOszpT9ZZZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tfaNwgTWi-AyolQmKOszpT9ZZZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:41:1b:c7:10:05:b8:b8:93:7d:ce:6f:b4:a4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f68dc204d68be032a2542628eb33a53f59659b
        Validity
            Not Before: May 17 16:01:15 2024 GMT
            Not After : May 18 16:01:15 2024 GMT
        Subject: CN=acec0689df4c20290d97e01ab880e91869c91526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:93:c1:ff:74:8e:ad:b5:72:63:d2:44:c9:
                    8d:a0:cd:34:e3:40:64:dd:fa:95:64:f9:b2:a1:d7:
                    60:b8:60:09:c2:bc:62:a5:50:b1:a3:4b:90:75:8b:
                    ae:2f:89:97:c5:ef:ae:63:4d:cc:ce:31:92:50:f0:
                    a4:85:03:66:aa:e8:f9:d3:16:ff:92:e0:e0:5e:96:
                    be:85:1c:7d:91:2b:6e:d8:d6:84:b8:86:33:ee:ff:
                    15:48:19:30:81:72:95:ba:7b:e9:fb:1c:c1:04:43:
                    92:8c:d0:27:da:00:8f:3a:11:98:78:bb:8a:53:fd:
                    8c:c9:32:0e:16:81:15:36:14:20:7b:66:97:af:b3:
                    b0:d2:b0:94:a3:91:d6:34:a6:2f:f7:f4:9f:71:3c:
                    6c:16:77:59:cb:49:a2:49:10:3d:b2:58:ba:8e:6e:
                    eb:95:99:db:9a:e5:48:9a:e0:fa:4d:e5:58:13:61:
                    44:b3:5e:a6:f7:84:99:b0:b8:f2:4f:f1:33:17:16:
                    ad:de:42:00:b4:f6:1c:e8:44:96:72:74:0b:c8:68:
                    12:a6:89:bf:97:0d:56:09:b4:51:23:7f:ae:63:53:
                    f2:03:5a:02:92:e1:5a:b7:b0:2d:c1:b1:f0:f0:06:
                    92:61:1c:0e:3a:15:09:bc:0b:c3:c3:43:f1:56:d2:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EC:06:89:DF:4C:20:29:0D:97:E0:1A:B8:80:E9:18:69:C9:15:26
            X509v3 Authority Key Identifier:
                keyid:B5:F6:8D:C2:04:D6:8B:E0:32:A2:54:26:28:EB:33:A5:3F:59:65:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfaNwgTWi-AyolQmKOszpT9ZZZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/tfaNwgTWi-AyolQmKOszpT9ZZZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/tfaNwgTWi-AyolQmKOszpT9ZZZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:53:04:93:0f:ac:03:d8:58:6c:0e:45:aa:49:e0:a8:32:1c:
         2f:fa:1c:4b:3d:5e:9c:a7:af:f5:77:72:89:30:6c:91:38:c8:
         c3:e6:5e:5a:79:ee:50:c3:c7:11:0d:eb:2a:2b:17:6c:4b:36:
         b8:59:e8:62:eb:4e:6b:a1:dd:fe:99:1c:7a:b6:d5:cd:7b:87:
         61:92:c0:a8:fe:43:b4:27:50:d3:96:7f:8e:d1:c5:8c:26:a3:
         fc:c5:91:d9:44:19:a9:c4:7a:70:f9:c4:aa:5a:ba:63:0f:44:
         bf:c3:bc:21:0c:c5:52:5f:ab:3e:fe:31:bd:ff:f1:a1:b6:15:
         d6:72:58:ac:3b:03:0f:1c:e7:37:fd:1a:bc:ad:d4:c5:39:d1:
         6e:91:2e:80:ab:a1:8d:1f:2d:bb:db:9a:b7:b8:76:07:21:ca:
         a0:29:07:87:67:26:04:b4:3b:29:57:c8:1d:72:cd:ed:3d:35:
         fe:c0:cc:e4:cb:ce:37:2c:67:5f:57:1f:e9:ee:c8:1b:35:b7:
         8c:62:7f:c4:6a:05:0b:06:62:78:00:c3:8d:7c:e4:5f:16:b7:
         a8:12:38:74:7a:5c:d8:c7:d0:9c:43:ec:4d:6b:ea:d3:59:ef:
         03:9d:8b:09:cb:5f:38:c6:2a:de:e4:60:d1:3e:8e:36:68:dc:
         69:19:a6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:34 2024 by rpki-client on console-fra.rpki-client.org