Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File:                     9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier:          2XVej5Xk0SEUDHvYSjE0rlfnxifu/IlbYoXBvWFVITw=
Subject key identifier:   E7:D4:F2:5E:7D:C8:23:83:CE:A7:BB:05:2F:5F:32:36:42:01:B1:B5
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer:       /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial:       018F39656671DAEEBD294BA344E5298ADD70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number:          082D
Signing time:             Thu 02 May 2024 13:01:37 +0000
Manifest this update:     Thu 02 May 2024 13:01:37 +0000
Manifest next update:     Fri 03 May 2024 13:01:37 +0000
Files and hashes:         1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: kzHD0KLV5gZZTbN9HlAaBYq5Qo6nPIk5zKkXYTa6vsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:65:66:71:da:ee:bd:29:4b:a3:44:e5:29:8a:dd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
        Validity
            Not Before: May  2 13:01:37 2024 GMT
            Not After : May  3 13:01:37 2024 GMT
        Subject: CN=e7d4f25e7dc82383cea7bb052f5f32364201b1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2c:b6:f2:37:16:a4:99:b4:c6:24:1c:b3:fd:
                    95:19:4d:da:a6:8b:39:b5:34:ea:b6:57:a4:bc:07:
                    c3:6f:c9:6a:78:75:79:72:37:59:d5:39:d5:35:c1:
                    16:22:60:62:57:08:39:c6:07:c9:77:b0:ff:c9:a6:
                    0e:39:bd:61:99:8a:7e:44:88:73:57:8d:8f:06:06:
                    7d:0a:c7:ce:82:5b:67:44:09:b0:88:e7:ae:2c:46:
                    e5:92:7c:c7:88:6b:64:ef:d7:07:c4:5d:62:13:e6:
                    bc:d1:96:2e:83:7a:af:ad:cc:71:60:9e:89:db:e2:
                    89:aa:df:11:91:72:14:d2:84:8b:02:a1:54:fb:1c:
                    bd:7d:5c:9f:98:93:45:db:39:7b:a4:70:76:2f:5f:
                    b2:c5:69:fd:e5:ef:0e:f3:be:f3:2d:48:ba:c2:1b:
                    13:23:7c:a1:db:64:7c:e9:02:1e:c9:1e:47:35:5a:
                    96:06:5c:5b:ca:e0:9d:a4:42:66:a7:a1:e0:c2:b7:
                    12:d8:9d:72:5d:37:0c:f3:7f:35:db:d6:bb:90:a7:
                    f8:aa:1a:2b:cb:e5:f2:91:3f:bd:97:fb:5d:e0:14:
                    65:21:72:80:36:4e:04:72:eb:36:1a:43:a5:d5:ae:
                    0b:ac:9b:3b:b7:d8:db:58:05:a2:3b:a0:69:5f:7c:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D4:F2:5E:7D:C8:23:83:CE:A7:BB:05:2F:5F:32:36:42:01:B1:B5
            X509v3 Authority Key Identifier:
                keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:81:c8:f5:1b:28:42:32:ce:71:99:cb:30:f6:2d:bf:40:ba:
         50:94:b0:53:c1:c6:ad:d6:bc:7b:b3:29:46:be:43:8f:3d:1d:
         d6:71:c5:a5:14:3c:f2:53:c3:ad:a1:ec:14:8a:83:f2:b2:37:
         6f:ca:8b:1b:4c:46:89:5a:9a:2b:6f:7c:1f:09:28:e0:3c:9b:
         bd:6f:3b:53:1c:0c:05:d7:3c:ae:de:19:99:af:6e:d4:fc:dc:
         ca:52:5a:eb:74:22:4e:2e:74:d2:96:8e:6f:d4:e9:6b:02:62:
         ac:f8:d6:1f:27:fa:86:a8:90:41:56:0c:b9:79:69:3b:a5:34:
         7b:85:e2:c5:fe:22:5b:18:ee:8d:10:98:ed:1e:3f:9e:4f:9a:
         fa:47:10:d5:24:36:46:06:7c:d4:17:37:a7:a7:85:54:3d:d5:
         4f:e9:19:c8:90:6a:08:0e:b0:ba:22:2e:4b:a6:bd:f5:9b:fd:
         f2:14:09:a7:c3:be:97:7d:de:b8:74:f9:21:b2:88:65:ab:f8:
         dc:9c:cf:27:27:7c:46:9e:96:f1:61:9b:d5:10:41:35:72:2f:
         fd:db:43:6c:85:01:c2:3e:5a:77:f1:ff:37:d6:d7:fb:4d:78:
         6e:6a:72:cc:69:76:ed:2c:ed:1f:8c:72:17:a1:ca:bc:3b:98:
         03:13:01:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:27:56 2024 by rpki-client on console-ams.rpki-client.org