Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.mft
File:                     4H6guRTmNDEcyfDvoUSPy3l9OJw.mft (raw, json)
Hash identifier:          dFADbV74AYX6QmoezqRq3qH7m42iWAO8EHrdTHDrRRY=
Subject key identifier:   8A:38:CF:BD:8B:8A:1B:AD:FD:D2:32:6C:6D:14:C6:91:2A:5A:54:D0
Authority key identifier: E0:7E:A0:B9:14:E6:34:31:1C:C9:F0:EF:A1:44:8F:CB:79:7D:38:9C
Certificate issuer:       /CN=e07ea0b914e634311cc9f0efa1448fcb797d389c
Certificate serial:       018F5327BBD110FF27D8A4C27ABF65A53098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4H6guRTmNDEcyfDvoUSPy3l9OJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.mft
Manifest number:          082A
Signing time:             Tue 07 May 2024 13:04:23 +0000
Manifest this update:     Tue 07 May 2024 13:04:23 +0000
Manifest next update:     Wed 08 May 2024 13:04:23 +0000
Files and hashes:         1: 4H6guRTmNDEcyfDvoUSPy3l9OJw.crl (hash: Lob5ncFOk8BhJapZKkkdWYrTciebSt0sBBvVORRy+q0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4H6guRTmNDEcyfDvoUSPy3l9OJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:27:bb:d1:10:ff:27:d8:a4:c2:7a:bf:65:a5:30:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e07ea0b914e634311cc9f0efa1448fcb797d389c
        Validity
            Not Before: May  7 13:04:23 2024 GMT
            Not After : May  8 13:04:23 2024 GMT
        Subject: CN=8a38cfbd8b8a1badfdd2326c6d14c6912a5a54d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4d:e5:2b:96:16:ba:d1:94:a0:2e:73:4f:40:
                    90:9a:55:9e:20:b3:27:15:b9:8c:95:69:f9:16:ee:
                    d3:39:30:15:c9:88:99:8e:e8:2a:fa:ad:07:6d:ff:
                    ad:af:59:8b:58:ef:e9:2c:0c:00:c7:0f:46:05:51:
                    88:7f:e5:6b:b6:ff:9f:0d:d9:87:95:40:81:3b:95:
                    e3:2f:1e:74:11:78:32:f8:cc:48:00:da:3e:74:3d:
                    14:9c:3d:73:c5:a8:a4:13:db:ee:0b:db:34:2c:49:
                    52:a2:f3:c7:c1:aa:c2:f5:5c:7d:05:55:6d:a5:b3:
                    06:ea:22:51:dd:cc:7c:1e:e4:fc:eb:7b:67:6a:8e:
                    c9:2b:38:7f:58:9e:87:b3:70:69:ef:a1:4b:05:55:
                    b2:7a:0c:0a:b0:87:26:44:4c:4b:9a:56:6b:ba:70:
                    db:74:bf:c2:d0:99:90:36:9f:1a:97:ee:46:8c:57:
                    40:ef:2e:43:34:5e:8d:32:d7:51:53:9f:b9:c6:e9:
                    b8:f4:42:ca:b3:43:a0:e2:f8:21:9d:2b:50:cd:7c:
                    06:17:85:f7:1c:8f:54:87:4e:90:29:2f:95:79:65:
                    b2:38:a1:db:50:b2:25:d7:1c:bf:d9:32:6c:bb:e6:
                    74:29:57:9e:48:82:c3:af:5a:fb:31:38:e6:c4:d7:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:38:CF:BD:8B:8A:1B:AD:FD:D2:32:6C:6D:14:C6:91:2A:5A:54:D0
            X509v3 Authority Key Identifier:
                keyid:E0:7E:A0:B9:14:E6:34:31:1C:C9:F0:EF:A1:44:8F:CB:79:7D:38:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H6guRTmNDEcyfDvoUSPy3l9OJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b66a81-3e89-4392-9644-6c561ab82ae3/1/4H6guRTmNDEcyfDvoUSPy3l9OJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:33:45:87:df:23:66:cb:b7:33:df:bb:7b:0e:f9:5b:81:11:
         99:88:12:b5:a5:85:77:9e:17:93:fc:ce:f4:b8:53:88:8c:8c:
         9c:7f:38:4a:07:7a:50:ae:2f:83:f9:86:d2:f6:63:18:e1:aa:
         90:16:4d:20:a6:8a:96:bc:fc:28:5e:6e:a7:db:44:4e:aa:c3:
         55:80:6f:6e:56:30:68:96:d0:65:37:ee:ba:88:88:b7:8f:e4:
         7f:93:f0:b2:01:f7:8e:2d:93:db:16:4b:b9:93:d1:76:a2:ad:
         bd:0f:ba:7b:36:4e:20:f6:aa:0e:4e:c0:d1:c8:9f:4e:b8:f7:
         f3:8d:7a:93:34:bc:8e:1f:af:8e:a0:68:1e:8e:d8:40:17:46:
         12:96:39:37:02:ea:fa:2e:f6:0f:05:f2:63:98:d3:bf:04:ca:
         74:41:f3:2c:ac:f4:0e:69:75:d8:99:bd:2c:43:1f:9b:80:70:
         55:b4:c0:71:c9:3e:1e:5e:e7:c6:ac:80:fa:3c:82:f6:34:da:
         f7:ad:b6:f5:5a:d2:43:53:ef:03:ea:b3:bc:22:3a:45:2f:e3:
         12:2c:c0:d5:e3:63:d5:f6:4d:44:9e:a9:a0:2f:b8:bc:b2:1b:
         13:b2:06:58:19:c5:78:1b:d9:3d:99:b0:82:94:5d:c8:4d:c4:
         63:25:ab:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:00:48 2024 by rpki-client on console-ams.rpki-client.org