Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft
File:                     8d4LVDF8gVsFFTACYEv9VZBpqLA.mft (raw, json)
Hash identifier:          xkyBnn6vmjG1N3qbNZoAgwjYykpP0SiMByc/xvdtaXk=
Subject key identifier:   64:04:FB:2B:AE:B6:81:89:72:55:79:6E:26:55:18:02:86:F5:7A:C8
Authority key identifier: F1:DE:0B:54:31:7C:81:5B:05:15:30:02:60:4B:FD:55:90:69:A8:B0
Certificate issuer:       /CN=f1de0b54317c815b05153002604bfd559069a8b0
Certificate serial:       018F87B624A5605D71AD9E2910945CD5034B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8d4LVDF8gVsFFTACYEv9VZBpqLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft
Manifest number:          01A7
Signing time:             Fri 17 May 2024 18:00:12 +0000
Manifest this update:     Fri 17 May 2024 18:00:12 +0000
Manifest next update:     Sat 18 May 2024 18:00:12 +0000
Files and hashes:         1: 8d4LVDF8gVsFFTACYEv9VZBpqLA.crl (hash: s1AKdTuJ7z8lacGSOeICafkjot7wqRuXUy3zyhuvlOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8d4LVDF8gVsFFTACYEv9VZBpqLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:24:a5:60:5d:71:ad:9e:29:10:94:5c:d5:03:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1de0b54317c815b05153002604bfd559069a8b0
        Validity
            Not Before: May 17 18:00:12 2024 GMT
            Not After : May 18 18:00:12 2024 GMT
        Subject: CN=6404fb2baeb681897255796e2655180286f57ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6b:48:79:b8:07:1e:38:33:92:66:b0:4c:9d:
                    61:82:c5:a7:a2:01:c5:ec:eb:13:88:7d:76:a6:c6:
                    fa:54:60:21:57:a8:28:37:4b:79:a1:6a:6f:82:b7:
                    d7:7c:6a:86:4e:76:b2:08:2e:40:02:eb:1a:5b:43:
                    43:40:fd:d8:fb:db:53:d4:55:9e:63:67:2a:e9:10:
                    47:ba:d6:cf:dd:eb:be:d3:9b:86:a8:f5:f7:df:ed:
                    14:f9:f4:bb:07:20:9f:31:29:f6:90:3b:49:4c:dc:
                    d5:fe:aa:a2:40:25:06:9a:0e:6d:73:f6:a1:98:4e:
                    5e:2d:b6:28:db:44:59:47:0e:75:34:81:bb:42:4b:
                    fe:b8:ec:09:16:42:f1:a2:c2:88:4f:27:ae:dc:f2:
                    be:99:28:42:03:9c:e0:10:e7:aa:77:94:b4:52:b1:
                    d5:a4:52:80:ef:3c:44:2a:5a:45:f4:86:63:5b:2c:
                    5f:02:18:50:a4:71:8f:0b:d8:e8:8a:64:70:2f:78:
                    ca:d2:be:6c:6e:ee:fd:4d:86:1a:0c:6f:be:3a:ae:
                    ee:a4:87:1f:16:99:3a:91:56:96:8a:8a:0b:ac:5a:
                    72:8d:a7:80:0f:4b:5f:cb:5e:19:29:cf:ac:8e:19:
                    16:8e:98:9f:36:7e:35:c9:2b:0d:5c:26:10:23:aa:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:04:FB:2B:AE:B6:81:89:72:55:79:6E:26:55:18:02:86:F5:7A:C8
            X509v3 Authority Key Identifier:
                keyid:F1:DE:0B:54:31:7C:81:5B:05:15:30:02:60:4B:FD:55:90:69:A8:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d4LVDF8gVsFFTACYEv9VZBpqLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c7:a3:2d:84:61:a1:00:73:4f:6d:80:11:2d:08:6f:40:20:
         73:0d:21:7b:0b:d1:c4:d8:79:15:4c:2d:68:66:7e:e7:d8:53:
         3b:91:08:95:ae:f9:b1:a6:65:dd:9e:27:d0:78:05:0e:a7:a5:
         36:70:30:8d:cb:0a:bd:60:08:95:42:2c:75:eb:be:18:d5:92:
         5c:d0:be:7c:97:2c:7e:d8:66:04:40:f6:81:1c:64:c6:0c:2c:
         ea:62:8e:20:04:10:69:f8:50:62:b3:a9:de:a1:5a:c2:86:d3:
         0f:e9:2c:18:0d:e9:d8:00:96:7e:1d:7a:5b:34:51:4d:6b:18:
         cc:49:b1:55:07:60:5d:a3:3d:65:4e:9f:c2:25:aa:94:96:d3:
         f1:eb:d1:a6:2f:fd:84:c8:b4:87:01:a8:c2:34:a5:33:dd:59:
         97:83:38:dc:f0:b4:51:6d:0c:21:d6:b3:2c:e1:af:c3:d6:c8:
         5b:3a:31:a8:90:9e:d1:d7:e8:05:ef:e0:28:20:a6:30:da:8b:
         f3:59:76:aa:fd:43:68:0f:66:50:a9:94:a4:08:18:2e:58:37:
         c8:c7:7f:24:40:66:98:54:fd:0a:67:96:4a:06:11:94:04:c1:
         7c:33:b2:8b:12:43:3a:1e:73:67:b4:c6:99:f4:3d:11:41:1e:
         7c:f4:7f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:41 2024 by rpki-client on console-ams.rpki-client.org