Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File:                     Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier:          58x7oGQeEjM1DI+6F+U0WcBMh095uOejC2AQE5fT/kk=
Subject key identifier:   F3:DA:FF:FC:F0:BC:19:85:FB:33:89:49:4D:17:9E:F9:7A:E3:42:F7
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer:       /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial:       018F369AF7A44F3183C0C6B5DD6D78B15B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number:          10DD
Signing time:             Thu 02 May 2024 00:01:16 +0000
Manifest this update:     Thu 02 May 2024 00:01:16 +0000
Manifest next update:     Fri 03 May 2024 00:01:16 +0000
Files and hashes:         1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: vpTc293WJaA5+VVJHU0ncbrGsra/FTxSE1gKxPBaKuI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:9a:f7:a4:4f:31:83:c0:c6:b5:dd:6d:78:b1:5b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
        Validity
            Not Before: May  2 00:01:16 2024 GMT
            Not After : May  3 00:01:16 2024 GMT
        Subject: CN=f3dafffcf0bc1985fb3389494d179ef97ae342f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:f7:ac:08:14:a3:30:fa:b3:9c:38:32:66:
                    f9:59:6c:c9:29:d3:56:ec:06:ca:3e:84:f7:0a:ec:
                    9d:e5:6b:d5:a4:3d:1e:1b:d2:ee:7b:c7:0a:a1:bc:
                    9a:04:31:82:2a:a4:4c:94:cd:c4:b9:9d:1e:11:89:
                    56:66:33:04:5f:27:f8:79:1f:09:ac:bf:e5:05:3a:
                    57:04:0d:f0:72:7a:e9:a2:db:dc:50:8a:c0:71:8d:
                    27:71:aa:de:ee:c3:b2:19:26:18:5e:0c:35:4b:9c:
                    06:a1:4a:a2:a1:50:55:e2:6a:16:e6:b3:8e:f7:44:
                    69:1e:e0:7b:54:b2:e4:36:d8:66:cf:a5:ed:93:5d:
                    11:7b:29:89:8c:e2:5f:52:8f:cf:b3:f6:e4:59:19:
                    a5:5e:e0:86:1b:b3:ec:65:66:95:7f:0f:44:8c:d0:
                    6c:fb:a9:d8:9c:65:2b:cb:44:3d:d6:c7:f1:8d:4d:
                    dd:aa:c5:7f:0b:29:d3:40:d7:1d:6c:ec:b0:10:11:
                    dc:9a:cb:0c:81:76:33:7f:bb:75:bd:00:32:ba:bf:
                    c4:08:13:01:8c:60:4e:26:46:b7:c3:99:03:62:34:
                    6e:c0:e4:cf:fa:8b:22:2a:f4:86:b5:71:b0:a4:38:
                    6c:8c:15:67:f5:c7:2a:39:27:7a:cc:51:2a:97:d5:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DA:FF:FC:F0:BC:19:85:FB:33:89:49:4D:17:9E:F9:7A:E3:42:F7
            X509v3 Authority Key Identifier:
                keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9c:f0:c2:66:e5:65:16:8b:d4:2f:8a:21:86:ae:f7:a0:e6:
         d4:12:6e:4e:9f:a5:5e:72:be:46:37:b0:43:f7:22:60:30:41:
         15:fa:a4:0d:90:ac:af:87:3f:5f:1e:f5:1a:f9:98:39:af:84:
         04:ec:a7:11:5d:cf:3e:61:7b:8d:25:88:da:7d:96:9b:a9:90:
         9b:8e:fc:ec:b9:1d:0e:83:c3:f2:f9:84:13:fe:f9:0d:d1:3f:
         f7:ff:c1:3e:50:1d:5a:c6:cd:c0:a4:3f:16:4d:f6:e0:8c:18:
         0f:af:b2:66:c9:2b:de:36:8b:54:b4:f9:a0:6f:45:a0:ae:87:
         64:17:4c:3b:e3:3e:8c:18:ef:95:5b:9d:0c:36:1d:bd:0e:8b:
         d3:ed:6f:a3:f7:47:e9:db:9c:07:7b:db:33:3a:5a:07:ca:dc:
         83:d3:f4:31:9a:85:ee:6d:a2:7b:0c:51:a4:4c:5f:b0:8a:92:
         97:44:ef:f1:33:a9:20:50:93:34:04:92:8f:9a:ce:dc:2f:c7:
         05:60:79:2f:60:43:dd:fb:a6:97:86:af:f7:89:ef:9a:bd:c4:
         68:48:f8:08:c4:fa:9e:a9:4e:cb:ac:79:be:a0:30:7b:1c:83:
         99:10:32:fa:30:25:64:4f:d3:70:ee:e4:af:ec:76:80:06:8b:
         78:2e:ed:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:01:29 2024 by rpki-client on console-ams.rpki-client.org