Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File:                     yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier:          nPfGgTPj0L8aYnuPYZG7JvpPkTGVUvllVE83QfVsKck=
Subject key identifier:   9E:4A:28:10:19:DF:67:2F:ED:B5:6A:86:EF:67:24:CC:D8:91:9A:7F
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer:       /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial:       018F8824938320C0E67B8A716044ACFCAE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number:          050B
Signing time:             Fri 17 May 2024 20:00:49 +0000
Manifest this update:     Fri 17 May 2024 20:00:49 +0000
Manifest next update:     Sat 18 May 2024 20:00:49 +0000
Files and hashes:         1: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: 5CbPcJ4kJZpFCrrPI+9GEHnNqvDNn2BwMSusQVJhl7w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:93:83:20:c0:e6:7b:8a:71:60:44:ac:fc:ae:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
        Validity
            Not Before: May 17 20:00:49 2024 GMT
            Not After : May 18 20:00:49 2024 GMT
        Subject: CN=9e4a281019df672fedb56a86ef6724ccd8919a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:d5:e1:1d:81:79:74:4e:f3:34:dd:84:e6:
                    ae:f9:99:ea:7e:0d:67:cd:67:4d:61:a7:78:70:08:
                    e2:84:fe:27:88:b8:ec:19:1a:df:54:59:5f:f2:56:
                    a4:15:95:6c:df:10:78:bf:7d:de:a9:9a:a5:fd:df:
                    db:4e:14:3a:5d:0f:dc:a9:1b:a1:c1:56:4e:54:93:
                    86:80:6d:d0:78:53:95:83:31:05:c0:dc:cd:16:c9:
                    8f:94:0c:33:da:a0:66:f0:a3:82:53:67:9c:f9:5b:
                    db:ee:c2:94:4b:df:5a:af:3d:a0:4c:f5:69:77:7b:
                    5d:d3:91:4c:05:2d:bc:34:da:c5:d8:ee:ce:a0:23:
                    91:a1:6d:47:ed:2a:6a:0b:04:e3:1e:86:ac:78:2a:
                    23:b3:92:dd:2b:d3:07:8e:40:64:61:62:d6:33:cd:
                    84:1d:a1:2b:4b:26:35:42:64:ba:23:2c:a2:f2:79:
                    8f:f7:a0:88:49:1a:2f:0f:09:49:9a:1e:78:7b:30:
                    09:d7:fe:5b:12:b2:63:ff:c4:0d:00:24:04:17:3d:
                    a1:4c:4d:3f:a6:81:72:31:0e:f5:84:5c:65:e5:6d:
                    b4:4d:66:cf:78:2a:87:fd:30:3b:00:f8:b4:5b:10:
                    17:22:a6:93:1a:0b:2b:29:1f:c9:f2:02:6d:48:66:
                    70:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4A:28:10:19:DF:67:2F:ED:B5:6A:86:EF:67:24:CC:D8:91:9A:7F
            X509v3 Authority Key Identifier:
                keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1e:14:d1:30:9d:9d:22:9f:3f:fd:15:25:7c:09:a8:b4:2c:
         9c:46:36:15:e8:c2:34:76:99:cc:63:37:20:9c:73:d1:e4:6f:
         df:a6:f1:48:ff:4d:d9:b3:4c:6b:37:6b:ea:2c:08:3c:10:25:
         33:c4:f5:74:50:11:d5:ce:1b:f6:3a:fe:95:6e:5f:d7:5e:a5:
         6f:ce:00:60:d6:f5:3b:d3:89:8b:02:1a:c9:68:b9:95:c0:bd:
         a0:7a:c1:30:fb:7d:59:dd:5f:db:ad:6c:08:5b:53:dd:80:87:
         f3:f1:f3:4d:92:c0:7c:0f:06:f7:e1:71:2b:96:af:4f:85:5c:
         f5:5d:96:1c:a0:53:13:52:ed:00:a2:f6:4c:e5:55:57:60:fe:
         26:fe:a0:60:fe:19:3b:00:50:a2:0b:b8:d1:da:54:69:6b:69:
         12:35:39:23:56:24:56:87:59:42:3f:56:a1:66:7a:0c:97:5d:
         50:11:08:b3:45:48:b3:84:77:bd:57:60:7e:a3:05:e4:9b:9d:
         44:fe:39:40:0f:7f:20:7f:a6:16:d2:57:07:08:01:71:b7:a1:
         87:82:59:36:91:0d:bb:aa:4b:e1:8e:06:5c:38:11:03:13:38:
         7f:92:d2:20:13:63:23:c2:af:0f:6e:6f:37:7e:50:51:f4:fd:
         94:62:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:32 2024 by rpki-client on console-ams.rpki-client.org