Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File:                     sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier:          lkh7L6wyP5dDpOOCN2AcnPWiMHMKdIPVoBqE9zMy5AA=
Subject key identifier:   6F:CA:E9:17:A5:E3:FE:70:10:C1:60:69:56:43:18:86:2B:39:61:BB
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer:       /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial:       018F87ED9DD33D3A6FC8D0DB4F368F04F276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number:          031E
Signing time:             Fri 17 May 2024 19:00:47 +0000
Manifest this update:     Fri 17 May 2024 19:00:47 +0000
Manifest next update:     Sat 18 May 2024 19:00:47 +0000
Files and hashes:         1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: NKFuYhT2Rtc6+sVXIRdQccmCHuI0tnZIUCj6mkGrAng=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:9d:d3:3d:3a:6f:c8:d0:db:4f:36:8f:04:f2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
        Validity
            Not Before: May 17 19:00:47 2024 GMT
            Not After : May 18 19:00:47 2024 GMT
        Subject: CN=6fcae917a5e3fe7010c16069564318862b3961bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:57:aa:4d:0f:91:41:57:91:2f:57:a0:44:
                    00:25:9e:3a:8d:a0:b9:26:3e:f5:26:14:c1:b7:68:
                    b3:17:fb:ed:4f:63:c4:e5:4a:70:2d:b6:a0:4f:2e:
                    4a:df:3a:ca:0c:be:fe:70:81:7e:a4:d8:68:0a:8b:
                    10:24:75:aa:4f:0f:54:76:23:dd:4c:0d:e5:78:58:
                    d5:4a:7a:c0:be:42:c8:96:4e:fc:98:a6:b6:fb:cd:
                    ff:86:6a:65:13:0a:fe:d9:1f:ff:fb:bc:70:1b:60:
                    00:7f:78:8f:de:b0:a1:1f:71:cc:27:ca:82:26:5a:
                    4b:f5:a8:bf:66:43:76:58:44:61:32:e8:89:93:c6:
                    5b:b8:16:33:27:dd:d2:96:f1:ae:4c:08:b5:35:ff:
                    0b:2e:e5:b9:68:f7:f8:e1:54:11:69:35:db:1a:ad:
                    50:f6:54:e6:01:93:ea:57:c5:04:9b:ee:b4:75:4b:
                    68:f1:9a:05:83:4d:bd:53:85:ba:6e:08:2d:99:97:
                    d9:93:72:bf:f0:6b:71:70:80:0b:0b:d4:d9:a1:28:
                    35:d7:8a:68:97:74:e8:9a:66:b0:fe:31:2a:3d:36:
                    ea:da:d4:d5:95:69:00:f6:27:37:c4:90:1a:da:f7:
                    23:66:0f:56:6b:76:69:da:4c:24:0d:6f:5f:d2:63:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CA:E9:17:A5:E3:FE:70:10:C1:60:69:56:43:18:86:2B:39:61:BB
            X509v3 Authority Key Identifier:
                keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0b:58:e6:57:6a:c3:32:5b:bf:19:44:79:0f:eb:25:b3:4a:
         3c:d5:b6:3e:a5:ba:23:11:6c:e4:ea:c4:b9:1e:ca:b6:ab:9d:
         54:d3:89:5b:13:d2:cf:00:dc:dd:33:9f:c9:8d:8e:2c:76:33:
         9c:97:f7:bb:b2:93:a9:19:64:ce:e5:68:6e:72:d7:cb:81:82:
         40:e4:7b:30:19:1a:7f:9c:b7:d0:90:82:21:0b:32:84:26:a5:
         21:28:6a:42:51:0e:b5:63:38:25:0b:41:ec:71:f3:65:7e:49:
         26:c1:67:29:61:4e:da:e9:ba:05:a2:08:74:29:2c:8f:54:87:
         a4:3a:3c:78:13:e8:47:0f:8e:83:88:1b:f5:23:e0:ed:bd:fb:
         e0:78:c3:7a:f9:bb:b5:06:57:fd:f6:f1:78:c4:62:e6:0e:29:
         59:d2:9b:fd:b2:8f:e0:d0:3a:a7:77:f6:8f:c3:46:fe:93:48:
         0f:91:16:4e:ef:85:6a:42:cb:db:84:ef:cf:21:ab:0c:69:b7:
         92:8a:47:6b:82:91:a8:fd:e1:ce:02:89:20:72:80:53:4c:57:
         8f:07:08:1b:0c:ae:a7:5f:8b:1f:ed:3c:c3:a8:71:d7:16:16:
         1d:7f:98:cd:72:73:16:06:5b:45:d7:e9:22:c8:b3:27:00:8b:
         2e:c6:93:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:20 2024 by rpki-client on console-ams.rpki-client.org