Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File:                     h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier:          q/1KtUS03HOjsY80xLxlS6Gjw9KStB5zUCdf8oSCUZM=
Subject key identifier:   73:A8:D0:38:FB:1B:64:36:5D:A0:29:86:4A:CE:94:9F:25:72:CC:C6
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer:       /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial:       018F87489C658FD70EE8472F027D2E8E9EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number:          026F
Signing time:             Fri 17 May 2024 16:00:33 +0000
Manifest this update:     Fri 17 May 2024 16:00:33 +0000
Manifest next update:     Sat 18 May 2024 16:00:33 +0000
Files and hashes:         1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: pCfcrTHuYWHZ+wBLlpiCVFwfN3mAGha+A9TR0XVmUNQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:9c:65:8f:d7:0e:e8:47:2f:02:7d:2e:8e:9e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
        Validity
            Not Before: May 17 16:00:33 2024 GMT
            Not After : May 18 16:00:33 2024 GMT
        Subject: CN=73a8d038fb1b64365da029864ace949f2572ccc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9d:b6:11:88:ba:b4:4f:70:9f:aa:07:d8:18:
                    29:80:fa:b9:90:c0:50:7c:26:06:39:2c:5b:81:d4:
                    93:44:4b:61:88:b6:c9:db:74:a6:d2:44:2c:3a:fe:
                    2c:88:92:d4:89:04:95:60:25:8f:60:98:d9:7e:e3:
                    0f:ed:7a:93:1e:f7:79:3f:9f:2d:f6:0d:84:c1:6d:
                    9f:76:83:ce:de:7c:a0:59:1b:09:b4:fb:c4:fa:f2:
                    53:c9:22:d6:bb:ae:84:1c:97:4e:88:00:0b:df:cf:
                    05:e0:5e:88:75:91:e5:19:2a:80:40:02:52:92:3b:
                    d8:26:34:60:62:3b:aa:6e:8e:e4:a2:bf:b2:65:1e:
                    af:2d:f4:fb:e9:f8:72:92:1b:e7:61:e2:90:3b:c9:
                    e8:5a:37:c7:7a:7c:ba:ee:0d:81:8a:23:98:95:a7:
                    47:37:fc:b6:b3:3e:bf:3d:41:ce:20:c0:ad:8a:d5:
                    07:45:ad:67:d0:c5:09:25:85:ee:93:40:ac:7a:0c:
                    5e:51:40:28:27:14:ec:a8:33:8a:ad:60:19:a5:99:
                    ac:cb:eb:de:b1:2c:3e:c0:39:c9:ee:55:19:db:13:
                    d2:ff:9a:76:ea:c8:45:28:99:22:ff:97:55:12:63:
                    59:3a:f5:e4:bb:19:8a:b7:70:93:a0:72:c4:a1:72:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:D0:38:FB:1B:64:36:5D:A0:29:86:4A:CE:94:9F:25:72:CC:C6
            X509v3 Authority Key Identifier:
                keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:18:d2:67:77:15:d5:25:ec:ee:78:82:f2:f0:27:19:1f:3c:
         c4:9f:70:47:99:a8:c7:66:3c:02:e9:7f:bc:76:0a:64:0b:e1:
         04:ad:9c:6a:97:5e:2a:24:87:b1:20:1e:a6:6f:d7:d2:b3:35:
         3c:d9:4e:39:07:78:5d:89:18:79:da:cc:ec:9a:d0:c8:d2:5a:
         60:5d:d9:96:6c:4b:c4:4e:f1:49:1e:7d:11:2a:3e:c5:17:d5:
         b3:77:46:16:d4:07:8b:1a:c2:b8:1b:de:5e:cb:39:8e:c3:14:
         db:4a:70:3d:da:46:a2:20:a6:31:b9:1b:6f:79:ff:45:6f:52:
         04:0e:4a:06:72:bc:5a:ae:9d:18:75:63:b2:1b:5b:2d:da:42:
         96:c9:5b:98:97:49:e4:cb:bd:43:dd:ae:ef:85:c8:32:ed:fd:
         45:f8:79:a6:e7:fb:8f:14:29:ef:86:54:d7:97:5a:8e:ea:dc:
         1f:e5:cc:9f:d0:f7:53:4c:45:28:30:18:9d:4e:b7:37:e7:ca:
         a6:ea:e2:13:3c:8a:ba:0e:79:78:f0:75:99:86:ab:5a:81:4c:
         a4:65:84:44:e3:58:93:ed:12:ab:ab:82:a8:cd:c1:cc:4c:3c:
         6b:59:2f:e4:0f:e9:c8:23:3d:4b:f9:97:df:4a:48:f7:e1:69:
         ba:f1:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:50:55 2024 by rpki-client on console-ams.rpki-client.org