Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
File:                     FyesE93M6XjmP3r186adq0mS1kU.mft (raw, json)
Hash identifier:          zQjFlpD/ztw5kbtvFQ6XnYGiQyWyJrXs0CqA8LHBuRM=
Subject key identifier:   A7:E5:92:18:2E:DE:2D:D2:A8:6F:19:3A:8C:C6:36:F3:9F:E1:FA:4A
Authority key identifier: 17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45
Certificate issuer:       /CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
Certificate serial:       018F38F778F231EE07569E86959C871F3FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
Manifest number:          04AE
Signing time:             Thu 02 May 2024 11:01:33 +0000
Manifest this update:     Thu 02 May 2024 11:01:33 +0000
Manifest next update:     Fri 03 May 2024 11:01:33 +0000
Files and hashes:         1: FyesE93M6XjmP3r186adq0mS1kU.crl (hash: HJAeAv+rWtZNtHGYm3VDu69Ok1URZquaNMOT4Sl6CfU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:f7:78:f2:31:ee:07:56:9e:86:95:9c:87:1f:3f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
        Validity
            Not Before: May  2 11:01:33 2024 GMT
            Not After : May  3 11:01:33 2024 GMT
        Subject: CN=a7e592182ede2dd2a86f193a8cc636f39fe1fa4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:dc:e8:08:85:57:d9:b6:f6:69:0b:02:f2:
                    cc:44:ed:30:c1:65:64:4f:1c:f1:e7:fe:f0:f9:d3:
                    ed:03:37:55:a8:23:a3:10:8a:cb:29:35:dc:0d:66:
                    c0:83:83:c2:3a:37:e3:88:ec:78:92:e6:6c:4e:30:
                    13:94:12:0c:e0:46:5c:62:b5:88:59:46:af:70:0d:
                    ae:76:9e:f5:b2:d8:17:ee:9f:90:f8:b4:11:07:a9:
                    12:83:56:c3:42:3b:d9:5a:a1:7f:50:c1:5e:a3:c9:
                    4c:3a:34:fd:77:b6:db:6b:6f:a7:49:4b:94:32:5a:
                    fd:76:d5:13:3d:fe:76:92:8a:2d:1b:a5:cd:83:11:
                    d9:33:b2:bd:a1:25:22:5a:24:11:6c:ad:a5:a7:83:
                    a9:49:b6:2e:15:e4:0f:42:7f:19:8f:e5:35:a8:64:
                    61:9d:d1:46:bf:06:ef:0b:ba:50:84:ca:56:81:f4:
                    1c:25:f6:4a:f4:f6:03:df:78:11:35:a7:af:e1:bd:
                    a6:7c:cc:15:60:c0:c8:ed:3b:11:a9:58:a3:dc:77:
                    a0:99:a4:f2:43:3f:10:db:d8:3b:55:12:4f:2e:92:
                    6b:0a:40:8d:0a:7d:b6:2d:35:fc:cc:8f:fa:44:73:
                    0f:82:d0:7b:46:b1:76:a9:2b:c7:13:ac:92:fc:f8:
                    bb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E5:92:18:2E:DE:2D:D2:A8:6F:19:3A:8C:C6:36:F3:9F:E1:FA:4A
            X509v3 Authority Key Identifier:
                keyid:17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:15:dc:bf:b1:85:19:e0:2c:ec:d7:5f:77:56:27:cf:a6:
         09:59:76:7c:36:11:01:29:fd:54:c1:71:bc:cf:23:1c:aa:ef:
         d6:b8:a3:0b:c8:97:cf:85:39:d9:f9:e5:3c:8a:e0:69:91:93:
         fe:92:93:ba:33:24:70:ef:f9:9a:0c:29:84:4c:dd:df:42:73:
         7c:38:e6:d1:14:f9:2c:35:95:be:94:ab:23:5f:8c:20:03:f6:
         de:53:8b:16:ac:17:90:64:95:bc:d4:ab:f3:d5:68:51:b9:74:
         bd:ec:5b:71:dc:0b:1c:5e:f2:7b:53:59:83:8d:94:c9:0f:f5:
         22:38:34:0d:fc:1c:c2:04:98:7d:5f:cf:66:80:13:2a:9e:b8:
         ea:b3:0c:e4:d0:c8:17:7a:f9:c5:1d:13:a2:a3:0d:a0:1d:e2:
         bd:fc:66:63:a0:d6:27:56:d7:bc:98:16:53:9f:7e:88:fa:d6:
         82:b4:cd:4a:ef:5f:08:a5:0f:a6:3a:ae:5f:b2:d3:b1:55:0b:
         9b:67:16:42:ca:39:c1:99:de:cf:19:ff:ff:b4:aa:e4:7b:b7:
         1c:03:0b:83:1b:49:aa:d4:a6:f7:5c:32:ae:25:cd:80:c1:8f:
         c4:e2:9d:f5:65:ed:78:de:b5:a1:1d:97:76:55:7c:37:4e:58:
         5e:91:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:01:44 2024 by rpki-client on console-ams.rpki-client.org