Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
File:                     skdjJsizNc1GFWo9VpBcbp0NhbU.mft (raw, json)
Hash identifier:          /TvNodYqdEIhT2tei7JWUDq12H6dW1x1GdmOzRm7WlI=
Subject key identifier:   05:1F:C0:A6:53:89:FF:30:DE:85:C9:C5:75:FC:B8:4D:E1:3B:8F:91
Authority key identifier: B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
Certificate issuer:       /CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Certificate serial:       018F87ED05617A4DE2F9FED1C2F78EC26123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
Manifest number:          72
Signing time:             Fri 17 May 2024 19:00:08 +0000
Manifest this update:     Fri 17 May 2024 19:00:08 +0000
Manifest next update:     Sat 18 May 2024 19:00:08 +0000
Files and hashes:         1: skdjJsizNc1GFWo9VpBcbp0NhbU.crl (hash: LlAgWyG6HLl26m6GmcElFQs2NuqLKB2pVPHEQ2lF0TI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:05:61:7a:4d:e2:f9:fe:d1:c2:f7:8e:c2:61:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
        Validity
            Not Before: May 17 19:00:08 2024 GMT
            Not After : May 18 19:00:08 2024 GMT
        Subject: CN=051fc0a65389ff30de85c9c575fcb84de13b8f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:c4:ba:47:c2:54:1f:ae:d9:aa:a3:14:f0:
                    77:9a:47:7f:67:af:b5:63:af:f0:20:23:b3:0e:a1:
                    0c:bb:57:b5:bd:24:3d:58:8c:3f:b2:cb:05:b0:d5:
                    77:b1:21:d5:aa:7f:ee:ef:34:53:d1:36:75:5f:08:
                    d5:84:49:04:1c:cb:d9:0d:b9:55:bd:eb:9f:95:f4:
                    fa:c7:69:13:37:5a:d6:40:3c:0c:02:4a:64:15:f7:
                    b3:89:07:24:b6:5f:59:82:13:25:67:e5:6f:0c:f5:
                    88:4b:a1:c7:c7:71:f3:db:4a:43:57:bf:0b:74:df:
                    d4:70:cd:54:34:b4:d6:09:59:ba:f0:6a:1c:16:22:
                    4f:75:0d:9b:d0:6e:b6:55:23:1d:de:7b:90:28:00:
                    45:42:1f:91:08:df:be:3f:fc:a6:2f:d7:3d:a1:a4:
                    42:95:87:83:c1:60:af:9f:39:3b:99:47:22:64:ac:
                    8c:34:16:54:ad:01:b6:af:46:f5:b6:9f:29:c7:13:
                    67:bc:58:b6:3c:7e:1d:28:16:cc:ae:58:f2:fb:b6:
                    70:04:b4:9e:cc:8f:03:ec:6c:d5:24:e2:f3:ae:a7:
                    da:f5:3a:fd:00:f9:18:5a:ee:7a:90:60:0b:69:0d:
                    e6:ce:62:d4:b8:d4:19:3e:0c:e7:1c:da:fa:75:ae:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1F:C0:A6:53:89:FF:30:DE:85:C9:C5:75:FC:B8:4D:E1:3B:8F:91
            X509v3 Authority Key Identifier:
                keyid:B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:15:bb:e3:03:2e:11:13:d2:92:cd:56:83:56:38:cb:a5:24:
         bd:53:b6:a8:cc:42:99:b1:01:44:71:3d:ef:c2:3d:ab:34:ff:
         ac:bf:fa:8c:0f:fc:60:a1:56:e7:02:8c:a1:c3:d9:4e:a3:05:
         b0:58:f9:a2:09:46:27:6d:87:87:84:c5:35:ff:a9:10:e1:a6:
         7a:fd:36:f5:4f:57:53:38:db:77:ee:bf:7c:4f:83:80:a5:02:
         94:bf:be:40:38:21:20:b2:30:b9:f4:09:24:e7:21:7a:93:b0:
         69:ee:eb:3a:b3:d0:72:5b:91:18:4b:5f:08:9a:79:c9:13:8f:
         f3:f2:c6:d6:1a:9b:dc:6c:57:4a:d1:bd:af:c7:d3:3a:c7:7d:
         aa:04:f8:29:f0:6b:ed:1e:61:50:75:a7:06:17:b4:04:d0:19:
         f8:4b:a3:15:dc:a5:d6:aa:d7:fe:85:f1:b7:0e:b5:7f:dd:36:
         b3:4f:2d:19:4f:64:6f:19:c5:dc:22:ef:9c:85:6f:08:cd:53:
         53:28:56:03:55:da:46:9a:20:f8:7c:ee:c7:90:1a:ef:4f:3f:
         8f:ee:f8:f6:24:43:d2:78:43:a5:ea:43:bc:42:a4:2a:6a:a5:
         22:a0:9b:10:70:f0:86:fd:25:34:54:85:93:96:08:c5:75:8c:
         4b:75:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:47:03 2024 by rpki-client on console-fra.rpki-client.org