Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft
File:                     oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft (raw, json)
Hash identifier:          t0Opc0zkUzXu+yihvsNqibA4Mobxvp2SwI46WHToXTo=
Subject key identifier:   7F:EA:46:C8:42:26:30:4B:EE:36:59:95:5B:6F:F1:DA:F1:F7:41:9E
Authority key identifier: A0:3F:3F:77:86:31:AA:04:FC:31:54:53:C9:21:73:47:D1:63:8E:74
Certificate issuer:       /CN=a03f3f778631aa04fc315453c9217347d1638e74
Certificate serial:       018F874B3AE97FDEA75CA3304D704542FB1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oD8_d4YxqgT8MVRTySFzR9FjjnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft
Manifest number:          067B
Signing time:             Fri 17 May 2024 16:03:25 +0000
Manifest this update:     Fri 17 May 2024 16:03:25 +0000
Manifest next update:     Sat 18 May 2024 16:03:25 +0000
Files and hashes:         1: oD8_d4YxqgT8MVRTySFzR9FjjnQ.crl (hash: RT8Jabn5g4MP4gqtrDgHeSPrZOhMpc6j10dBAlZxISo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oD8_d4YxqgT8MVRTySFzR9FjjnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:3a:e9:7f:de:a7:5c:a3:30:4d:70:45:42:fb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a03f3f778631aa04fc315453c9217347d1638e74
        Validity
            Not Before: May 17 16:03:25 2024 GMT
            Not After : May 18 16:03:25 2024 GMT
        Subject: CN=7fea46c84226304bee3659955b6ff1daf1f7419e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:ba:b9:e2:9c:47:26:c9:5c:4d:a0:5f:52:
                    d4:fa:15:fa:f2:12:45:61:53:64:ee:6a:9b:9c:7b:
                    8a:3e:59:a6:ab:59:9a:5a:f8:41:9b:c8:d1:e2:41:
                    60:ec:cc:e5:d8:be:4c:c0:43:f1:1b:5f:9f:b2:15:
                    5a:25:14:6b:d1:7c:56:79:ed:11:3a:e2:41:74:e9:
                    d3:20:0d:db:dc:4d:cd:a0:53:a0:51:5e:4e:bb:c4:
                    71:94:89:3a:6f:b2:61:ff:54:f6:ab:53:d5:2d:76:
                    18:5e:78:d3:92:fe:66:cc:f7:9f:79:10:5c:b4:70:
                    82:fc:64:4a:df:63:03:af:b4:61:eb:f7:a2:26:03:
                    bb:ff:ea:b7:58:9c:5a:cf:e6:f5:4f:05:5e:e1:fc:
                    8d:30:47:46:18:e7:13:42:9d:e1:33:b2:81:a0:7e:
                    e4:04:78:36:dd:51:ea:14:ac:c1:6b:b4:07:a2:cb:
                    73:23:5d:d7:66:6e:ca:16:f7:30:5e:8d:cf:d4:f4:
                    ac:ee:bd:81:c1:24:12:ff:36:02:9f:64:af:12:c9:
                    12:dd:0b:7f:73:9a:72:bc:b1:50:79:c5:e3:46:63:
                    9d:48:15:82:d5:63:b5:22:7e:98:a6:80:35:2c:83:
                    7d:c4:46:35:f6:34:20:b8:6b:78:59:50:17:5a:85:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EA:46:C8:42:26:30:4B:EE:36:59:95:5B:6F:F1:DA:F1:F7:41:9E
            X509v3 Authority Key Identifier:
                keyid:A0:3F:3F:77:86:31:AA:04:FC:31:54:53:C9:21:73:47:D1:63:8E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oD8_d4YxqgT8MVRTySFzR9FjjnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6a:ab:2a:fd:8c:ec:b7:2e:34:e2:a2:ad:44:50:1a:ed:96:
         53:0d:47:a9:df:e1:02:48:80:59:ff:b7:89:0d:70:af:b8:ea:
         0a:cb:70:a0:0f:7d:d4:c5:98:81:c0:a8:c2:55:4e:ab:1b:dd:
         21:0b:21:29:fc:07:3a:c4:d0:e2:5e:7d:c4:24:61:92:93:fe:
         32:35:bb:8a:c3:65:0d:ba:02:fd:44:8d:67:46:04:1d:5c:88:
         60:f4:1c:83:19:49:92:23:25:cb:44:4c:55:37:98:fa:0b:c2:
         54:f6:25:5a:3d:ba:8e:18:0c:83:40:34:31:9f:21:8d:c8:45:
         be:77:84:25:67:13:30:bb:0c:5a:64:ee:6e:13:b5:15:12:7a:
         11:f4:94:38:34:b2:57:2d:09:df:98:cd:05:b7:a0:a5:c1:0e:
         43:8b:16:5d:be:1b:ce:82:e6:76:1a:6e:52:22:c1:97:98:b7:
         04:0f:08:16:52:b9:5c:fa:4c:b9:55:f2:c1:ca:54:40:44:20:
         88:c1:ad:c4:a6:51:7b:29:3a:0f:fa:b8:ce:8b:1e:f1:29:5f:
         93:55:6d:fb:c6:a5:7c:71:5b:9f:f1:87:32:fd:54:64:9b:3e:
         6d:20:27:57:0a:c6:b2:9c:a5:09:ff:0a:7c:d9:74:11:2c:2b:
         80:30:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:17:48 2024 by rpki-client on console-fra.rpki-client.org