Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File:                     EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier:          8SMGoNFWSnlFPnXBTg0YgU0AdJ4KI8oqsLpBKPLRIqo=
Subject key identifier:   6D:23:55:71:3A:30:CE:90:CF:40:08:94:AD:B2:0D:53:D8:3E:6B:A4
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer:       /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial:       018F546EF0B47523962DA7370A96794DC997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number:          102F
Signing time:             Tue 07 May 2024 19:01:47 +0000
Manifest this update:     Tue 07 May 2024 19:01:47 +0000
Manifest next update:     Wed 08 May 2024 19:01:47 +0000
Files and hashes:         1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: y3+ngDah0swCgyrwA2OYeCzVgULtOzf/H2dbhf2DNHU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:6e:f0:b4:75:23:96:2d:a7:37:0a:96:79:4d:c9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
        Validity
            Not Before: May  7 19:01:47 2024 GMT
            Not After : May  8 19:01:47 2024 GMT
        Subject: CN=6d2355713a30ce90cf400894adb20d53d83e6ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:15:ea:30:f7:28:63:01:a4:69:ef:32:88:68:
                    6e:60:d3:c4:16:02:73:95:f3:2a:2a:d7:92:e4:6b:
                    24:cc:aa:65:97:c0:eb:57:39:2b:9d:3b:f7:ca:37:
                    14:a7:6b:d3:31:87:d2:9a:39:8c:d9:d3:31:ac:79:
                    d8:66:db:50:d7:c5:e3:a9:52:e9:2b:67:0c:38:2c:
                    8a:2d:1b:58:01:e7:61:e9:83:6f:e0:4d:88:cf:80:
                    63:5b:38:66:ec:b8:79:54:01:42:6e:7a:a3:b9:01:
                    11:f5:cd:ff:b2:9c:bc:96:38:d0:b6:b0:f9:61:12:
                    0e:7a:82:ab:98:fb:b4:32:6b:11:9f:90:c5:9f:60:
                    7e:dc:3a:1a:9b:aa:24:1b:c6:5a:f9:a1:02:25:d4:
                    b4:75:1a:cd:27:3e:62:b6:2c:30:22:d8:85:f9:25:
                    38:77:05:d4:d3:4b:1e:06:6f:1f:b9:76:8b:ef:ce:
                    7a:9f:82:c1:57:fd:50:36:f2:e3:9e:cd:eb:68:fe:
                    50:72:5a:0f:a4:17:99:a9:db:7d:97:59:2f:e2:c8:
                    4c:a7:a6:d6:90:64:60:9f:33:d1:8a:d6:4d:81:ad:
                    80:7d:65:df:1d:66:e4:f1:f4:7b:09:2a:77:9b:e7:
                    89:4a:1a:98:67:f3:36:6e:f7:5c:0b:65:05:6a:51:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:23:55:71:3A:30:CE:90:CF:40:08:94:AD:B2:0D:53:D8:3E:6B:A4
            X509v3 Authority Key Identifier:
                keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a7:66:74:2f:c8:d5:de:1d:da:ba:0d:a5:f1:ca:45:83:da:
         75:ab:c3:a9:d4:a3:e0:b2:67:f7:7e:d9:a6:7b:aa:5a:b7:65:
         51:6b:8f:4f:e3:85:35:f3:95:96:ab:f7:ed:09:f7:b6:0c:ee:
         eb:a7:cd:18:ac:a7:75:df:9f:5c:0d:50:93:ad:ab:79:52:00:
         bf:f7:98:c1:8f:f1:6c:7a:fa:c8:15:bc:27:b0:b1:b4:56:58:
         dd:d2:7b:ff:84:16:1e:29:73:6f:72:80:1d:0f:92:48:c5:18:
         46:18:be:46:69:07:19:f7:ea:07:07:8a:d8:bb:8c:cd:1f:6c:
         5b:67:0d:77:fe:e5:92:4d:87:ef:52:ef:6c:23:56:20:ea:f5:
         d2:c6:e3:c6:2b:f6:f2:8e:0e:6a:30:3c:31:05:aa:fc:4b:3d:
         99:11:67:50:d6:b7:91:25:78:61:dd:ed:97:08:d5:62:c3:fb:
         67:76:f2:04:19:e2:b3:ad:20:34:56:af:55:45:d9:50:7d:bb:
         3a:29:c4:1f:3a:e3:35:c7:3a:46:ad:2d:16:2d:6c:e9:3d:06:
         f1:cf:38:89:42:8d:80:25:91:64:3a:3b:ee:06:fc:64:2b:7c:
         de:55:cc:71:e9:b6:14:d6:57:ea:a1:14:97:90:bc:4f:d8:77:
         2e:ab:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:03:33 2024 by rpki-client on console-fra.rpki-client.org