Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File:                     4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier:          sLEdjZwc2UXEj57Cc6Aah4NNkrn8waBV6ujj2qg4Xk0=
Subject key identifier:   64:36:55:D7:40:B6:B5:23:AF:AB:86:2F:06:B0:8F:1D:24:06:65:0D
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer:       /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial:       018FB421F718B1DEF83ECCA7EFC6F9980F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number:          0910
Signing time:             Sun 26 May 2024 09:01:15 +0000
Manifest this update:     Sun 26 May 2024 09:01:15 +0000
Manifest next update:     Mon 27 May 2024 09:01:15 +0000
Files and hashes:         1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: JYS+xuRIh+SHNpGBga5hdeXBVoisMuxzP0Os4Wgz8H0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b4:21:f7:18:b1:de:f8:3e:cc:a7:ef:c6:f9:98:0f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
        Validity
            Not Before: May 26 09:01:15 2024 GMT
            Not After : May 27 09:01:15 2024 GMT
        Subject: CN=643655d740b6b523afab862f06b08f1d2406650d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:2c:e9:21:54:37:ac:75:71:bc:ce:87:b4:
                    04:2e:3e:89:7c:c9:35:57:39:95:27:62:b8:08:bc:
                    d0:e6:ae:d1:ed:26:b9:a0:fb:2b:89:5f:5e:51:aa:
                    99:20:4b:2a:87:9f:8d:74:27:39:f6:eb:98:8b:ff:
                    1a:86:e2:69:ca:69:2e:4d:cf:8a:35:67:e8:0a:2b:
                    8d:97:62:ac:d1:d2:ad:2a:bd:42:b5:df:49:02:1a:
                    33:83:be:0a:fa:d0:e0:f2:b6:7d:95:71:5a:5b:f6:
                    0f:a7:fd:3f:e5:4e:b5:08:0c:54:5d:1f:aa:23:5d:
                    a7:f0:8f:e8:68:79:1e:e1:9b:14:ee:d6:d9:41:5a:
                    2f:13:51:29:f7:11:38:24:72:79:5a:b9:79:c9:9c:
                    02:4e:24:84:2e:07:1f:3e:1e:51:cb:bb:64:4f:34:
                    6e:e3:72:fc:01:2f:69:8d:c2:7c:3f:d9:e5:33:4a:
                    c9:7f:0c:59:1b:97:21:10:40:af:14:be:23:38:23:
                    b8:57:43:e4:13:2d:0b:b0:67:79:c7:1c:b9:a7:92:
                    d4:51:ef:0e:7d:22:b5:46:22:e4:fd:f7:e4:69:08:
                    74:b8:31:cb:c0:4f:6a:2d:7e:20:ff:c1:a2:91:48:
                    cb:e0:3a:68:72:0d:61:a8:63:88:11:96:ce:87:f5:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:36:55:D7:40:B6:B5:23:AF:AB:86:2F:06:B0:8F:1D:24:06:65:0D
            X509v3 Authority Key Identifier:
                keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:14:e5:02:97:e1:51:d5:a9:2b:7f:7b:d0:4e:62:0e:21:27:
         c5:db:81:67:31:a7:3d:ca:17:3f:d6:63:71:d2:2b:d4:60:9c:
         76:ff:05:66:01:56:0a:c2:44:ff:66:28:ec:29:99:24:6f:1c:
         fa:9a:0d:d4:0f:c1:97:9c:e8:b9:cd:bd:c2:10:6c:e0:f1:5b:
         a5:17:1d:ec:5e:e4:e7:81:79:99:52:6b:51:03:07:b6:5e:3b:
         7a:3e:c2:29:a5:03:88:e0:7e:7f:28:b5:14:59:64:9d:bd:23:
         31:e0:0e:af:b7:51:3e:94:86:60:de:f5:eb:51:71:58:2f:1d:
         0e:7c:19:02:f6:30:a9:07:d6:be:8b:ab:ba:da:5c:aa:c8:fb:
         8a:ca:90:16:62:a7:13:06:17:c3:f0:f5:ac:19:78:4a:d8:01:
         68:bc:3f:fd:fa:ec:1c:ee:c3:9a:b3:9d:78:3a:48:34:83:cb:
         88:fd:5d:e9:b7:88:8c:29:f3:91:07:af:86:5e:13:ee:a0:79:
         ef:25:dc:cd:15:01:62:d8:a2:d1:20:13:66:24:de:10:e0:02:
         0f:fa:b2:1a:a9:c8:68:b2:d2:ea:af:57:c7:7c:d7:fe:ea:b6:
         43:cb:d0:a8:57:b0:8f:16:1f:42:39:d6:80:6a:33:24:56:8b:
         59:07:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 15:29:22 2024 by rpki-client on console-fra.rpki-client.org