Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
File:                     8iyKma2nf70-JAFPXiTxr2lQXCM.mft (raw, json)
Hash identifier:          Om9Tzkyf0IVQRfJ+XmzJZT7eK3p2n2y7x7TN5EV4sPA=
Subject key identifier:   D3:04:1E:BA:11:05:CB:43:38:F1:E0:E1:99:61:FC:A5:DC:89:29:3D
Authority key identifier: F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
Certificate issuer:       /CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Certificate serial:       018F3A0B81EF01387FF10908E2B983C4B3A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 16:03:03 +0000
Manifest this update:     Thu 02 May 2024 16:03:03 +0000
Manifest next update:     Fri 03 May 2024 16:03:03 +0000
Files and hashes:         1: 8iyKma2nf70-JAFPXiTxr2lQXCM.crl (hash: 202bwJoP3h8c9t8NhqFXHFFLeTAmmOfBeqmfEaazB/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:81:ef:01:38:7f:f1:09:08:e2:b9:83:c4:b3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
        Validity
            Not Before: May  2 16:03:03 2024 GMT
            Not After : May  3 16:03:03 2024 GMT
        Subject: CN=d3041eba1105cb4338f1e0e19961fca5dc89293d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:c2:ad:a4:81:cf:db:88:fb:0a:25:07:f4:
                    6f:ed:0f:68:a5:49:c0:0f:24:32:9e:fa:16:4d:b4:
                    2a:69:7a:93:2b:b7:d3:6e:58:13:66:f8:f5:1e:00:
                    86:e8:18:6e:40:48:6f:51:74:b1:00:ef:de:dd:8d:
                    0a:03:f3:17:52:ad:9f:fe:a2:58:c4:ef:ff:3a:10:
                    d6:3b:57:4a:26:04:d1:e7:83:c5:80:8a:40:a2:12:
                    4d:7e:9d:4c:7a:c7:2f:a7:7e:ce:97:d0:90:cf:ab:
                    aa:52:1b:2a:1a:5d:db:d1:e4:4b:68:75:d9:85:21:
                    07:07:22:8d:60:ae:2d:c2:d8:da:03:a4:32:00:3d:
                    b6:4d:53:0d:cb:63:1e:d4:0c:aa:10:d2:ed:a3:4b:
                    f3:ab:1b:5e:7a:16:3e:59:cd:df:f8:9e:58:fc:0f:
                    68:5a:98:78:3b:2f:79:e6:a5:fd:f7:1e:f6:6b:27:
                    61:27:77:9f:12:e2:40:3c:28:fa:47:5e:cc:3d:28:
                    55:93:2c:96:02:ca:e7:8e:fe:34:5c:fc:b5:cc:bb:
                    11:e7:fe:09:58:06:25:84:88:68:42:9f:54:24:44:
                    69:8b:3b:e6:73:2c:56:e4:79:5e:4e:c2:a3:e5:fe:
                    e9:25:ea:68:27:0b:ec:26:74:d9:8c:cf:ad:8e:89:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:04:1E:BA:11:05:CB:43:38:F1:E0:E1:99:61:FC:A5:DC:89:29:3D
            X509v3 Authority Key Identifier:
                keyid:F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6e:1a:3c:61:28:27:39:ac:6f:04:7b:bc:80:07:a4:b8:3f:
         a7:a5:35:e6:82:ce:89:a5:b7:37:36:31:e1:09:75:bf:0e:d9:
         17:7d:35:bc:dc:0f:2b:f8:68:49:be:83:b0:69:92:69:b9:38:
         be:a6:c9:80:0c:dc:3a:54:5b:0e:e3:19:52:b3:24:61:ec:0d:
         79:c0:47:72:ea:69:0d:84:03:dd:71:4d:a1:c4:12:d0:65:45:
         f5:1c:77:0b:52:40:67:39:16:86:c0:49:a7:38:3a:99:71:96:
         2b:a0:90:84:77:a5:be:ce:93:2e:a0:fe:4c:6b:33:fa:35:00:
         f9:46:3e:c0:12:ae:cf:c1:21:f7:fe:e0:31:4c:03:e8:b1:5e:
         9c:71:ec:49:f7:99:c6:e0:9a:f5:aa:5d:92:ca:da:2e:57:60:
         d4:c7:dd:01:75:22:47:eb:dd:57:7e:7d:3e:6b:e9:8f:0e:12:
         84:48:89:45:a8:3b:f8:bb:c0:54:e3:a7:4b:35:31:52:0d:fb:
         d3:07:e7:d9:72:2f:20:10:9e:9d:aa:43:b3:8d:54:5b:6d:96:
         dd:82:64:46:57:1f:0a:47:a6:5a:ef:9f:ff:4e:8c:05:ef:66:
         32:63:48:85:a1:d7:b7:9f:02:fd:41:60:82:bb:cc:a2:af:84:
         7e:97:ba:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:27:53 2024 by rpki-client on console-ams.rpki-client.org