Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
File:                     bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft (raw, json)
Hash identifier:          nA50ZJF3MAdAG2x5tf2s4NkgWySoi76HmJN287GhiC0=
Subject key identifier:   73:58:50:2B:3B:EE:02:81:B0:C6:99:25:E8:58:9A:62:DC:C1:EF:9B
Authority key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
Certificate issuer:       /CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Certificate serial:       018F87491B27EFB2FA4A7679C0A38E467CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
Manifest number:          0414
Signing time:             Fri 17 May 2024 16:01:06 +0000
Manifest this update:     Fri 17 May 2024 16:01:06 +0000
Manifest next update:     Sat 18 May 2024 16:01:06 +0000
Files and hashes:         1: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl (hash: KGsXE+HINdVDg9pt6V1zc9FJU3h8zmWiH3W+4TF5Czg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:1b:27:ef:b2:fa:4a:76:79:c0:a3:8e:46:7c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
        Validity
            Not Before: May 17 16:01:06 2024 GMT
            Not After : May 18 16:01:06 2024 GMT
        Subject: CN=7358502b3bee0281b0c69925e8589a62dcc1ef9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:93:c0:89:91:f1:d3:12:18:3a:50:27:96:
                    0b:c8:c7:2b:09:77:6e:b0:db:dc:1e:5f:c3:8f:96:
                    95:9c:ec:7d:6c:a2:f8:ee:d5:5e:5e:39:85:dd:23:
                    bc:d6:2a:ba:13:bf:83:34:d9:49:ed:2d:e2:3c:05:
                    be:1c:0a:c0:eb:0a:00:ea:7c:b7:60:64:c4:cd:1a:
                    c0:03:be:d3:6b:73:2d:bd:cd:70:38:4a:61:93:c6:
                    63:18:0d:f0:2a:12:ea:e8:b0:7d:9c:e4:4e:94:83:
                    24:f4:50:0a:d8:eb:1a:72:67:32:88:7d:8c:fa:53:
                    94:ad:7b:21:2d:bf:57:21:f3:b8:e9:12:5a:bd:53:
                    5b:0e:ce:c0:4b:d1:ca:05:c1:63:44:56:c2:26:68:
                    c1:e5:bc:cd:74:f4:f8:b5:55:9c:15:0f:60:e1:9d:
                    04:2c:81:3c:0c:81:28:cd:94:c5:72:c3:4a:fa:01:
                    b4:0b:2f:87:a0:77:ac:1d:b2:b6:24:0f:dc:11:62:
                    9c:bc:6f:92:ef:c1:03:db:04:07:79:4b:11:bc:43:
                    52:5b:87:51:35:10:e6:2f:7d:28:db:09:ec:d9:c4:
                    ca:b5:9c:ec:45:57:cf:59:f7:21:32:86:45:24:51:
                    4e:ab:a0:11:1f:08:19:72:cd:3f:bc:8d:67:60:62:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:58:50:2B:3B:EE:02:81:B0:C6:99:25:E8:58:9A:62:DC:C1:EF:9B
            X509v3 Authority Key Identifier:
                keyid:6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b4:ad:34:6e:2e:be:2e:4e:c4:b4:d7:3b:7f:10:7b:a8:b1:
         bc:3f:63:8d:56:8c:36:56:66:f2:46:7e:ab:23:ba:d1:27:98:
         f8:9d:fb:d5:21:20:2d:aa:e3:73:57:32:9e:55:ff:8e:d0:57:
         5f:2a:c9:08:5e:c7:10:27:07:ae:bd:b4:5e:e9:c4:be:77:89:
         e7:46:01:c8:43:27:d7:da:8d:dc:13:ee:5a:d0:c0:6e:7c:28:
         8f:f0:85:27:b8:df:80:07:07:d7:13:81:a3:b8:77:c2:9e:83:
         92:d7:d6:27:f7:04:3e:16:a0:01:6a:d5:1f:91:c7:84:2f:31:
         ee:90:ca:b3:45:cd:db:7f:bf:93:35:a7:a8:77:f2:b2:f6:1c:
         27:d9:86:6b:96:ca:14:f5:46:41:d1:8b:44:af:9c:4e:26:44:
         f8:a0:8e:db:93:d1:4c:33:4b:56:1b:42:be:df:b7:f5:4c:d9:
         50:eb:fc:84:e7:fc:d7:77:03:ce:f6:fc:c8:1f:6b:dd:cd:56:
         c8:cf:27:db:ab:8c:e6:ed:5b:fe:bb:dd:0a:73:d3:80:cd:53:
         15:aa:a9:ef:4c:1e:6e:43:85:49:ca:69:df:2d:30:fc:f7:e8:
         d0:7e:c8:f4:70:32:53:50:5c:b3:80:53:27:4a:6b:e4:9e:c7:
         73:55:e3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:44 2024 by rpki-client on console-ams.rpki-client.org