Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
File:                     12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json)
Hash identifier:          rZ5oUcjYnGPlj/AuNlWhqWHt02v+JQrhrUdKOpMsQ9A=
Subject key identifier:   F7:9D:96:29:8C:2F:4D:29:56:AD:92:22:DE:C8:EC:A5:1A:81:E1:60
Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
Certificate issuer:       /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Certificate serial:       018F8635DA77681CF901AA3F271A70D59F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
Manifest number:          0177
Signing time:             Fri 17 May 2024 11:00:27 +0000
Manifest this update:     Fri 17 May 2024 11:00:27 +0000
Manifest next update:     Sat 18 May 2024 11:00:27 +0000
Files and hashes:         1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: +eUpUUJ/3EpQ+q9kIVcdcVJLakevdmxBdNlxlSaeIUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:da:77:68:1c:f9:01:aa:3f:27:1a:70:d5:9f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
        Validity
            Not Before: May 17 11:00:27 2024 GMT
            Not After : May 18 11:00:27 2024 GMT
        Subject: CN=f79d96298c2f4d2956ad9222dec8eca51a81e160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:5d:b3:4c:5e:53:10:68:70:2f:0e:b4:b8:
                    64:35:28:bf:7a:5c:90:51:15:f9:67:3f:75:01:48:
                    dd:ee:d0:98:02:ab:b8:5a:3c:92:0b:64:7d:cf:aa:
                    7d:a3:2a:9b:f3:d3:59:09:e3:54:42:51:25:0a:f4:
                    2b:61:03:62:4b:ad:5a:0e:8a:16:a1:30:6e:b7:f3:
                    cf:84:0c:e4:db:c6:81:fc:8f:3a:c6:af:2d:6f:e1:
                    9c:9e:ee:4f:d1:fc:e5:13:56:1a:aa:c7:df:b9:29:
                    51:3e:18:4e:c2:3f:12:b8:d4:86:0a:99:72:c3:83:
                    9e:3d:7f:09:16:eb:b6:5b:f4:84:f6:c2:aa:e1:0a:
                    b4:a8:23:54:14:73:34:03:2d:70:49:9d:71:66:e4:
                    fe:27:a3:e9:f5:21:0f:86:2e:f0:33:c5:a6:62:aa:
                    14:8f:81:ed:4f:da:cd:fd:ff:a3:c4:49:81:83:b1:
                    2f:a1:b3:00:59:d0:1d:b9:ac:af:06:f7:07:0c:10:
                    91:bb:89:e7:7a:e6:84:9b:3f:af:9d:50:b3:34:fc:
                    7a:f0:dd:a3:31:7a:29:e3:97:0f:79:45:6a:81:51:
                    28:44:fa:ec:ff:d0:0a:c3:5f:8d:8a:74:7e:64:b4:
                    dc:21:b6:6b:eb:55:c2:64:31:e7:35:e9:0a:16:16:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9D:96:29:8C:2F:4D:29:56:AD:92:22:DE:C8:EC:A5:1A:81:E1:60
            X509v3 Authority Key Identifier:
                keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b4:82:b3:cc:85:3b:b2:33:c8:9e:80:f8:b0:d3:e6:2f:04:
         36:a6:65:18:88:c3:bf:96:15:7a:c9:68:36:48:ef:63:45:fc:
         ad:f2:5e:6c:a0:ad:8c:c0:3d:df:43:ed:d6:2e:f9:52:65:d0:
         98:a6:b5:88:8d:fb:17:1d:57:b1:5c:20:e3:dd:9e:25:4d:6f:
         bc:e3:e0:17:af:50:0b:8b:73:ed:ce:62:14:83:28:53:28:b2:
         14:65:2a:9e:db:7f:64:cb:e7:7d:d0:5c:fd:7e:d0:20:bd:c9:
         67:b3:19:eb:d1:c7:d6:76:52:0e:70:fe:da:0a:f7:39:57:1b:
         26:ee:a4:0f:36:d2:2f:c0:ae:18:3a:84:26:e4:d3:e7:87:7d:
         a9:26:e3:22:c5:06:bc:a0:8e:76:66:be:47:3f:4d:1a:1b:3e:
         28:7c:9f:16:6b:5d:f4:90:b7:9a:94:23:ca:46:f6:c4:1e:cf:
         d2:e2:0f:34:ea:93:53:a0:62:92:af:85:a5:70:dc:5e:24:c5:
         d6:66:2a:79:30:dd:0d:d5:e6:a7:39:c1:42:0d:72:58:8e:1a:
         e8:68:ca:fc:10:a1:2d:0f:56:f9:31:42:f4:74:85:37:7e:b0:
         8a:c8:c6:d2:76:b0:70:4c:7b:cb:a0:7c:af:38:77:e5:cc:bd:
         70:a9:1e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:57:29 2024 by rpki-client on console-ams.rpki-client.org