Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File:                     p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier:          aoMo2on/16DGRYDO06uFxH2Yf/6TIYhJUYZC0riqjfE=
Subject key identifier:   A5:D8:49:C2:9B:5E:D7:53:C7:18:7D:54:D8:05:5B:E8:EF:8E:9A:08
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer:       /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial:       018F874961393835EE5E411D1D6BD4C5C532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number:          05DF
Signing time:             Fri 17 May 2024 16:01:24 +0000
Manifest this update:     Fri 17 May 2024 16:01:24 +0000
Manifest next update:     Sat 18 May 2024 16:01:24 +0000
Files and hashes:         1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: CslYM9dEtujkyAVqcCCkoFxDLBa2sn/CUj7Qk0Qc5Lk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:61:39:38:35:ee:5e:41:1d:1d:6b:d4:c5:c5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
        Validity
            Not Before: May 17 16:01:24 2024 GMT
            Not After : May 18 16:01:24 2024 GMT
        Subject: CN=a5d849c29b5ed753c7187d54d8055be8ef8e9a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:21:ef:fd:b7:2b:f3:1b:04:00:f6:ed:2f:
                    5d:ca:f6:c7:dd:c1:f3:a8:f8:7a:62:b7:80:b1:c5:
                    18:56:75:d2:2d:ec:4e:b4:ba:56:12:89:a4:b7:45:
                    d3:51:24:d4:be:cf:9f:b9:b8:29:19:fc:1a:98:94:
                    49:bf:f6:80:89:fc:f4:53:7c:5b:53:52:44:5c:b9:
                    7a:c3:8a:14:11:d8:a5:64:c0:d0:ea:c9:e5:4a:87:
                    59:04:7b:43:a7:e8:26:2a:28:83:15:a4:09:0c:02:
                    d7:48:2e:bc:98:01:d4:e2:c9:f9:2b:e5:ca:d8:0f:
                    97:6f:a5:88:99:b5:f0:78:96:39:af:0f:bb:3b:a0:
                    23:69:90:61:a9:5a:3b:6c:77:1c:fd:79:a4:bc:0c:
                    a3:3e:51:27:9c:22:ad:6a:94:31:61:bd:88:9b:68:
                    19:64:7a:8d:95:2f:06:d8:90:2a:76:e7:b3:d5:e1:
                    f0:70:d3:e7:85:c5:e2:29:27:32:ff:da:fe:a8:a7:
                    36:12:ec:b8:14:6a:87:0e:e7:17:f5:77:f2:b4:a5:
                    60:aa:05:e7:aa:03:68:0a:3d:21:bc:15:e5:1e:70:
                    44:74:32:04:5a:c0:63:59:7b:db:2d:96:fb:26:8f:
                    1e:69:5d:c8:18:fe:39:ca:7c:f8:2a:c1:52:01:3f:
                    aa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D8:49:C2:9B:5E:D7:53:C7:18:7D:54:D8:05:5B:E8:EF:8E:9A:08
            X509v3 Authority Key Identifier:
                keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:dd:5e:c2:2a:64:58:38:ca:14:11:b7:b0:ff:73:8a:0f:93:
         5c:33:20:4a:61:ad:f8:81:5f:12:0d:bd:a0:ec:e5:c1:e7:7a:
         d7:c8:dc:e3:72:ed:d1:6f:9b:c9:17:37:99:57:97:e9:54:3e:
         34:0e:88:b1:9a:19:cd:4e:35:31:54:82:55:c1:75:7e:8f:ab:
         53:f1:9a:3d:b1:6c:93:98:45:e0:e8:df:6a:31:4f:44:d8:9a:
         f5:30:27:c7:3d:95:21:50:98:aa:fc:d7:2c:6a:86:cf:0d:c8:
         3b:4e:a6:e9:2b:81:ee:f6:95:af:07:19:3a:54:ab:f3:b2:12:
         68:f5:98:38:fe:cf:9c:96:d8:c1:5f:e8:5f:27:3e:aa:55:2f:
         aa:a6:f1:20:0a:54:b6:3d:af:16:12:54:96:b9:26:43:68:36:
         86:c0:c1:30:94:a8:8d:de:e6:87:3e:90:bb:c6:d2:30:f2:2e:
         df:e0:bc:65:ba:2a:43:7d:10:f0:24:34:a6:4d:f6:1e:cd:ce:
         20:5f:95:c1:d8:20:6e:39:43:3d:cb:4e:b8:a8:20:82:0a:69:
         6e:34:5b:bf:f6:77:6a:0d:76:8d:e4:dd:66:37:e7:a2:e5:d2:
         49:54:17:6b:3c:10:92:e0:1a:47:33:d6:af:37:5c:2f:77:6a:
         a1:5c:d6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:58:11 2024 by rpki-client on console-ams.rpki-client.org