Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
File:                     tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft (raw, json)
Hash identifier:          k4M5W2nZmKucJX/kusd4gcVvZav32Lj9zJ5RiL2Sf64=
Subject key identifier:   A8:5F:36:AB:BD:61:95:CD:86:C2:7A:0A:F3:FF:A6:0E:F7:FF:81:91
Authority key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
Certificate issuer:       /CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Certificate serial:       019074D396A833051D62D25E2F4DBECC3E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
Manifest number:          0D96
Signing time:             Tue 02 Jul 2024 19:02:22 +0000
Manifest this update:     Tue 02 Jul 2024 19:02:22 +0000
Manifest next update:     Wed 03 Jul 2024 19:02:22 +0000
Files and hashes:         1: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl (hash: sNgeYJU7gHDZk5eLkxrFyrGfZ9PNoTGt82VkKlaQh0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:74:d3:96:a8:33:05:1d:62:d2:5e:2f:4d:be:cc:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
        Validity
            Not Before: Jul  2 19:02:22 2024 GMT
            Not After : Jul  3 19:02:22 2024 GMT
        Subject: CN=a85f36abbd6195cd86c27a0af3ffa60ef7ff8191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:34:af:f5:9c:cc:50:e5:da:31:be:4d:d1:15:
                    eb:be:d5:df:b4:6f:62:da:ed:8e:47:df:8d:64:10:
                    72:31:ba:a6:7e:a9:15:0f:65:3f:a9:07:af:8f:ea:
                    7c:c0:97:59:4b:90:ef:68:93:0a:97:9f:18:08:83:
                    1b:a0:43:46:00:e3:b8:ca:50:67:72:4b:49:1b:9f:
                    65:7d:a9:8e:c3:d7:19:44:93:9c:1b:4d:52:73:22:
                    64:e4:d3:13:53:f9:d9:ae:c0:db:ab:e0:bc:a0:24:
                    0b:c0:07:d8:21:bd:8b:26:f8:88:62:9e:fc:d4:b6:
                    29:8a:52:15:0c:0c:79:ef:88:ae:6d:fa:e2:c5:54:
                    5b:63:9d:7e:ff:62:37:09:7b:69:bf:f9:64:3a:d6:
                    f6:ef:d5:5f:84:68:39:ee:0a:06:08:41:57:14:61:
                    ee:46:7b:14:61:43:9e:0f:c3:dd:38:43:ac:94:c4:
                    27:0f:1d:11:1d:bc:b7:55:ea:1e:39:28:9b:c4:2e:
                    8a:55:28:d8:44:ed:fc:6c:bf:93:7e:77:ae:f8:66:
                    aa:88:bf:21:a1:ec:db:7f:b2:88:33:58:ec:27:20:
                    fd:87:86:45:83:d2:56:5f:cf:1d:13:a4:4c:db:84:
                    42:5d:5d:15:d5:ef:fb:0d:83:24:17:0d:79:35:c6:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5F:36:AB:BD:61:95:CD:86:C2:7A:0A:F3:FF:A6:0E:F7:FF:81:91
            X509v3 Authority Key Identifier:
                keyid:B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:16:e6:08:7a:21:3c:8a:1a:8e:98:37:f5:c3:2c:ab:e8:e2:
         50:20:b2:3f:fa:da:7e:32:e5:f5:ae:d5:97:56:ac:51:82:9e:
         31:b5:d5:93:4c:3c:22:eb:ab:a8:1c:02:c5:90:c7:4f:02:df:
         f2:de:e6:e6:8a:1a:06:1f:4b:0a:74:91:a8:03:cf:7c:16:66:
         69:ea:d3:1e:34:3a:6c:9f:92:f6:00:e6:00:28:65:f3:f2:15:
         0d:b4:58:9d:ae:81:1e:04:64:99:b1:e2:10:4b:b7:52:c2:d5:
         76:6d:1d:29:75:b7:cb:5a:27:55:89:9f:f0:88:4d:41:5e:0b:
         ea:78:06:3b:8c:df:a1:fc:b4:27:be:22:e4:65:0f:c8:0c:9a:
         00:69:f1:23:d3:dc:50:cf:ea:32:a4:b5:f0:52:97:62:1f:87:
         1c:a7:dc:fb:10:15:58:71:00:58:8e:91:f5:4f:41:be:66:63:
         a9:28:a7:19:99:ec:fe:a6:41:ff:da:5f:69:81:71:50:d3:33:
         cd:60:96:f3:89:c0:8b:7e:f4:30:a1:d4:26:c6:6b:07:ea:d1:
         5c:a7:41:c0:7d:b0:32:ea:0f:e3:65:b7:8a:33:2b:d5:a0:e7:
         ae:ed:f5:cb:60:0d:64:0e:93:4f:8f:43:af:17:af:f2:66:f3:
         8d:f6:f5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:19:00 2024 by rpki-client on console-fra.rpki-client.org