Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
File:                     tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft (raw, json)
Hash identifier:          qLk4oJrDBc8TE+9PlNrsGd3eLWmU60J5oA3Hv/mgfzs=
Subject key identifier:   C0:73:A6:13:DD:D6:49:D3:FE:4A:A2:B9:05:E5:00:16:00:41:AC:96
Authority key identifier: B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
Certificate issuer:       /CN=b641b288b4d413e955fea4460b32bf2cc182af03
Certificate serial:       0194BB292CDA10BEEB501D77C475A7402D28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 07:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:25 +0000
Files and hashes:         1: tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl (hash: AzpmbDOvn0rY8a/5LquJDKg1wGLFLXdCIFbberHlrvk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:2c:da:10:be:eb:50:1d:77:c4:75:a7:40:2d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b641b288b4d413e955fea4460b32bf2cc182af03
        Validity
            Not Before: Jan 31 07:00:25 2025 GMT
            Not After : Feb  1 07:00:25 2025 GMT
        Subject: CN=c073a613ddd649d3fe4aa2b905e500160041ac96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:06:cf:d4:89:d8:51:10:a8:9e:f3:c4:1c:
                    a8:b5:f7:8d:c0:e8:51:2b:81:09:82:af:f4:b7:79:
                    e7:bf:4b:da:41:3c:e2:85:89:f2:76:43:2e:e4:7a:
                    21:3f:5a:5a:07:06:f9:37:63:0e:8f:66:95:d3:48:
                    83:cc:d9:04:b1:40:31:d5:24:1a:ab:35:7c:4c:04:
                    26:88:d4:99:cd:ce:0d:82:ff:cb:bf:8d:69:7f:ec:
                    76:a6:d8:ba:9d:51:bc:39:ae:78:b5:2a:b1:51:3d:
                    35:25:e3:43:8a:5f:71:f4:e6:7b:64:1b:38:84:0b:
                    7b:e5:35:20:e3:59:76:ed:34:1d:95:96:39:dc:44:
                    ed:5a:09:e6:69:9f:95:b7:2b:1f:3c:ed:96:b2:c5:
                    c6:d6:12:0e:83:87:7b:4b:b8:bf:c5:b1:fa:b4:ab:
                    8b:a5:0c:64:76:96:c5:48:73:e6:73:15:6d:b7:02:
                    a8:eb:c6:15:1c:b1:8c:a4:05:00:b3:9d:a8:fa:53:
                    eb:be:9a:22:90:29:45:25:d6:57:e9:bb:b0:86:9f:
                    5c:ed:b5:55:84:e6:6f:63:e5:af:bb:50:74:e8:58:
                    0d:79:0d:86:32:42:6c:f5:6d:15:37:2b:54:21:de:
                    1f:a1:4a:e5:74:fb:a4:e2:70:c7:9a:6d:02:41:1e:
                    36:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:73:A6:13:DD:D6:49:D3:FE:4A:A2:B9:05:E5:00:16:00:41:AC:96
            X509v3 Authority Key Identifier:
                keyid:B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ce:dc:54:a8:20:81:32:ce:51:e7:7c:18:f5:8e:10:97:d9:
         0f:6f:59:2f:ea:31:8e:fd:59:2f:17:f5:dc:62:44:e3:f0:9f:
         dd:2d:1c:f3:72:68:47:4b:45:81:42:8d:17:a3:07:76:39:60:
         89:90:e6:1a:58:ad:02:da:d5:ff:cc:04:7b:34:41:d5:9a:f3:
         55:5f:29:00:30:5f:67:da:36:d1:5a:8f:65:dc:a0:d5:ea:ce:
         fc:e2:0d:93:cd:e7:04:50:4f:f0:c6:8e:b4:35:28:7c:63:3f:
         98:63:b7:0c:a3:ca:7b:47:69:f7:b8:cf:05:b2:1a:63:7e:89:
         3d:58:47:13:52:f5:3d:c9:c2:ec:7b:43:fd:18:1d:96:43:2f:
         bd:d0:35:e1:79:0e:ef:9e:97:2f:0a:bb:fb:9f:d5:7b:8a:0f:
         e5:6b:3b:cc:e1:a2:db:d7:7e:ed:51:7b:72:1b:43:c5:aa:19:
         06:cc:13:ca:7e:64:2a:ed:9f:4c:f6:7e:0f:b4:f2:39:52:31:
         ab:f3:42:52:57:c7:d6:7a:d1:da:9f:a6:ab:a0:85:69:0d:b2:
         05:5d:64:e5:04:73:ce:9e:2d:fa:cc:70:62:6c:0b:2a:a9:01:
         ec:f9:3e:a5:cb:9c:44:9e:5b:4f:6f:27:00:14:71:ec:72:72:
         e0:7a:08:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:31 2025 by rpki-client on console-fra.rpki-client.org