Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
File:                     xRg7G2FacNeXwnfPyEC5CjLZaWw.mft (raw, json)
Hash identifier:          TgeoUxMJLUKtGyzp5xzng92HdilCozXumBycNBTNMHs=
Subject key identifier:   AA:A6:DD:68:90:F1:8F:B9:AD:8B:2E:F3:9A:9A:D6:96:69:D7:D6:11
Authority key identifier: C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
Certificate issuer:       /CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Certificate serial:       01903519DA3ADDFBF9EAF1AD3890BD20E0D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
Manifest number:          08F5
Signing time:             Thu 20 Jun 2024 10:03:24 +0000
Manifest this update:     Thu 20 Jun 2024 10:03:24 +0000
Manifest next update:     Fri 21 Jun 2024 10:03:24 +0000
Files and hashes:         1: xRg7G2FacNeXwnfPyEC5CjLZaWw.crl (hash: 6fa/Fw0mlguttDXqijps3lC21ZDMeB+PEJhK1EnBCoI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:19:da:3a:dd:fb:f9:ea:f1:ad:38:90:bd:20:e0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5183b1b615a70d797c277cfc840b90a32d9696c
        Validity
            Not Before: Jun 20 10:03:24 2024 GMT
            Not After : Jun 21 10:03:24 2024 GMT
        Subject: CN=aaa6dd6890f18fb9ad8b2ef39a9ad69669d7d611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:ad:03:60:9b:78:af:f9:37:fd:4c:88:28:
                    60:fc:fe:8d:b9:db:ac:7d:20:89:aa:28:1a:ad:e2:
                    17:76:5a:3c:2d:80:9b:31:9c:ba:20:d5:59:38:0a:
                    36:82:0a:46:bf:65:28:ab:4f:ee:23:2c:65:99:1e:
                    2e:c9:4a:b6:9a:3b:a4:21:1f:5c:69:6b:df:1d:0c:
                    e1:fd:8b:cc:6f:3d:4e:8a:03:24:bd:83:14:b4:ce:
                    68:98:3f:fa:9a:4f:a0:60:16:97:ce:1b:b9:a8:9f:
                    c8:56:62:9d:b4:0c:fa:25:c0:c5:41:89:58:f9:40:
                    bd:70:1c:57:5f:4c:96:cd:9e:80:85:0e:27:d3:40:
                    5e:d3:3c:b5:b4:1f:48:71:52:0b:31:0f:0d:19:ee:
                    d8:ae:7c:72:8a:89:65:07:47:ed:86:2b:df:39:f5:
                    98:53:30:16:8a:00:42:05:d4:95:27:08:84:54:78:
                    51:43:c0:14:f2:63:7c:2e:96:4f:3b:2d:eb:f6:91:
                    28:89:64:05:e0:d1:e0:ed:95:a3:bc:fd:3b:11:89:
                    b4:f2:b9:86:09:9a:e8:66:d7:9e:62:e8:bd:c1:93:
                    79:be:24:e1:b0:58:55:62:52:91:2b:75:d4:a7:bc:
                    c3:a1:f3:5c:02:f5:14:f2:76:31:12:05:35:7f:d8:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:DD:68:90:F1:8F:B9:AD:8B:2E:F3:9A:9A:D6:96:69:D7:D6:11
            X509v3 Authority Key Identifier:
                keyid:C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7e:b1:d0:7d:0b:ce:b5:7b:82:7f:4c:85:52:6a:ca:3b:29:
         7f:cc:8c:20:59:6b:f7:ca:0d:d3:e8:2b:82:f8:78:25:3e:df:
         c9:24:98:c5:81:9b:84:2f:35:89:ff:08:0f:60:37:6f:98:83:
         73:16:e8:e9:a5:f9:3e:c0:45:10:2a:c6:70:7b:37:cb:7b:3b:
         9d:ad:47:9c:f3:7f:7d:fd:e1:59:1e:90:9d:ac:1b:da:85:09:
         b4:7d:6f:6a:1d:a9:9c:ca:24:0d:91:f0:83:e7:1f:a1:a4:21:
         91:3e:38:fa:92:37:fb:9d:9d:ac:b0:b5:5f:00:75:ea:d2:82:
         33:86:11:55:c1:f7:1a:45:a4:8f:48:92:e1:c6:02:01:8a:b9:
         56:c7:7b:f5:ff:5b:57:c7:ab:53:c9:85:86:46:d0:c6:86:91:
         5d:74:5f:90:cb:41:06:df:7e:de:5a:b7:1b:85:cc:f6:69:9b:
         ad:8a:56:a1:ce:40:74:73:df:25:e7:5d:15:09:6f:b0:e5:c8:
         30:a4:83:aa:c2:91:c4:71:ff:ac:3a:7e:b6:48:e3:28:29:54:
         8e:a9:e2:53:09:56:31:a2:36:0b:ba:93:d1:46:71:54:d9:de:
         32:e0:b3:26:3f:15:64:13:52:69:ac:a6:ac:8e:a3:83:f5:94:
         8b:2e:23:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:17:26 2024 by rpki-client on console-fra.rpki-client.org