Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File:                     s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier:          Jk7uXYWagaVi0+7SlVCFnGa1AcWHI5qiEqtqlpF/cLc=
Subject key identifier:   FF:55:56:41:E9:68:62:53:5F:12:CE:8F:A4:8A:B6:B0:E8:23:D7:11
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer:       /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial:       019040AF9C11C47E51B466F2F0B0984404B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number:          11D5
Signing time:             Sat 22 Jun 2024 16:02:48 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:48 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:48 +0000
Files and hashes:         1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: wHwWo8nKqEIRmqMR6qJDA4IDQabonJmosQ+XbdO7f3M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:9c:11:c4:7e:51:b4:66:f2:f0:b0:98:44:04:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
        Validity
            Not Before: Jun 22 16:02:48 2024 GMT
            Not After : Jun 23 16:02:48 2024 GMT
        Subject: CN=ff555641e96862535f12ce8fa48ab6b0e823d711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:55:42:94:49:9d:98:e4:3e:e2:94:e0:57:5d:
                    23:56:0f:2b:7d:69:5f:63:4e:c2:1c:10:5f:ee:7f:
                    e9:13:67:c6:b2:b0:e1:cb:0d:ca:04:5f:79:e2:77:
                    fc:05:14:c6:a7:63:3d:40:c6:9d:1f:80:bd:72:29:
                    51:74:ee:33:5c:54:58:78:84:91:a7:aa:5c:07:8a:
                    47:89:46:cd:fc:8f:dc:10:ab:c0:d3:eb:3d:ca:07:
                    38:db:4c:eb:98:9d:f3:51:27:e2:5b:6e:93:d4:d1:
                    81:30:fc:22:62:19:28:10:9e:0d:4b:2b:9c:8d:18:
                    9b:92:a8:3b:8d:1f:91:f9:5f:eb:39:84:14:ae:dd:
                    7d:ea:3f:a1:f2:13:c6:26:dd:6d:db:6d:94:b9:0a:
                    d5:3f:4f:87:e0:a9:6a:c5:8f:34:99:14:4e:cb:7c:
                    81:95:75:ce:17:4d:6d:bd:c0:8f:e7:73:75:11:43:
                    09:d2:d0:4d:d5:18:45:cb:e9:72:2b:50:76:15:99:
                    db:42:a4:5a:a9:5e:5c:9d:f5:6e:db:f4:1b:9f:e1:
                    bf:45:47:4f:5b:f9:71:0d:4a:bf:80:bf:14:fc:d9:
                    74:af:fc:c8:4e:95:e4:88:06:5a:26:7b:ff:c0:d9:
                    70:aa:75:b7:fe:6c:0c:7a:32:ca:36:09:58:a5:21:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:55:56:41:E9:68:62:53:5F:12:CE:8F:A4:8A:B6:B0:E8:23:D7:11
            X509v3 Authority Key Identifier:
                keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:12:17:20:b7:67:d6:20:d0:a2:e8:0f:2f:64:c2:1e:a3:
         30:2e:e1:4f:2d:2a:31:8d:72:81:46:41:25:a4:3d:48:7b:e4:
         e3:eb:27:a0:64:cc:09:8e:6b:7a:82:af:24:df:3f:90:38:8d:
         f7:e5:c3:6d:f3:1f:63:f0:1e:b7:99:f7:c4:11:04:76:fa:b7:
         4e:49:44:3d:6c:3f:5b:ae:db:e2:54:2d:10:e9:05:55:b8:c4:
         6a:32:f7:5a:89:b7:b1:d8:f5:9a:3c:ca:12:2c:97:91:1b:62:
         da:33:30:68:96:89:43:dd:ac:d0:e7:59:89:43:f1:e4:bd:fc:
         09:04:cd:34:97:a5:91:b1:68:cd:d5:38:4c:72:e4:02:9a:1c:
         ce:a0:5e:1c:67:2e:42:7e:df:9f:b9:e8:05:fb:c5:d7:19:41:
         e3:2d:30:d0:a9:59:58:c7:00:54:84:72:03:8b:8c:6f:cb:37:
         d3:0f:46:df:bf:9b:c4:fa:34:6f:f2:cc:f5:e3:43:c1:25:d3:
         70:1b:df:44:74:d5:82:3d:07:6d:2d:c1:90:9b:60:c8:5d:37:
         f0:1e:df:ca:ca:7e:40:5c:7c:4a:f0:5f:78:05:2f:ab:36:f0:
         cb:85:f5:48:0b:e7:6b:e4:eb:5b:e1:7f:1d:39:66:43:25:55:
         90:44:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:35 2024 by rpki-client on console-ams.rpki-client.org