Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b764c-66db-425a-a8ee-e6b51b65e8dd/1/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.mft
File:                     x7J3FsXQI9zkS6eLTpRQrQz6tBQ.mft (raw, json)
Hash identifier:          39+WtbsukqeGy03iUhadsSOksXPJ6U5puZM9pXSf8ew=
Subject key identifier:   2A:87:A6:44:CE:DB:A7:8A:08:8E:4E:A0:F8:C8:9E:57:27:15:FA:B4
Authority key identifier: C7:B2:77:16:C5:D0:23:DC:E4:4B:A7:8B:4E:94:50:AD:0C:FA:B4:14
Certificate issuer:       /CN=c7b27716c5d023dce44ba78b4e9450ad0cfab414
Certificate serial:       01901D0F60B7E305DF3AE87A394B8FE8A9EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4b764c-66db-425a-a8ee-e6b51b65e8dd/1/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.mft
Manifest number:          0147
Signing time:             Sat 15 Jun 2024 18:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:05 +0000
Files and hashes:         1: x7J3FsXQI9zkS6eLTpRQrQz6tBQ.crl (hash: esE0UdG9vR+RPv5DhQse6CPeJRILuyvFLSuND6yWocU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4b764c-66db-425a-a8ee-e6b51b65e8dd/1/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4b764c-66db-425a-a8ee-e6b51b65e8dd/1/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:60:b7:e3:05:df:3a:e8:7a:39:4b:8f:e8:a9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b27716c5d023dce44ba78b4e9450ad0cfab414
        Validity
            Not Before: Jun 15 18:01:05 2024 GMT
            Not After : Jun 16 18:01:05 2024 GMT
        Subject: CN=2a87a644cedba78a088e4ea0f8c89e572715fab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:05:28:f4:82:4c:02:86:70:75:e7:01:37:
                    c6:ac:01:e8:a2:8b:e2:f8:da:a8:f7:58:6e:f5:6f:
                    46:76:b4:54:17:ed:d9:44:52:18:79:8c:35:49:4e:
                    08:9b:cc:86:61:50:91:12:83:cd:0e:7f:9a:4c:9e:
                    a9:e8:cf:01:b0:64:64:f7:93:ac:2f:74:80:90:c3:
                    9d:a1:92:4b:77:af:a7:ae:2d:e6:b5:f4:46:21:53:
                    78:2e:5c:64:09:65:43:a3:6d:d4:6d:01:a4:91:0c:
                    b0:bf:df:f4:ba:63:8f:fa:91:a8:aa:ff:6b:c1:19:
                    b9:0a:87:58:de:cd:02:b1:b7:61:14:02:b0:10:4c:
                    0b:0d:4f:c3:ce:ec:4a:7b:2c:22:a3:e4:11:5f:95:
                    e6:39:a5:a0:6f:de:9c:5e:56:8a:0b:28:a1:1f:fe:
                    89:e8:5d:80:d6:9d:ee:5d:74:25:50:e1:94:ed:1a:
                    7c:f3:67:74:9d:3b:34:58:2f:83:72:b3:c5:d6:9d:
                    90:1b:32:b9:bd:66:90:31:b9:47:92:1b:fd:92:68:
                    25:5f:b3:62:d9:3d:61:63:11:f8:74:67:e5:71:74:
                    4f:3d:7a:ea:ee:15:03:eb:fa:08:4c:0c:0e:93:d1:
                    cb:6d:9f:97:d5:ff:33:e5:ec:bd:71:fa:9e:2c:94:
                    1c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:87:A6:44:CE:DB:A7:8A:08:8E:4E:A0:F8:C8:9E:57:27:15:FA:B4
            X509v3 Authority Key Identifier:
                keyid:C7:B2:77:16:C5:D0:23:DC:E4:4B:A7:8B:4E:94:50:AD:0C:FA:B4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b764c-66db-425a-a8ee-e6b51b65e8dd/1/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b764c-66db-425a-a8ee-e6b51b65e8dd/1/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:29:a5:8f:e3:89:f8:ca:12:54:83:0f:33:53:9e:46:5b:bd:
         70:30:5a:23:2c:75:ba:52:34:43:b1:44:f9:9b:f5:b3:86:b5:
         9c:03:05:44:9b:83:84:a1:10:0c:2d:67:41:2d:11:37:c3:fd:
         d9:00:c9:f8:6e:f0:e1:8e:bb:27:3a:9b:0f:3e:c2:4f:ba:7e:
         a5:df:8e:5b:91:8b:99:57:4e:7f:cf:5f:f5:de:cf:88:3b:70:
         84:a2:6e:05:5b:1f:14:38:3f:1f:97:20:70:a3:0a:80:1d:06:
         42:e5:3a:23:f7:86:9a:37:46:33:99:16:d9:7b:e2:9e:e3:cd:
         1f:a9:3b:79:0d:1b:89:72:4b:a9:ea:a2:04:91:18:57:6f:7c:
         74:db:99:53:06:c5:b8:ea:4e:23:3b:b5:d6:f7:21:38:1b:5b:
         c1:04:bc:06:35:46:97:d2:c0:22:49:33:8a:5b:8f:e3:5f:59:
         00:27:f7:10:ff:a8:a6:cf:16:9d:bf:d8:31:a9:f2:65:c7:0d:
         36:28:a5:fe:54:eb:84:3c:e7:40:78:0e:93:f3:18:12:be:e5:
         6f:15:0e:0a:6c:59:bc:06:12:e5:09:a0:ed:81:1a:87:b6:1e:
         6d:d0:1f:62:af:5a:57:1d:0e:70:c4:b3:87:13:74:c3:5b:9c:
         17:47:58:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:27:39 2024 by rpki-client on console-fra.rpki-client.org