Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File:                     XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier:          eTouv3QF6guzHPZEK10p7fM5DHn4MJA6VDDsjmytmok=
Subject key identifier:   D8:FE:6E:42:D8:60:C7:90:4F:97:99:75:5E:54:0F:86:D1:8B:E1:53
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer:       /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial:       019040B02C18AC1ED8474CB0C52B263C926B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number:          1167
Signing time:             Sat 22 Jun 2024 16:03:25 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:25 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:25 +0000
Files and hashes:         1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: kBsm+jp7KPFeHemA9V1pHQTm6vvGeIUj2RAinf4MCcg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:2c:18:ac:1e:d8:47:4c:b0:c5:2b:26:3c:92:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
        Validity
            Not Before: Jun 22 16:03:25 2024 GMT
            Not After : Jun 23 16:03:25 2024 GMT
        Subject: CN=d8fe6e42d860c7904f9799755e540f86d18be153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:df:b1:c7:46:fc:dc:63:c3:c0:84:5b:f6:
                    49:b6:ff:ca:55:78:af:ab:3e:4f:90:6d:c3:26:ac:
                    e5:eb:1a:a9:64:09:2f:74:07:a1:61:95:89:0f:1d:
                    c4:32:6e:35:b8:dc:a5:be:a7:22:d9:b6:6f:63:ab:
                    a0:9d:da:72:dd:dd:11:74:2d:06:ea:70:78:01:d1:
                    4a:5c:77:dd:01:de:14:c7:65:f8:c0:c5:d6:99:6f:
                    cc:ff:f5:57:bc:40:93:78:1e:5f:12:b2:7e:3d:76:
                    b9:e7:f1:88:5f:a2:a0:d0:6c:73:7a:95:f0:7c:f3:
                    e8:9a:cf:c6:3a:9d:0f:28:df:58:da:f5:9f:39:e4:
                    4d:cb:65:32:7d:f5:bb:b6:bc:af:e6:de:97:b6:9e:
                    48:5b:55:cd:dc:a5:44:83:bf:d3:cc:89:35:d2:d4:
                    8a:a8:90:c4:7a:5b:8c:8c:b7:0e:28:82:0f:2a:3c:
                    98:7d:6d:ed:58:b1:d9:82:27:68:f4:38:96:3a:6a:
                    13:1c:82:d2:70:d6:87:a0:0a:60:5c:6c:8a:d5:4a:
                    30:2e:06:13:cf:98:2e:0f:57:d4:00:13:e1:a2:79:
                    29:4f:93:45:4f:05:70:71:32:c9:42:ad:79:ce:a7:
                    76:ad:16:c9:03:2b:16:8f:af:63:ed:07:3b:aa:a8:
                    3d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FE:6E:42:D8:60:C7:90:4F:97:99:75:5E:54:0F:86:D1:8B:E1:53
            X509v3 Authority Key Identifier:
                keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:71:f6:b4:93:4e:dd:59:dd:39:48:86:b6:7a:9d:92:0c:9d:
         ee:d2:0c:6a:5a:f9:de:eb:3f:84:d1:84:bf:53:e7:75:35:17:
         ca:df:76:b1:75:a7:75:ea:94:31:ca:76:db:a2:16:6b:58:7e:
         01:4c:b0:22:d5:76:64:71:46:3a:da:78:ac:34:3b:1d:72:0a:
         c4:f4:c0:41:a3:a2:09:13:5a:10:4f:87:d7:6b:80:8a:22:dc:
         50:c3:0a:29:dd:0b:6c:01:13:11:c3:e8:c6:2a:0e:38:47:ba:
         12:ac:92:90:ee:98:07:6b:78:7b:46:ef:01:da:ad:2a:c1:21:
         49:d0:40:7d:c7:d3:83:d6:0d:11:8a:7b:b9:48:2c:ac:eb:03:
         e5:f0:3c:f0:11:cc:64:f5:12:14:39:34:79:f3:f1:e6:8e:ff:
         d9:79:69:b7:da:f3:48:27:ff:2c:e5:3f:fe:7f:11:bf:93:de:
         46:22:38:d7:3f:af:42:b3:03:2d:b2:56:b8:04:f3:5a:bf:ab:
         30:77:5c:c8:68:f8:57:a1:b3:20:fd:57:23:00:6e:ac:60:b7:
         42:b6:c0:a4:5e:50:c6:44:e3:62:e8:ef:71:4e:97:bd:c5:27:
         da:ba:5a:b7:a9:75:9f:71:75:61:51:64:42:30:28:aa:6f:43:
         a8:94:4d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:37:04 2024 by rpki-client on console-ams.rpki-client.org