Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File:                     R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier:          /SG3YfYoqMXHhiJ2KrVcnrGVQCMp5gKBB9b3KtWrXHo=
Subject key identifier:   37:D2:56:4C:8D:F9:87:E4:81:C6:01:33:0F:41:13:3A:D8:CE:7A:DB
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer:       /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial:       01903A3E481C2D07510F2D84F9E1B696BD15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number:          0171
Signing time:             Fri 21 Jun 2024 10:01:18 +0000
Manifest this update:     Fri 21 Jun 2024 10:01:18 +0000
Manifest next update:     Sat 22 Jun 2024 10:01:18 +0000
Files and hashes:         1: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: FVV8bzi/TnTsrEbZXH5Jox90cTGfbKAFdRIdzIpk37I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:3e:48:1c:2d:07:51:0f:2d:84:f9:e1:b6:96:bd:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
        Validity
            Not Before: Jun 21 10:01:18 2024 GMT
            Not After : Jun 22 10:01:18 2024 GMT
        Subject: CN=37d2564c8df987e481c601330f41133ad8ce7adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:20:a8:0c:79:8e:1e:84:1e:b2:fc:07:32:
                    3a:5d:5c:42:9a:e9:47:98:c8:ce:88:3f:6e:7b:d1:
                    43:c3:b9:28:dd:ec:59:a9:9c:97:bf:11:54:16:de:
                    56:8d:95:ad:1a:9f:6c:dc:f8:e4:c9:7a:d2:fb:b6:
                    19:43:94:76:c6:2a:a4:75:e9:95:7f:f4:05:41:44:
                    f8:a7:16:8c:4a:cd:f3:d9:f6:cb:fb:29:e8:07:e5:
                    68:72:e0:34:68:8b:86:e5:35:57:d6:62:3b:83:2b:
                    58:32:de:a4:8b:ef:8f:2c:26:83:30:1a:3e:e8:64:
                    1c:c6:83:0f:d1:07:df:cc:1a:66:dc:72:b4:9f:23:
                    31:ca:d7:b1:7e:8e:ec:9a:91:fc:ee:28:67:8b:48:
                    11:b9:44:bf:d7:a2:78:90:b8:e7:2a:14:c9:0a:5e:
                    db:cc:63:86:27:9f:a3:89:fa:d4:4d:12:09:4b:f4:
                    91:9a:1f:78:1b:97:be:75:34:b6:12:19:b7:b1:72:
                    10:dd:4a:c5:f6:62:8c:1d:7c:25:08:e6:7c:29:ac:
                    27:d3:01:8d:02:6d:08:4c:03:a3:04:b2:4a:a5:3c:
                    c3:d0:f1:99:c2:da:aa:ab:35:4e:b2:df:0b:64:99:
                    9f:f6:2b:19:c1:ed:0b:1f:ee:34:17:93:52:b7:f3:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D2:56:4C:8D:F9:87:E4:81:C6:01:33:0F:41:13:3A:D8:CE:7A:DB
            X509v3 Authority Key Identifier:
                keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:84:d2:91:ed:37:6d:77:73:2d:3a:a1:84:db:89:6a:65:2c:
         fe:98:3b:9f:1e:47:f4:18:58:c7:3e:64:ad:98:13:2f:b1:89:
         0e:54:4d:17:52:3e:b2:30:0e:f6:1d:60:e9:e0:06:b4:91:e2:
         6a:22:95:bc:bc:15:1c:86:74:7c:c1:9f:fc:65:7d:bd:c4:7e:
         4a:09:90:50:28:59:cc:9b:3a:e9:76:85:aa:fe:db:f7:af:08:
         e9:de:06:0f:9d:e3:03:27:58:38:62:6f:83:2c:cd:f2:32:52:
         cd:c2:50:0a:4d:e6:99:0f:e3:69:e6:8f:85:42:6d:40:e5:4a:
         fc:54:ee:e7:1d:bd:4b:17:1f:96:60:26:7c:79:76:58:8f:f7:
         11:cc:a1:18:6d:cc:cd:64:62:46:c8:0f:d0:09:0d:a5:6e:23:
         c9:88:6a:a3:8d:42:50:8e:8d:c2:04:cf:c3:94:f3:68:78:0e:
         c6:85:42:b2:6a:f6:aa:5a:a0:38:58:fd:44:73:09:7b:ab:38:
         d6:12:1a:b9:77:6e:97:c7:60:71:75:5d:51:85:de:2c:2c:dc:
         a2:16:ff:ce:b8:96:0c:f7:55:0b:14:f1:8f:5e:96:99:1f:0a:
         af:92:28:5d:39:d3:ac:3e:de:f9:46:3c:7e:92:d5:a9:28:11:
         e7:93:10:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:53:26 2024 by rpki-client on console-ams.rpki-client.org