Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File:                     639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier:          auEn2IAmG9CrHRo+T3uIu2RbhsN0FmVmGYGgnTnvx6A=
Subject key identifier:   62:1B:2D:33:43:A5:BE:4F:E9:4B:FE:AD:90:88:7D:B1:3B:D2:FC:0B
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer:       /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial:       018F4D597C9AA3F880F8284196D9828D544E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number:          1157
Signing time:             Mon 06 May 2024 10:01:01 +0000
Manifest this update:     Mon 06 May 2024 10:01:01 +0000
Manifest next update:     Tue 07 May 2024 10:01:01 +0000
Files and hashes:         1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: g9uVyE/6g3EHpghvwkU3cFIOsz7AhjvPcXIt3rs80P0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:59:7c:9a:a3:f8:80:f8:28:41:96:d9:82:8d:54:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
        Validity
            Not Before: May  6 10:01:01 2024 GMT
            Not After : May  7 10:01:01 2024 GMT
        Subject: CN=621b2d3343a5be4fe94bfead90887db13bd2fc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:d1:b8:13:96:34:cc:a8:49:8b:eb:52:ca:
                    92:57:e7:fc:55:4c:96:90:dc:ec:a9:89:15:80:e2:
                    b1:2d:7a:31:fd:63:f9:a2:bd:be:fb:bf:bb:e9:dc:
                    d9:86:a5:4a:a9:bb:d0:bf:3b:c4:91:b1:e4:37:5f:
                    fb:1a:51:56:17:86:b1:88:f9:6a:88:4d:c1:cf:53:
                    7c:f5:77:51:05:45:4b:f6:de:66:46:e7:4d:e8:29:
                    31:63:7d:83:54:0f:59:51:95:7a:05:b1:41:ff:f7:
                    cc:62:5f:30:92:06:34:88:3d:2c:be:3a:8a:f3:7a:
                    8f:17:1d:3e:ba:2d:32:d4:90:a4:c7:3a:9c:59:b8:
                    47:82:36:6c:00:45:b2:0b:1e:ca:56:bc:8c:0a:9f:
                    df:b1:92:12:47:22:10:eb:74:22:ef:74:14:97:db:
                    83:2f:2c:88:30:5c:5b:df:23:d5:4f:52:69:ce:3b:
                    70:f7:fa:dd:cf:18:13:0e:84:c7:62:d1:ac:e1:0e:
                    87:eb:eb:23:29:09:55:fa:e1:cd:fb:df:de:fe:84:
                    ca:b1:50:e9:87:78:10:27:64:6b:a1:97:f3:c6:cd:
                    f8:36:ca:5a:2f:4a:a2:70:c3:d9:78:f1:03:bb:91:
                    48:c5:43:b4:1d:e1:ae:e9:81:d8:b9:4f:3f:b5:0e:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1B:2D:33:43:A5:BE:4F:E9:4B:FE:AD:90:88:7D:B1:3B:D2:FC:0B
            X509v3 Authority Key Identifier:
                keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:47:02:74:6a:6b:5a:8b:3e:9f:28:36:c5:01:a9:95:6d:03:
         ee:c1:03:fa:6b:88:fb:76:85:af:bf:67:f4:fb:a2:9a:f2:b5:
         54:bd:fc:19:f8:29:b3:17:b3:74:86:5d:71:df:3c:6c:b1:98:
         f1:49:6b:21:79:98:76:f7:2b:87:07:86:3b:2a:2e:11:e3:68:
         d9:01:f9:82:47:e2:3f:ae:da:63:43:7a:00:9a:d1:0a:cc:da:
         95:c5:d5:1d:83:27:d0:80:53:a6:5d:5a:de:5f:d9:79:36:3c:
         13:ff:e5:7f:50:95:b0:82:49:8b:d2:3c:1e:f2:b8:5d:8c:c1:
         82:a3:f0:15:7f:31:1b:f3:46:90:ae:af:af:30:9b:8c:04:a8:
         1a:be:5d:39:49:9e:f8:64:f9:db:6a:f2:28:17:fb:d0:7d:08:
         1f:b0:3f:bc:6c:75:e5:c8:91:1f:42:ee:0f:17:51:a2:51:dd:
         cf:26:ba:a7:9a:e3:2f:3c:b5:21:ba:fc:c7:04:42:a5:64:df:
         74:35:4c:16:6d:2d:87:a3:a8:e5:a6:ea:ee:82:af:b2:2b:33:
         66:8d:3c:03:f5:a5:4a:3d:12:8a:cd:2b:e8:66:da:43:a0:ca:
         3d:7e:88:9f:fc:a0:19:d1:f5:f4:6e:68:01:2a:29:fc:48:55:
         39:67:7c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:48:34 2024 by rpki-client on console-ams.rpki-client.org