Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File:                     l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier:          cwUme68JlaVz1dkyB5OYGGxAZqkIklvdmHRIngdvQW8=
Subject key identifier:   0D:FD:CE:7C:1F:83:7F:30:86:6D:F4:47:8E:5C:F1:4E:F1:03:FB:32
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer:       /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial:       018F874AD23A709D0C392A1E513D116BDAA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:58 +0000
Manifest this update:     Fri 17 May 2024 16:02:58 +0000
Manifest next update:     Sat 18 May 2024 16:02:58 +0000
Files and hashes:         1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: il9u88i4RzXkpNdG3LCWSQLJDDtlWSOsB6rf3Yv7UhM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d2:3a:70:9d:0c:39:2a:1e:51:3d:11:6b:da:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
        Validity
            Not Before: May 17 16:02:58 2024 GMT
            Not After : May 18 16:02:58 2024 GMT
        Subject: CN=0dfdce7c1f837f30866df4478e5cf14ef103fb32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:44:8c:80:cf:19:c6:b1:29:8c:94:e4:cc:
                    f7:40:17:72:4c:9c:8d:86:9c:1b:dc:01:07:22:bb:
                    d9:73:3c:41:da:34:c8:c2:4e:37:8c:37:bd:5b:35:
                    1b:f0:a2:d1:3b:7b:4c:1a:12:28:8b:41:59:5b:7b:
                    59:75:0f:70:04:50:54:fd:aa:3d:d3:66:25:49:98:
                    13:57:a9:31:3b:4b:59:0d:00:63:f7:88:4f:34:77:
                    22:34:61:54:ae:76:f6:b2:61:04:6a:e5:65:92:fb:
                    19:9b:7c:59:6c:8f:17:53:80:bb:cf:12:38:8a:44:
                    94:18:c9:dd:dd:0a:fa:c0:3e:4c:11:39:c5:84:ff:
                    a8:49:87:f0:93:5d:23:cd:f6:65:d0:51:2c:48:7a:
                    60:fd:ce:66:6c:d9:23:44:51:8b:03:91:c3:aa:f4:
                    51:19:c6:0e:91:3b:dc:25:e0:28:23:cf:10:46:80:
                    4b:ff:a3:c4:4e:ee:77:6a:12:70:d2:83:b1:48:6d:
                    00:be:29:38:01:e7:c5:6f:a3:0f:f6:27:7b:ec:9a:
                    cb:92:d0:12:76:bb:5e:19:8c:41:10:35:ff:32:22:
                    f8:5c:8e:d1:0e:ef:87:ba:60:df:ef:cf:7a:29:6d:
                    c3:fd:d7:a0:07:51:bc:76:fa:d9:96:87:d3:d1:c5:
                    f4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FD:CE:7C:1F:83:7F:30:86:6D:F4:47:8E:5C:F1:4E:F1:03:FB:32
            X509v3 Authority Key Identifier:
                keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:15:74:b9:fc:1a:c9:1a:ae:c3:cb:25:c3:8f:fb:1b:a2:7c:
         60:83:ee:7b:21:bb:e7:74:0d:4c:e8:c8:7d:52:30:49:f8:1f:
         35:29:37:55:42:26:45:36:c7:40:56:c6:a8:c6:20:6c:49:64:
         1d:10:11:4a:48:80:d0:00:dc:e3:4c:19:f3:52:af:5b:d7:c4:
         5f:b6:a7:34:d2:56:20:b1:58:52:51:bc:27:7a:72:98:01:6f:
         d9:81:96:c5:20:ae:51:d4:13:10:4a:da:e4:ca:aa:1c:f3:e7:
         d6:45:6e:16:f6:1f:10:a9:84:4a:d2:8d:24:21:0c:92:e0:39:
         72:c4:a4:65:ea:ed:59:a1:61:68:be:d4:a8:37:ff:1a:bd:d5:
         f9:a2:c3:d4:35:47:b7:70:94:7a:34:d7:85:08:86:22:34:4b:
         02:7b:b7:99:f2:3f:55:47:6c:a0:6c:f4:4b:6b:96:0f:89:70:
         99:20:99:7a:d1:c4:e9:65:be:ab:87:e9:99:b5:a2:29:67:6b:
         ce:a2:6c:cb:6c:1d:e3:20:66:30:26:d8:b4:42:a9:75:2b:3b:
         78:91:75:ec:35:46:8c:1b:72:7b:3b:d3:20:e2:eb:b4:ec:cd:
         d0:0a:80:9a:ee:bd:a5:e5:04:a1:da:3f:bb:3b:fd:e8:da:ef:
         e2:92:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:51:36 2024 by rpki-client on console-ams.rpki-client.org