Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
File:                     fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json)
Hash identifier:          p2o6xIDO+mRlaP+oefjT/bBtalxmfVrEDHaJEnHDU+c=
Subject key identifier:   6D:15:96:DA:16:6A:92:79:8A:34:B0:3F:0E:AB:9B:AB:76:D7:27:D9
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Certificate issuer:       /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial:       018F8891F7A27CE9D8554BB74C5A41337ABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
Manifest number:          0AA3
Signing time:             Fri 17 May 2024 22:00:18 +0000
Manifest this update:     Fri 17 May 2024 22:00:18 +0000
Manifest next update:     Sat 18 May 2024 22:00:18 +0000
Files and hashes:         1: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: cwcP1zFs4qQ2HGqKim4XjK3cG/q2MEvSwu3RSXi+/nA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:f7:a2:7c:e9:d8:55:4b:b7:4c:5a:41:33:7a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
        Validity
            Not Before: May 17 22:00:18 2024 GMT
            Not After : May 18 22:00:18 2024 GMT
        Subject: CN=6d1596da166a92798a34b03f0eab9bab76d727d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:85:00:82:18:9f:a7:18:06:17:1e:9f:bd:
                    ed:3a:89:0c:ea:03:a3:bf:a2:e8:01:10:c7:a9:f0:
                    2d:a6:28:90:2f:ec:6e:94:2e:b5:b7:a3:4f:6a:00:
                    26:a9:3f:72:0b:19:1e:7f:1f:31:3d:89:57:7a:20:
                    59:e3:29:e5:ef:d0:c1:cb:8e:66:a2:3e:68:a7:0d:
                    a7:2d:da:02:62:36:6e:44:f0:fd:5c:57:17:a0:6a:
                    40:81:19:e9:e3:73:ca:c8:e1:78:af:2f:cf:fd:2c:
                    3a:70:87:fb:7e:61:90:bc:c2:35:c5:95:c5:25:15:
                    f6:e0:9d:3c:a5:78:5a:6a:3f:a4:dc:5c:46:e0:d5:
                    5b:7d:03:b9:a5:a8:47:ce:1b:1a:fd:a0:2c:2f:a1:
                    8d:03:60:4a:59:f7:3f:4d:74:93:ff:ea:ae:5f:0a:
                    c0:98:99:61:ad:11:22:b0:2b:36:b9:87:6d:47:44:
                    e3:28:3a:ed:24:86:fe:ec:51:36:97:45:cd:bf:45:
                    27:1d:a0:51:44:a1:cf:57:26:94:d4:5b:25:43:81:
                    d9:71:57:f4:bc:f5:8f:88:39:49:9a:87:25:2d:62:
                    07:88:83:e9:f1:73:19:8f:54:fe:0f:22:ec:aa:e6:
                    83:b7:4d:24:62:50:aa:a2:28:2d:53:99:ec:16:ce:
                    e6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:15:96:DA:16:6A:92:79:8A:34:B0:3F:0E:AB:9B:AB:76:D7:27:D9
            X509v3 Authority Key Identifier:
                keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:e2:be:17:1f:23:7e:78:07:cb:2b:ff:3b:06:f4:b3:d2:
         a3:53:bf:cd:ad:e2:1e:b3:8c:17:92:41:45:47:2c:e0:e4:e4:
         4e:64:d7:67:35:58:86:2b:79:fe:5f:5d:95:52:8e:22:92:a5:
         35:54:8b:e2:04:4f:63:7e:ad:ff:2e:6c:f8:1e:d0:9f:87:a6:
         20:46:d7:2a:e4:06:51:58:33:9e:07:c3:9b:8d:3a:cd:05:f6:
         a6:0e:c7:c3:fb:a9:6e:7e:a3:22:cb:fb:42:df:5e:96:7f:ff:
         73:c3:96:64:48:7d:d3:10:37:bd:cf:54:18:be:6c:33:7d:38:
         d4:f5:21:e8:1c:82:1f:d4:20:06:9d:6e:eb:c3:84:1e:9a:58:
         2b:11:6a:89:5a:a9:9a:d0:9b:39:a6:ee:f1:51:50:ce:b3:87:
         a3:49:60:0f:fa:a0:57:a5:e5:cd:2a:9f:57:ce:f3:30:50:d9:
         cc:fe:62:3d:06:12:18:a6:e8:48:b8:06:64:a1:6d:d1:b2:cd:
         77:85:f1:57:c2:3d:42:a3:3f:f8:7f:4b:df:8a:c8:e1:aa:c6:
         e2:ef:ca:37:03:ae:5c:4f:01:20:6d:fd:ea:82:7b:0a:3e:06:
         76:49:3f:36:eb:e5:6d:ef:79:81:fd:31:62:7f:a1:93:1e:85:
         d7:67:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:02:44 2024 by rpki-client on console-ams.rpki-client.org