Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
File:                     rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft (raw, json)
Hash identifier:          /AOe9alvn0nsy3xeICwKwba19UXvrHlaikv0qpZHQp8=
Subject key identifier:   62:CE:A0:47:EE:53:02:CD:15:06:92:29:E4:19:3B:DE:FC:53:50:36
Authority key identifier: AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9
Certificate issuer:       /CN=aec5c7ab5b72181e4e4211322215e9776b4900f9
Certificate serial:       018F874841DCB331DF3D634CA8F00D8CCE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
Manifest number:          0675
Signing time:             Fri 17 May 2024 16:00:10 +0000
Manifest this update:     Fri 17 May 2024 16:00:10 +0000
Manifest next update:     Sat 18 May 2024 16:00:10 +0000
Files and hashes:         1: rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl (hash: CgJigLGzDf26rnhjq/9z67Kox+BHrDE2cB3nlBu8XsY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:41:dc:b3:31:df:3d:63:4c:a8:f0:0d:8c:ce:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec5c7ab5b72181e4e4211322215e9776b4900f9
        Validity
            Not Before: May 17 16:00:10 2024 GMT
            Not After : May 18 16:00:10 2024 GMT
        Subject: CN=62cea047ee5302cd15069229e4193bdefc535036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:c4:95:4a:3b:f3:9d:18:09:a4:77:a3:6a:
                    2e:bf:c9:06:47:3d:01:a4:e6:99:09:58:ff:c3:b3:
                    b6:7b:93:4a:f5:d6:84:91:b8:fe:11:d9:b3:ca:55:
                    92:9f:90:8b:97:ca:1a:7e:cd:e4:fe:63:2e:d9:22:
                    46:4f:14:3e:f1:15:78:e3:06:5d:fc:97:49:a2:61:
                    db:c9:2b:13:53:a7:be:a6:e4:75:7f:d9:b7:7a:9a:
                    fc:79:aa:5e:ce:ca:c3:84:68:a6:4b:0b:5f:bb:1c:
                    41:28:e3:f7:c9:67:02:95:c1:2b:b8:ac:ef:33:f5:
                    02:31:81:41:ae:d4:eb:12:f7:6a:4d:95:60:c7:71:
                    35:3c:4a:45:6c:49:60:49:d1:43:5e:77:58:c8:21:
                    ec:18:6b:40:14:fc:7f:33:68:94:7d:40:2a:a7:13:
                    e5:c2:6d:c5:1d:10:60:15:e2:74:69:55:20:3d:c9:
                    ae:1f:62:53:63:94:e2:33:59:69:bc:39:64:8f:5f:
                    10:bd:85:78:80:ae:bd:0f:f7:df:d3:e4:23:3f:4d:
                    02:ff:6f:44:cd:e2:de:c5:36:23:d3:c0:2c:ff:72:
                    13:32:51:48:d7:ad:1b:2e:8f:4d:e6:ab:30:23:c0:
                    ec:71:3d:9e:69:be:2e:3a:b3:03:51:9f:cb:f6:92:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CE:A0:47:EE:53:02:CD:15:06:92:29:E4:19:3B:DE:FC:53:50:36
            X509v3 Authority Key Identifier:
                keyid:AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:29:66:bf:59:fa:ae:22:ea:92:9f:09:57:75:59:dd:77:c9:
         b9:78:05:50:c0:37:b1:d4:76:fb:1d:fa:9d:b1:cd:f3:67:72:
         39:d0:36:0b:6f:ea:7f:b0:0c:fa:22:43:2a:16:80:0e:d7:6d:
         31:b2:02:77:9d:8b:f3:b4:ea:14:51:86:38:09:6d:56:4b:94:
         a6:be:08:37:51:52:5f:63:f8:41:41:4f:93:a6:5a:85:c3:e2:
         a0:a7:53:b2:7c:63:5e:93:f8:fd:1e:77:f4:cf:ba:73:13:25:
         9a:f2:b2:09:1f:06:3b:68:a9:96:79:f2:8d:bc:5a:6c:34:e4:
         4e:7c:f9:44:f4:68:82:50:01:3c:9a:39:c4:ed:26:6e:a9:0e:
         a6:5b:c9:bd:17:28:22:25:bc:fe:bd:8b:49:35:f8:e8:bf:51:
         4b:de:1e:89:b8:d0:d2:f4:62:ed:c3:76:96:77:b5:f1:71:9d:
         b5:1f:69:17:2b:2c:81:98:3c:0b:e8:68:fd:65:e3:97:bb:4f:
         d8:b7:f5:62:1b:9e:4d:7c:07:36:74:ca:a9:70:81:af:0f:d9:
         4f:c3:b8:be:20:e1:89:bc:69:e5:6c:e1:12:a3:b5:62:da:fe:
         45:08:e9:80:fc:5f:df:df:5f:9d:0f:01:a0:e4:6f:fe:83:5c:
         e8:b2:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:55:45 2024 by rpki-client on console-ams.rpki-client.org