Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
File:                     FAd8W3ds23z3vDXWtELjZ3arDG4.mft (raw, json)
Hash identifier:          HIJ/iGCKE+zKAcg2LSVXhXG2g0vC3z6YvGcTJZzFE5c=
Subject key identifier:   C0:A0:BB:B1:4C:0F:8B:17:21:6A:17:EF:02:86:79:AF:4C:2F:57:96
Authority key identifier: 14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
Certificate issuer:       /CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Certificate serial:       018F4B6B5F45789DA381A8666BE2619E143B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
Manifest number:          1156
Signing time:             Mon 06 May 2024 01:01:18 +0000
Manifest this update:     Mon 06 May 2024 01:01:18 +0000
Manifest next update:     Tue 07 May 2024 01:01:18 +0000
Files and hashes:         1: FAd8W3ds23z3vDXWtELjZ3arDG4.crl (hash: uN2L7mFbL2dkYReLavFw7zh5B3NqF3xTUzzBXQGa1S4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:5f:45:78:9d:a3:81:a8:66:6b:e2:61:9e:14:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
        Validity
            Not Before: May  6 01:01:18 2024 GMT
            Not After : May  7 01:01:18 2024 GMT
        Subject: CN=c0a0bbb14c0f8b17216a17ef028679af4c2f5796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cd:b2:a3:f0:db:18:97:54:b2:ec:e9:13:ad:
                    8a:72:1f:c7:fb:b0:4a:50:1d:a7:2a:ca:28:64:88:
                    3e:be:16:52:f6:ce:4b:33:6b:2e:ee:e8:69:7f:5f:
                    7c:e6:a9:f3:d7:59:8c:ad:36:65:2c:e5:31:1c:89:
                    87:b9:1d:c2:01:ba:2e:2d:3a:97:ae:69:27:86:e9:
                    8d:0a:4a:17:52:41:25:07:b2:bc:19:02:dc:11:90:
                    55:09:2a:9c:b0:37:81:f8:d0:41:cf:f4:a2:34:98:
                    fd:97:64:87:93:b1:59:9a:ac:6e:95:7d:fc:47:3d:
                    33:50:b7:e0:5f:52:9d:84:4c:09:c4:49:82:f9:97:
                    6c:2f:ff:37:4b:90:b1:bd:dc:90:1b:62:34:de:3a:
                    a4:96:5a:27:c0:13:d1:11:2f:a2:95:14:0e:ac:f5:
                    18:9e:18:32:f1:94:c6:8e:e4:11:b3:0a:5d:44:44:
                    5c:72:76:51:db:fc:b6:88:8c:6b:e7:a3:76:af:f2:
                    cf:50:06:a3:bf:bd:bb:07:2d:f9:0e:08:9c:5d:da:
                    e9:5e:81:c8:9d:d3:df:77:44:f8:60:47:58:8d:2b:
                    5d:d3:05:a0:3d:97:8f:c0:92:f1:4b:5a:4a:68:b5:
                    ac:6f:e2:81:26:f2:8c:19:dd:ee:6b:93:f4:99:f0:
                    1d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A0:BB:B1:4C:0F:8B:17:21:6A:17:EF:02:86:79:AF:4C:2F:57:96
            X509v3 Authority Key Identifier:
                keyid:14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:96:ee:a2:08:1f:77:b5:fa:8f:cf:ef:59:a6:62:7f:14:
         76:02:1a:12:18:b0:8f:25:e1:b0:7f:96:6c:d9:fa:10:78:88:
         0a:fd:48:ff:20:80:12:4a:d9:00:67:01:73:c2:0a:a1:d2:d3:
         cf:ce:e1:26:05:9c:1a:e3:c9:ee:6c:bb:77:89:71:55:4f:0c:
         a4:c4:d5:bb:fa:6a:d0:02:22:51:d4:18:e5:c3:16:ad:f4:a6:
         51:1c:f2:5b:b6:85:f5:a8:bb:f9:55:ee:92:17:66:77:fc:c5:
         36:16:d6:04:5b:57:a5:eb:2a:05:37:58:89:43:04:11:c1:c5:
         8a:9b:eb:a4:44:15:b2:06:46:52:d3:06:ab:82:bd:df:e7:b4:
         82:20:d8:db:17:c0:9c:37:ed:23:eb:24:96:99:08:04:ec:d8:
         07:81:51:fc:b1:bc:13:bd:f3:a4:a0:be:12:05:a7:ac:30:e7:
         fc:16:03:d2:4d:0c:c2:ee:c0:dd:aa:09:5a:ce:00:34:8e:bf:
         68:31:df:d6:06:84:4e:29:73:12:8b:96:70:be:a7:4c:8b:7d:
         d5:50:e0:ab:22:6f:5e:c0:31:47:d1:f5:4a:b8:c8:ef:19:b7:
         6b:cc:de:9b:1b:80:cd:12:00:20:31:2d:8c:fe:dc:a7:4c:fd:
         39:9b:ce:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:13:58 2024 by rpki-client on console-ams.rpki-client.org