Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
File:                     y968bG1L0_xlGov0ILHtIs7pMq4.mft (raw, json)
Hash identifier:          eEnAHcPS8VnmjjIgBik3uYpoX1p7hPRV5VK7fa8fia4=
Subject key identifier:   AB:70:A5:1D:C1:91:02:6F:1C:FF:18:D4:B2:91:5D:50:EC:0B:F1:6D
Authority key identifier: CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
Certificate issuer:       /CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Certificate serial:       018F87488161DB87121FBA232DDC7DEAF912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:26 +0000
Manifest this update:     Fri 17 May 2024 16:00:26 +0000
Manifest next update:     Sat 18 May 2024 16:00:26 +0000
Files and hashes:         1: y968bG1L0_xlGov0ILHtIs7pMq4.crl (hash: LpxBLuTv3yS2Y/Esmrj2i56n1EvdIxZ0GEN+H9e92nc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:81:61:db:87:12:1f:ba:23:2d:dc:7d:ea:f9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
        Validity
            Not Before: May 17 16:00:26 2024 GMT
            Not After : May 18 16:00:26 2024 GMT
        Subject: CN=ab70a51dc191026f1cff18d4b2915d50ec0bf16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:ae:11:1c:96:b3:3f:f4:63:6a:7f:3d:ae:
                    1a:d9:28:5a:1b:99:09:ca:8b:17:fa:14:c7:f5:47:
                    84:61:1d:7a:3e:8e:d7:9b:21:44:25:69:cf:6d:6a:
                    0f:8a:d6:ba:82:ee:8d:5e:76:d5:09:24:ee:3a:e7:
                    47:94:36:d3:2d:ef:9d:22:53:35:e1:8a:02:3a:9a:
                    42:d0:c1:02:b5:ae:4c:55:6c:a9:a2:f0:ae:ae:ab:
                    42:ce:6d:9d:98:2b:37:02:af:32:ca:0f:1c:f5:4c:
                    00:73:2c:39:27:87:34:3d:b0:7f:fd:38:f3:ba:36:
                    44:be:1c:72:3e:b5:d5:4d:d0:87:20:dc:bd:f3:e1:
                    db:5a:4b:d4:7e:8a:84:47:ab:a5:54:32:aa:c4:f1:
                    8f:8c:58:6d:ee:bf:9d:83:8a:3f:c7:59:f4:e3:28:
                    68:a9:c4:fb:c0:84:fe:13:91:bd:f3:86:b4:07:25:
                    ed:a9:5e:c3:cd:37:62:e9:20:8b:f2:46:d1:b1:1a:
                    29:29:ec:39:b6:c7:3e:7c:97:f0:47:74:71:2c:3f:
                    40:d4:73:85:7c:e6:25:e3:8f:a3:75:b5:67:a7:89:
                    5c:dc:17:ef:61:ba:5e:62:20:04:90:39:ff:74:51:
                    2d:04:7b:2a:5a:09:61:23:a9:35:01:c9:8f:71:79:
                    e2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:70:A5:1D:C1:91:02:6F:1C:FF:18:D4:B2:91:5D:50:EC:0B:F1:6D
            X509v3 Authority Key Identifier:
                keyid:CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:be:f9:2f:c8:d7:8e:7b:51:fe:ba:d7:c9:96:67:e5:86:63:
         51:0b:01:9c:45:7b:13:6d:da:ac:42:3f:cf:21:5c:f1:85:0e:
         09:69:84:d2:3d:a9:1d:61:0a:97:57:7d:b2:7a:0c:49:a8:b5:
         65:df:9a:4b:36:c6:b5:2f:0e:26:bd:84:65:11:ed:af:01:a7:
         fd:3d:14:67:2d:93:0f:9d:81:9e:b7:75:f4:04:5f:f0:d5:67:
         e6:a7:80:86:fb:a5:a6:38:19:ce:6d:ba:a3:7c:0f:67:6f:f1:
         91:77:dd:ad:df:70:79:82:0f:1f:c3:e1:84:40:c5:a9:a6:6f:
         58:ae:f0:1d:2e:d7:b3:90:c8:b0:03:8c:43:77:1b:2a:32:82:
         61:de:22:42:3b:3b:33:cc:11:9e:1d:31:c8:8a:49:b9:ca:8b:
         7e:fc:a7:4c:e2:8e:33:4c:db:7f:53:ec:4e:f2:a0:74:b9:91:
         79:06:f5:f8:20:94:81:f3:f6:80:49:ec:70:d0:44:9c:4f:7f:
         a7:f1:1c:99:b5:dc:ba:46:26:5c:ac:3a:9f:e8:ce:1c:3c:51:
         c3:93:47:61:22:cb:5b:2c:61:66:3a:01:be:4c:31:03:db:c5:
         cf:92:49:1d:f1:db:59:63:5d:48:80:5b:84:73:4a:95:cb:e3:
         4b:1c:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:07 2024 by rpki-client on console-fra.rpki-client.org