Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
File:                     fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json)
Hash identifier:          Iy38DdgTzspTl6nhrPC27AUTSmTFW9F1fdBJNx16pR8=
Subject key identifier:   19:52:B1:D5:FD:60:79:7A:B9:02:24:3F:A5:28:07:11:FB:53:15:0A
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Certificate issuer:       /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial:       018F86DA4FA45B703C836E2643AC6C68FCA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
Manifest number:          0BA2
Signing time:             Fri 17 May 2024 14:00:04 +0000
Manifest this update:     Fri 17 May 2024 14:00:04 +0000
Manifest next update:     Sat 18 May 2024 14:00:04 +0000
Files and hashes:         1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: V5Kgm+Ss94Jxe1O/3a/MFKLFJv3zBO00Sm+/FmseYM0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:4f:a4:5b:70:3c:83:6e:26:43:ac:6c:68:fc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
        Validity
            Not Before: May 17 14:00:04 2024 GMT
            Not After : May 18 14:00:04 2024 GMT
        Subject: CN=1952b1d5fd60797ab902243fa5280711fb53150a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:c6:4a:80:44:6c:0e:bc:86:16:38:9e:7b:
                    41:22:e7:c0:37:e2:22:f4:82:35:9a:a5:4a:54:59:
                    33:34:27:de:08:d5:b2:23:7b:13:e8:aa:f9:f5:9a:
                    26:a1:eb:78:7c:ff:9a:51:cc:46:3f:6e:d3:e0:b2:
                    ff:c4:67:45:e7:14:76:ac:14:87:57:f2:f1:0a:f4:
                    1c:85:7e:b4:b9:28:d1:4d:dd:b7:d0:e0:7d:64:45:
                    ac:ff:6c:07:8e:f1:da:67:a5:7f:19:c7:f6:b5:93:
                    ba:90:d2:45:4f:fe:85:a2:03:fe:69:58:38:f7:9f:
                    1d:de:87:bd:e0:c1:6f:b5:2c:7d:79:25:12:b0:d5:
                    3a:3c:21:3a:94:45:c5:5b:63:55:5c:98:bf:bf:0d:
                    b9:69:fc:01:b1:c1:ee:2b:c8:19:f0:89:c9:47:51:
                    f2:37:5c:d8:98:10:a8:b8:f8:76:1e:0a:01:7f:7b:
                    37:95:09:6c:bb:0f:97:69:cd:2c:12:18:16:19:97:
                    1f:c8:93:8d:ee:3c:e6:68:af:04:60:0d:a7:99:ad:
                    ac:60:d3:df:84:28:a5:7a:71:88:44:5d:b1:6f:b6:
                    33:27:fc:6a:e2:ed:f7:52:24:04:91:47:08:29:d5:
                    f2:51:ca:91:fc:f1:e5:b9:38:d9:6b:39:a1:8f:75:
                    a1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:52:B1:D5:FD:60:79:7A:B9:02:24:3F:A5:28:07:11:FB:53:15:0A
            X509v3 Authority Key Identifier:
                keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:69:fd:1e:76:1a:00:83:15:3d:11:1f:75:cf:04:04:a1:81:
         21:7f:ba:2b:53:b1:06:05:e4:df:6a:a9:94:dc:bf:68:94:98:
         d2:14:6e:ee:ae:9e:b1:46:12:ea:cd:47:25:2e:51:87:09:db:
         5d:57:95:a2:cd:bc:59:7f:9c:f4:ec:c2:33:ff:55:08:a3:16:
         1e:a7:e7:39:54:e0:00:d9:01:b4:14:29:ce:bc:2a:85:ee:4a:
         30:3f:76:7c:78:e5:f5:66:c4:7d:6c:07:d0:4e:74:0c:22:b4:
         e3:c3:b8:5d:2b:b9:f6:f4:3c:d4:d1:c1:c0:75:4e:33:cd:df:
         6e:2d:98:ad:da:f9:0d:95:23:dc:d0:15:d6:49:67:3c:73:b5:
         4d:85:3d:72:b3:67:ee:72:a8:db:2d:a8:cc:5e:7f:84:45:1b:
         88:9d:27:47:33:b2:ef:e6:4d:2c:07:ce:46:ca:28:6c:20:75:
         84:a6:dd:78:be:de:83:1e:84:e7:8c:73:91:6d:5e:21:02:63:
         93:00:63:2e:b9:97:fb:da:b9:f5:a5:98:49:88:0e:e7:71:06:
         12:fe:79:4d:3f:4e:c6:2e:d0:29:ac:5e:e5:f6:05:7b:25:86:
         35:bf:78:2e:ac:dc:22:f2:91:86:14:99:64:90:a1:d8:17:3f:
         47:6c:69:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:57:47 2024 by rpki-client on console-ams.rpki-client.org