Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
File:                     JKtnE2v5kKqL6IV6aNLDmezWKZo.mft (raw, json)
Hash identifier:          ygkWh/Wm4FDl9uBA58Xz50NN9MCOsuXYfKEsajnnRWw=
Subject key identifier:   77:64:2B:1B:29:69:BC:82:25:19:B4:6C:2E:DB:B1:B7:96:65:3F:50
Authority key identifier: 24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
Certificate issuer:       /CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Certificate serial:       018F87B67B5A80BDA3FCD2EA6CBEAA99A2EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
Manifest number:          1107
Signing time:             Fri 17 May 2024 18:00:34 +0000
Manifest this update:     Fri 17 May 2024 18:00:34 +0000
Manifest next update:     Sat 18 May 2024 18:00:34 +0000
Files and hashes:         1: JKtnE2v5kKqL6IV6aNLDmezWKZo.crl (hash: fVn0kF1JpAdYwTnYa7msTqxak2CAOOElDylOkFcREHI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7b:5a:80:bd:a3:fc:d2:ea:6c:be:aa:99:a2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
        Validity
            Not Before: May 17 18:00:34 2024 GMT
            Not After : May 18 18:00:34 2024 GMT
        Subject: CN=77642b1b2969bc822519b46c2edbb1b796653f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:ec:c4:0c:f4:97:8f:12:08:47:24:1f:8d:
                    78:41:04:81:9c:49:fc:13:9f:c3:59:61:42:a2:13:
                    73:65:c8:f2:76:7f:d0:e9:61:62:ff:d8:35:a6:7a:
                    a6:04:fd:fe:a1:37:9f:a6:24:16:f6:41:5d:15:e5:
                    95:26:79:86:4f:5f:0e:64:ff:7b:e5:16:21:10:37:
                    13:f6:8a:86:92:c2:e0:aa:b6:f5:cd:fa:3f:55:4c:
                    aa:a7:36:89:a5:34:05:a1:81:21:15:9b:26:a9:cc:
                    71:b2:cc:a5:24:f5:c8:45:a8:40:35:87:c3:f7:c5:
                    1e:b4:3a:c8:53:2c:d4:4d:9e:62:5e:c8:47:3b:51:
                    fa:45:64:2f:45:05:f8:57:b2:4a:2c:6b:98:d2:fe:
                    06:a1:76:4c:9f:51:7e:49:ce:2e:de:17:a4:41:ce:
                    6f:ff:8f:93:70:09:de:e9:fd:bb:59:ac:df:3c:10:
                    8a:8c:ce:67:b0:96:c8:50:6a:0e:64:3a:26:6b:90:
                    b1:84:a7:84:a8:e7:68:9a:25:70:31:da:00:dd:d8:
                    89:54:05:38:be:e5:4c:1a:e0:c0:24:e6:60:99:cd:
                    a3:10:27:f8:52:cb:39:19:9c:30:1f:f8:e9:ee:38:
                    ff:de:b3:0b:1b:e5:23:8e:4c:80:b8:b5:e1:32:66:
                    92:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:64:2B:1B:29:69:BC:82:25:19:B4:6C:2E:DB:B1:B7:96:65:3F:50
            X509v3 Authority Key Identifier:
                keyid:24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ed:6c:0a:30:fa:cb:1e:6e:85:9d:61:c7:c7:16:fd:e0:42:
         fc:f7:c8:e9:29:59:13:1a:14:23:37:61:77:31:b5:cf:8e:3a:
         9b:c7:cf:56:fa:d0:ea:47:f6:55:ce:96:3b:7c:30:fc:6c:8f:
         10:96:8b:56:ad:86:b9:93:ea:32:e0:44:10:ea:32:74:e9:ba:
         26:ab:4e:00:35:c6:38:6e:31:78:25:4a:f3:b0:8a:b7:b8:b3:
         55:91:7a:39:23:3a:a8:ed:eb:82:74:dc:ff:3c:4f:0c:8d:c9:
         47:7f:3f:21:33:f7:a4:52:a5:68:b0:5e:16:ae:88:85:77:1b:
         79:5c:41:8e:29:56:27:68:0a:15:56:db:0c:be:15:27:98:76:
         7b:02:96:ea:0e:00:32:d6:75:15:7f:5c:0c:4d:2f:c1:01:1b:
         2e:04:01:cb:a9:41:91:4d:0a:7f:4c:14:24:fb:bc:3c:09:59:
         9e:2d:58:90:b0:78:d7:8c:11:d5:bf:a2:ed:91:df:40:1a:ad:
         a5:f5:ff:d0:df:b8:58:c2:ea:1a:b2:85:43:d9:a8:62:f8:90:
         5e:bc:03:5d:c8:d4:84:92:1b:83:a4:eb:17:c9:53:9f:72:47:
         b9:d2:28:e5:ec:e2:d3:48:c0:45:89:d7:36:7f:c7:4d:27:d6:
         97:7b:72:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:40:47 2024 by rpki-client on console-fra.rpki-client.org