Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
File:                     v9aef9UBKJF3mCF6xh-OgrH6FOs.mft (raw, json)
Hash identifier:          wUgDwPzXlcwnyiO5klFuffTxNrHiRFjGItZ0+Ljh/ZA=
Subject key identifier:   1C:85:04:FC:11:45:9B:82:CB:2F:FC:E2:AC:37:CE:5F:92:46:24:FF
Authority key identifier: BF:D6:9E:7F:D5:01:28:91:77:98:21:7A:C6:1F:8E:82:B1:FA:14:EB
Certificate issuer:       /CN=bfd69e7fd50128917798217ac61f8e82b1fa14eb
Certificate serial:       018F885B3530B8D72DB63AC3BCCB26658A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9aef9UBKJF3mCF6xh-OgrH6FOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
Manifest number:          FA
Signing time:             Fri 17 May 2024 21:00:29 +0000
Manifest this update:     Fri 17 May 2024 21:00:29 +0000
Manifest next update:     Sat 18 May 2024 21:00:29 +0000
Files and hashes:         1: v9aef9UBKJF3mCF6xh-OgrH6FOs.crl (hash: XgtgeXO9D2y9utQmUWnQ71ZYkf5+ETilVJiI5Oq52+o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9aef9UBKJF3mCF6xh-OgrH6FOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:35:30:b8:d7:2d:b6:3a:c3:bc:cb:26:65:8a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd69e7fd50128917798217ac61f8e82b1fa14eb
        Validity
            Not Before: May 17 21:00:29 2024 GMT
            Not After : May 18 21:00:29 2024 GMT
        Subject: CN=1c8504fc11459b82cb2ffce2ac37ce5f924624ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e4:20:73:22:79:c1:76:67:20:05:22:c9:15:
                    c3:06:db:72:66:77:3d:f9:f4:ea:02:39:d4:6f:02:
                    e6:03:8f:34:b4:9b:55:6b:90:55:cd:0a:ea:af:c6:
                    be:00:18:a0:14:9e:e8:7a:57:53:73:1c:69:5f:01:
                    36:de:7d:4e:ca:d2:68:79:d5:75:e9:66:bd:ea:59:
                    fe:66:01:f1:b9:6e:8b:f0:ed:92:d2:24:b7:72:f3:
                    86:ef:f1:91:04:f6:5e:2e:e0:0c:1a:c1:99:b1:97:
                    64:aa:47:45:a8:e3:16:ae:8c:82:2b:a0:70:2c:64:
                    da:f8:c3:b0:a9:3b:06:ca:e0:f3:79:22:48:f1:46:
                    6a:61:d9:ef:80:25:e3:b7:6b:fa:80:91:b0:4b:3b:
                    a1:7a:80:c5:36:b4:c0:aa:a1:15:bb:69:4c:58:a5:
                    f3:b8:82:08:f3:61:5c:85:e2:a1:e6:78:59:ac:33:
                    a4:cb:a3:26:9f:da:72:50:fc:80:17:f1:c6:0e:64:
                    60:61:15:75:ec:b8:6a:41:a6:4a:35:9a:a5:65:d6:
                    1f:4b:36:80:a1:f2:d5:49:bd:ee:73:d9:50:96:af:
                    e2:3e:8d:87:a0:8c:3b:95:89:e9:b1:83:18:fe:5d:
                    c0:c3:9f:bb:8d:58:a0:ae:85:6f:44:66:9e:32:14:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:85:04:FC:11:45:9B:82:CB:2F:FC:E2:AC:37:CE:5F:92:46:24:FF
            X509v3 Authority Key Identifier:
                keyid:BF:D6:9E:7F:D5:01:28:91:77:98:21:7A:C6:1F:8E:82:B1:FA:14:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9aef9UBKJF3mCF6xh-OgrH6FOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ac:65:32:63:14:f4:9d:f6:47:e1:7e:4e:b7:08:cd:03:10:
         c0:3f:f3:ab:44:69:12:55:41:3a:7d:fe:f4:03:f4:60:4c:9c:
         c1:c3:c7:32:c2:d2:38:f1:24:b2:7b:bc:ea:ca:04:9f:1e:52:
         fb:e2:c1:da:3d:89:8a:c8:d9:29:7a:91:de:5a:90:ab:dc:54:
         8b:df:35:cf:7d:27:5d:42:79:2b:b2:6a:16:81:98:ac:8b:60:
         76:d0:8c:13:07:0f:8e:5c:8f:c6:eb:8a:b7:29:90:a0:c5:55:
         2d:66:54:1c:a9:cf:42:56:8d:1e:51:0c:55:55:7e:e1:35:57:
         cb:ac:7b:1b:c8:e7:63:ae:8f:13:bf:3e:23:24:ea:c5:b0:64:
         a8:cc:41:c7:f7:14:3c:37:e5:d9:fa:f3:69:b5:de:c8:64:03:
         52:90:88:76:c3:50:98:16:41:8d:6f:90:f7:69:27:db:74:e1:
         03:6c:8c:26:bc:d0:22:23:31:74:c9:aa:b2:da:e4:1f:f6:5e:
         a9:31:52:f7:7c:df:c3:fe:0e:c7:21:23:5f:d5:92:7d:8b:fd:
         4c:44:2d:91:b7:1e:49:4f:e8:d9:de:da:3b:cb:50:b3:89:06:
         18:a0:a3:de:79:53:7c:72:ff:6a:96:80:93:e4:d9:9b:a7:a7:
         82:70:05:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:04:46 2024 by rpki-client on console-ams.rpki-client.org