Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File:                     xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier:          tpj1jaJdbik+c+p/+Qto3u23+8FGQWf8VCplQ0fqL4g=
Subject key identifier:   3D:F8:EE:E6:4A:2C:7B:14:AD:8C:FB:BC:94:BA:B9:D4:54:66:01:72
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer:       /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial:       018F8749B3E5482338B188B48F012CE5F151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number:          04EB
Signing time:             Fri 17 May 2024 16:01:45 +0000
Manifest this update:     Fri 17 May 2024 16:01:45 +0000
Manifest next update:     Sat 18 May 2024 16:01:45 +0000
Files and hashes:         1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: sxBRhwOWNVJZtpnveozER49NvMySkO7BHcX0el3iXtQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b3:e5:48:23:38:b1:88:b4:8f:01:2c:e5:f1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
        Validity
            Not Before: May 17 16:01:45 2024 GMT
            Not After : May 18 16:01:45 2024 GMT
        Subject: CN=3df8eee64a2c7b14ad8cfbbc94bab9d454660172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:d8:ca:89:ec:2b:93:ae:77:75:72:98:6d:
                    16:a8:a1:d7:c5:c9:5f:47:49:74:28:d5:33:8b:78:
                    df:af:91:75:93:9f:31:2a:bd:0f:74:5f:af:9c:7c:
                    b0:c6:f0:f4:00:00:8a:21:32:6d:09:fc:90:12:23:
                    2f:7a:66:8c:55:15:69:eb:18:aa:26:0a:28:48:97:
                    55:8f:b1:22:f3:cf:aa:d9:a6:9d:a5:13:3f:84:18:
                    6d:0a:97:19:47:a3:51:57:29:ff:01:50:6a:2c:fe:
                    9b:c7:d5:e5:e9:23:ff:3d:f1:8e:cf:f3:f7:73:ae:
                    44:98:aa:6c:13:53:46:2e:29:52:94:ae:11:46:ae:
                    f1:52:24:1e:4a:38:97:30:02:e9:43:13:c6:6f:20:
                    a0:6e:1f:91:c3:37:53:e9:dd:45:e1:81:fe:a0:3d:
                    53:d5:a1:56:5f:8b:4a:17:a8:85:79:f5:1b:10:29:
                    27:ec:cb:c9:2f:f0:6a:e2:19:99:9e:60:8d:28:35:
                    6c:9e:bd:a4:40:fb:b0:8f:31:4e:17:fa:39:56:61:
                    45:52:e1:0a:4e:e5:37:96:4a:41:4c:0f:fd:39:d1:
                    c7:fe:ec:b1:90:90:e4:bb:5a:88:2d:78:08:ee:43:
                    45:93:a8:d0:af:f7:56:85:75:45:36:6e:1b:7b:cf:
                    8f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F8:EE:E6:4A:2C:7B:14:AD:8C:FB:BC:94:BA:B9:D4:54:66:01:72
            X509v3 Authority Key Identifier:
                keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:05:5b:e4:a3:20:6c:ba:62:99:35:43:6c:73:c8:a5:d2:79:
         58:67:51:90:ba:6f:9f:21:e7:dc:8d:07:be:b8:7c:fa:66:07:
         1d:9e:59:f0:70:e1:93:17:9b:a9:42:92:17:09:45:e9:f1:13:
         39:5d:dd:79:51:13:1a:0b:37:c2:5a:22:a7:79:5f:ee:c3:b3:
         89:70:ff:da:0c:d4:c3:79:7e:be:33:13:aa:02:95:44:3a:40:
         58:08:c7:b3:d4:ea:96:43:87:fd:8c:d6:fd:99:a5:8d:e3:f9:
         a5:59:5e:8d:21:26:d3:d4:a7:ea:3c:19:e1:8e:80:4f:d6:76:
         75:5a:e1:bd:19:2c:ac:b2:62:fa:4d:31:fd:ff:fe:72:a2:c6:
         ab:4c:60:6d:8b:74:ba:89:c8:44:f0:7e:b9:ca:d6:c1:18:4c:
         d5:be:d1:39:29:9c:91:50:10:d1:25:52:23:b6:a5:56:a6:81:
         90:eb:54:e9:85:04:0d:7f:80:43:d7:d4:6a:58:ba:83:38:06:
         74:ae:89:81:0e:fe:38:86:4d:1c:29:9a:5f:95:ac:90:83:fd:
         9a:81:53:bd:80:a7:a8:75:ad:49:5c:70:b4:a4:3e:e4:b0:38:
         ff:02:de:5e:30:35:9b:fe:89:25:54:02:20:94:b4:af:b2:8b:
         84:16:c8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:35 2024 by rpki-client on console-fra.rpki-client.org