Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File:                     ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier:          wtTtojvPDLy6C+EDeDTmbyl+4NDTp5cs2wx006mJ8rI=
Subject key identifier:   63:95:C5:AF:5B:31:67:03:40:CE:56:5A:1A:79:0E:46:9E:51:25:C5
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer:       /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial:       018F546E79053FCCB08A87A561C1E8604A9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number:          115C
Signing time:             Tue 07 May 2024 19:01:17 +0000
Manifest this update:     Tue 07 May 2024 19:01:17 +0000
Manifest next update:     Wed 08 May 2024 19:01:17 +0000
Files and hashes:         1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: 2xDKp0nyHx3FiCOJeFKDfV2zx5T0Jl1IbdfwrdgMz+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:6e:79:05:3f:cc:b0:8a:87:a5:61:c1:e8:60:4a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
        Validity
            Not Before: May  7 19:01:17 2024 GMT
            Not After : May  8 19:01:17 2024 GMT
        Subject: CN=6395c5af5b31670340ce565a1a790e469e5125c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:9d:df:cb:9c:db:ec:d2:39:f2:c3:22:ce:
                    48:c9:51:4d:a5:c4:06:09:1b:43:26:1a:33:48:72:
                    5e:85:2c:04:a5:3d:cb:39:95:75:db:bf:d0:31:c2:
                    77:e9:5c:29:bf:13:93:b1:71:aa:82:44:63:47:f0:
                    21:36:50:2b:49:88:c5:bf:7e:40:9b:c8:6c:eb:83:
                    88:7f:f2:0c:a3:a0:93:74:5f:b5:0e:c0:8c:d0:b6:
                    0b:de:64:53:7c:50:90:9e:48:e7:01:0f:b7:54:8b:
                    a7:2c:9a:3e:af:8f:3c:c9:16:48:95:8f:1e:c1:75:
                    b5:15:7b:96:92:82:d8:0c:15:aa:85:00:4f:a2:19:
                    d6:12:5b:73:24:d7:ed:43:a1:85:4e:a9:4f:64:e3:
                    e1:5c:a0:e8:c1:10:8a:13:2d:20:0b:3f:a0:b9:40:
                    06:6d:a4:cc:2c:18:7f:10:1c:ac:c7:4c:71:d9:63:
                    d3:47:1d:41:3a:85:e0:d8:18:b0:ef:c3:ed:35:fc:
                    df:c2:b9:1f:f5:a6:a2:66:9e:03:d1:76:f7:b5:50:
                    6d:a3:01:5e:d6:45:1c:5c:72:fe:95:bd:51:ad:41:
                    1d:18:56:2c:51:e7:2e:97:88:4e:24:4b:eb:27:ee:
                    29:f8:e7:0c:73:8d:e9:58:f6:9e:ae:7e:15:66:46:
                    7b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:95:C5:AF:5B:31:67:03:40:CE:56:5A:1A:79:0E:46:9E:51:25:C5
            X509v3 Authority Key Identifier:
                keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ad:2f:80:f7:50:7d:43:5c:e4:3f:27:3f:0a:76:af:58:13:
         5e:d3:cd:86:68:f0:20:15:61:7a:00:74:07:57:ab:2b:1b:c8:
         4a:34:4e:4f:1e:dd:84:05:1a:8c:3e:87:4e:6b:4e:2a:05:28:
         9d:aa:61:a8:bb:dc:db:58:80:38:02:22:2e:92:fe:fc:43:2d:
         c0:c2:82:fd:f4:7d:9b:7d:98:df:01:3b:d4:12:78:95:7c:6c:
         37:69:0e:d4:49:8c:19:a2:fa:17:2d:b2:18:6e:55:1c:4d:cc:
         15:ff:cb:af:d7:f2:39:25:da:75:7c:7b:a0:a8:46:03:be:32:
         42:fc:c1:e7:24:4a:55:9f:f1:8b:7a:f6:12:ac:09:40:24:fc:
         60:4e:2e:58:0e:0b:be:aa:26:6e:cd:93:8f:85:07:55:3a:36:
         88:22:24:ba:d1:c7:0d:0d:50:5a:fc:d9:9d:d9:b6:b7:b8:21:
         0b:9b:68:04:79:9a:ac:15:f1:50:e3:fa:ea:a7:42:6b:ad:6c:
         77:56:db:65:54:2a:51:50:9f:4e:24:e6:90:8f:93:9c:cb:39:
         9b:6e:4d:85:7b:7c:30:71:97:e7:9e:b3:d1:04:ae:39:9b:7c:
         4f:91:ba:0c:d6:57:0f:bf:e9:b9:df:b4:c1:21:ef:fc:37:d1:
         0a:8a:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:43:42 2024 by rpki-client on console-ams.rpki-client.org