Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
File:                     mfseX91w4MDmCIWjBYH-DAJBDX0.mft (raw, json)
Hash identifier:          IZw+/OnasXzMzVPpNBTehARkEq47A3Hwbtr4OEDVgeA=
Subject key identifier:   C0:9F:33:B8:73:B7:05:00:BC:63:48:C0:DD:10:24:00:51:09:C9:46
Authority key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
Certificate issuer:       /CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Certificate serial:       018F874A0BA62B42C452D51540564D0AE525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:02:07 +0000
Manifest this update:     Fri 17 May 2024 16:02:07 +0000
Manifest next update:     Sat 18 May 2024 16:02:07 +0000
Files and hashes:         1: mfseX91w4MDmCIWjBYH-DAJBDX0.crl (hash: ZOOC17NRB7ceC82EMhfzSGs0J/tae2MzTMCMYpUGXqE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:0b:a6:2b:42:c4:52:d5:15:40:56:4d:0a:e5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
        Validity
            Not Before: May 17 16:02:07 2024 GMT
            Not After : May 18 16:02:07 2024 GMT
        Subject: CN=c09f33b873b70500bc6348c0dd1024005109c946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:aa:8b:48:d3:7c:70:f1:1c:2c:22:f3:cc:6f:
                    b5:6e:ca:b9:bb:63:25:5c:32:b1:64:c1:4a:8c:42:
                    84:ea:90:83:86:20:af:e4:80:3c:d6:ad:f6:8c:44:
                    ed:cb:2d:71:17:29:05:bc:ea:7c:1b:d9:4e:6b:5a:
                    23:62:a8:6f:22:b7:12:28:88:4f:d7:a9:d9:55:47:
                    0b:1a:42:94:36:e5:e3:0e:47:71:4c:53:62:58:1b:
                    43:50:fb:75:35:4d:cf:84:81:ef:d8:55:ec:5a:d0:
                    86:4b:bf:6d:fd:94:ba:74:44:94:e9:82:3c:76:58:
                    d8:05:c1:53:ef:79:93:9c:e7:7c:cf:e9:87:48:51:
                    5c:99:81:0a:47:da:4d:ce:cc:fb:9e:c6:d5:18:3f:
                    f6:43:e8:94:1c:c1:4b:f1:1c:1e:c7:99:48:d1:ab:
                    cd:6e:26:38:a9:0c:e7:29:f8:22:f1:8b:b1:23:7b:
                    a2:25:e6:40:ad:cd:96:28:84:af:2f:bb:e2:f9:81:
                    7d:09:1e:e4:d3:5b:55:28:e1:47:df:52:17:e6:1f:
                    bb:2e:17:15:b6:04:01:44:3c:da:b8:2e:03:61:05:
                    1f:f1:af:06:bb:4d:32:42:96:aa:4f:cf:f8:ec:0f:
                    58:80:f4:28:67:37:ca:df:0e:c4:fe:3c:b9:74:56:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9F:33:B8:73:B7:05:00:BC:63:48:C0:DD:10:24:00:51:09:C9:46
            X509v3 Authority Key Identifier:
                keyid:99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:96:a4:ed:82:9a:65:20:d1:49:e8:82:ac:58:68:3d:1d:93:
         08:05:2d:a2:47:50:99:c4:fc:b0:cb:f4:0b:53:36:b8:b1:15:
         fb:41:be:94:53:17:f6:29:a9:27:61:34:62:72:c3:45:2f:bc:
         f8:81:03:5c:76:a8:08:fe:58:d6:06:cd:42:cd:f8:43:d9:03:
         c6:9c:b3:f2:fb:85:c3:fb:20:b7:4c:a5:59:b4:90:90:66:84:
         f9:35:e4:e4:53:6b:b5:06:e0:a9:b7:20:70:e4:44:03:8f:13:
         95:75:19:2d:bb:3e:c6:65:dd:bf:eb:46:74:d6:13:19:dd:52:
         23:6f:af:f7:eb:b8:65:64:ac:c8:82:af:38:f7:99:52:5a:fd:
         51:d0:db:2a:0e:ce:95:76:d2:10:f9:67:7c:67:e7:81:07:dc:
         ca:eb:4c:90:5c:34:05:2a:16:cd:b0:d7:e1:db:3f:ac:6f:8d:
         93:13:a2:28:cb:9b:63:3f:1f:80:fb:8f:9c:ee:b7:ed:c3:a0:
         ce:de:3e:2a:dc:de:93:c7:51:ad:83:30:a7:34:89:38:f6:a0:
         2a:11:69:2b:25:a0:ce:d1:c4:25:8b:40:b4:42:aa:95:27:f6:
         59:24:35:98:cc:9c:d4:ad:ff:f7:32:6c:bb:f7:c8:82:9f:3e:
         8c:d7:1c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:47:56 2024 by rpki-client on console-ams.rpki-client.org