Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
File:                     SEpnLpkiPCcMFLXib_82qLzOTPI.mft (raw, json)
Hash identifier:          FbSYzxK5JHl9ettdVVsJolvb5anyK3JXb3YfTElfOV4=
Subject key identifier:   2E:43:8F:B5:36:66:C5:D6:C2:E2:88:CF:99:53:02:D7:03:76:B6:73
Authority key identifier: 48:4A:67:2E:99:22:3C:27:0C:14:B5:E2:6F:FF:36:A8:BC:CE:4C:F2
Certificate issuer:       /CN=484a672e99223c270c14b5e26fff36a8bcce4cf2
Certificate serial:       018F88248BAE80DAE856EB51ECE0D916CD29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEpnLpkiPCcMFLXib_82qLzOTPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 20:00:47 +0000
Manifest this update:     Fri 17 May 2024 20:00:47 +0000
Manifest next update:     Sat 18 May 2024 20:00:47 +0000
Files and hashes:         1: SEpnLpkiPCcMFLXib_82qLzOTPI.crl (hash: NiDiGWnvuEbo8q6daXYmVqv159qjq3Zk3fs1/SoMHaE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SEpnLpkiPCcMFLXib_82qLzOTPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:8b:ae:80:da:e8:56:eb:51:ec:e0:d9:16:cd:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484a672e99223c270c14b5e26fff36a8bcce4cf2
        Validity
            Not Before: May 17 20:00:47 2024 GMT
            Not After : May 18 20:00:47 2024 GMT
        Subject: CN=2e438fb53666c5d6c2e288cf995302d70376b673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:18:78:13:e8:9b:8c:84:79:30:10:b8:da:
                    e2:c8:1a:94:96:29:36:77:e5:07:f5:45:88:4d:a2:
                    ac:2d:26:be:73:41:3c:44:c9:2b:88:52:d8:85:ff:
                    70:91:69:2d:2a:2a:e3:b4:ee:db:56:d7:13:7d:dd:
                    f2:00:41:39:bd:b8:74:63:e3:7b:eb:72:6e:2f:ce:
                    31:6f:a4:c0:d0:f4:36:2f:ee:8f:b9:ea:3d:9f:31:
                    16:cc:2c:a0:33:ac:4a:c9:ac:a2:ce:f4:2f:fa:60:
                    ed:c3:4e:36:d9:f6:6d:0c:11:1a:ee:65:5d:7e:1e:
                    44:eb:50:a6:ee:ee:81:70:fc:26:04:bf:9c:60:7e:
                    a4:43:3c:1b:ac:7d:18:a0:2c:7b:5d:f1:18:ea:5b:
                    01:44:5d:60:01:c7:6a:d7:ff:55:9d:c9:3d:1b:9a:
                    f8:1a:85:1f:65:9c:f9:9a:ae:82:41:78:0d:fc:b6:
                    f8:ae:8e:46:7d:28:2e:2b:53:3a:9e:bf:6f:e2:17:
                    a4:ed:bc:57:da:61:43:82:78:f8:73:c5:c9:59:1b:
                    27:0e:9a:1d:4a:91:6c:97:08:7c:8f:7b:52:39:2e:
                    be:17:7f:19:8d:7e:3e:bd:c3:03:5c:35:b3:76:4c:
                    63:14:e9:cc:92:08:01:55:5c:e0:d2:d6:b6:5b:76:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:43:8F:B5:36:66:C5:D6:C2:E2:88:CF:99:53:02:D7:03:76:B6:73
            X509v3 Authority Key Identifier:
                keyid:48:4A:67:2E:99:22:3C:27:0C:14:B5:E2:6F:FF:36:A8:BC:CE:4C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEpnLpkiPCcMFLXib_82qLzOTPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:de:83:d6:e2:47:fe:aa:ec:2c:02:4d:c4:92:ae:0a:7f:4d:
         6c:74:40:74:cb:4a:26:dc:62:15:72:b3:f4:40:71:45:c4:e1:
         63:1c:3c:c6:9a:34:d2:39:b6:53:86:24:58:05:11:d9:54:41:
         cc:9c:fd:92:1a:f8:21:bc:46:0a:8a:c9:f5:69:5b:5f:9c:17:
         ac:01:f0:df:4f:fe:28:b1:35:e9:46:a6:75:cf:42:95:ba:46:
         8d:2b:bc:63:44:c4:40:86:64:30:4b:df:fc:26:25:82:b5:76:
         23:1b:f2:fa:6a:89:2c:22:34:07:72:d3:04:02:ae:60:6b:b3:
         bd:00:af:b4:ab:a8:61:f5:8e:1f:52:3c:24:88:4c:73:fc:3d:
         b8:8f:0d:25:f5:1f:ed:84:3d:54:10:5e:fe:d7:e8:93:57:99:
         ad:d3:de:4d:74:e4:0b:6a:be:2c:23:45:96:b4:3b:d4:49:2b:
         a0:c9:bb:7b:c1:8f:43:36:c6:61:b2:fe:b9:cf:fb:87:0c:b3:
         d7:88:8f:95:d5:ac:bd:e6:b0:dd:1d:35:5c:3a:aa:ac:39:51:
         00:82:16:9c:9a:51:57:cf:f7:0a:f4:83:8a:8b:41:16:bb:78:
         3b:5a:4e:40:7b:4a:c2:63:4b:b8:6c:3b:7a:71:51:3d:da:e4:
         23:04:7f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:11:54 2024 by rpki-client on console-ams.rpki-client.org