Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/rmVFghpphUC8UCXwPnSG80o4yYM.mft
File:                     rmVFghpphUC8UCXwPnSG80o4yYM.mft (raw, json)
Hash identifier:          +5hVQV8ZXr37gece8K7gBFf3vxOrx+sbT7a086I+FUQ=
Subject key identifier:   FF:AE:28:B2:07:5E:BE:B0:6E:0C:39:22:4D:F3:4C:4A:19:E3:CF:38
Authority key identifier: AE:65:45:82:1A:69:85:40:BC:50:25:F0:3E:74:86:F3:4A:38:C9:83
Certificate issuer:       /CN=ae6545821a698540bc5025f03e7486f34a38c983
Certificate serial:       018F874A7179BCB095C86BDDF2A93CD855A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmVFghpphUC8UCXwPnSG80o4yYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/rmVFghpphUC8UCXwPnSG80o4yYM.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:02:33 +0000
Manifest this update:     Fri 17 May 2024 16:02:33 +0000
Manifest next update:     Sat 18 May 2024 16:02:33 +0000
Files and hashes:         1: rmVFghpphUC8UCXwPnSG80o4yYM.crl (hash: qLrkJucAbmjbKWhSeJsQbq85sArN86rOQH5NBbjC1VY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/rmVFghpphUC8UCXwPnSG80o4yYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/rmVFghpphUC8UCXwPnSG80o4yYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmVFghpphUC8UCXwPnSG80o4yYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:71:79:bc:b0:95:c8:6b:dd:f2:a9:3c:d8:55:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6545821a698540bc5025f03e7486f34a38c983
        Validity
            Not Before: May 17 16:02:33 2024 GMT
            Not After : May 18 16:02:33 2024 GMT
        Subject: CN=ffae28b2075ebeb06e0c39224df34c4a19e3cf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:7f:ec:ab:af:57:ec:d5:a4:87:b4:dd:99:
                    d6:d1:c7:f2:d2:42:4f:bd:44:18:0b:03:f7:0e:80:
                    19:c2:5f:e9:61:bd:ac:50:e6:02:5b:aa:3e:7d:2b:
                    90:a1:c9:e7:f9:84:97:c6:22:61:ea:62:e1:98:91:
                    36:9f:53:29:90:89:f3:64:86:5c:af:18:57:99:6b:
                    40:36:5e:ae:e9:1d:9d:de:63:c4:14:36:62:b5:c5:
                    1a:6a:5e:bc:87:79:c9:a1:0f:7e:14:d0:9c:d8:de:
                    8a:ba:82:24:26:98:4b:b3:6f:22:a2:36:73:16:bb:
                    64:2f:e9:6e:76:e3:36:30:37:ef:d9:d1:63:91:29:
                    d8:e5:d9:f5:66:f4:2f:b9:46:f9:68:50:df:37:08:
                    77:91:d8:e8:2e:90:4f:99:af:a5:db:35:42:fa:c6:
                    15:1d:17:92:a1:f6:1d:65:bb:1a:9d:11:c4:d0:13:
                    02:23:2f:a0:ed:c5:45:31:c8:4d:e6:09:42:ce:9e:
                    bc:47:b8:7e:a0:ca:05:3c:4e:4a:ba:88:f6:cb:c9:
                    f7:eb:f0:83:91:9c:7e:2a:fe:fa:51:40:e4:3e:07:
                    f7:57:25:b6:e1:81:35:fc:81:bf:39:10:2b:0e:37:
                    58:c4:49:b2:42:9c:6c:67:75:83:c1:28:a8:5d:8e:
                    d3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AE:28:B2:07:5E:BE:B0:6E:0C:39:22:4D:F3:4C:4A:19:E3:CF:38
            X509v3 Authority Key Identifier:
                keyid:AE:65:45:82:1A:69:85:40:BC:50:25:F0:3E:74:86:F3:4A:38:C9:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmVFghpphUC8UCXwPnSG80o4yYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/rmVFghpphUC8UCXwPnSG80o4yYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df2a45-83d3-4503-aef6-9da9e7ed3236/1/rmVFghpphUC8UCXwPnSG80o4yYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:12:ce:9f:57:7a:ec:65:2a:db:47:d8:e1:40:ac:82:c8:63:
         a8:6e:27:46:0d:a1:3a:78:c9:74:57:6c:5a:4c:00:84:ad:f9:
         cd:fd:eb:a1:75:92:fa:d2:03:5d:b3:09:e6:79:dc:88:96:62:
         43:cd:62:7c:1b:b2:9b:46:1a:16:31:c7:c8:6b:05:ec:bd:78:
         e2:8e:cd:30:be:2e:f5:f7:e3:8a:c9:16:12:5c:32:a3:5a:0e:
         43:40:2c:d8:ec:11:46:82:4a:80:a6:d3:46:69:ac:3b:9e:4c:
         75:d2:e7:d5:48:48:6b:ea:f1:84:73:2b:72:39:2f:55:42:5d:
         ea:cc:bd:d8:b5:6e:4a:bc:f9:94:c1:30:88:df:63:66:08:ef:
         4f:2b:e3:4d:87:a3:98:8e:64:d0:9b:79:45:fe:50:80:a2:78:
         56:61:c9:27:8f:31:b5:24:eb:7b:17:99:5f:ca:11:54:68:9d:
         cc:e5:38:1e:c7:86:8a:8d:0b:f1:23:95:40:9c:8f:f6:9c:f0:
         5a:3f:1d:b0:39:a2:c7:cc:2d:0d:59:fb:78:93:31:44:85:0e:
         25:8e:0a:3f:59:ac:9e:6e:fe:75:e6:43:ef:15:80:d3:ae:ec:
         fe:81:a5:9a:45:f1:84:0b:b0:b2:b2:7d:c8:b5:be:a4:26:62:
         70:97:0a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:25:10 2024 by rpki-client on console-fra.rpki-client.org