Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
File:                     _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json)
Hash identifier:          salltfNadk3269AEKCQzmsvDMvFVvpVQwfyFeWqm4TQ=
Subject key identifier:   AB:C8:FC:8C:B4:E0:5D:6F:43:12:C9:1D:00:64:1D:85:49:43:18:AD
Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
Certificate issuer:       /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Certificate serial:       018F9729A5AB704BEEFA7C0A3F16D3C98F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
Manifest number:          1082
Signing time:             Mon 20 May 2024 18:00:39 +0000
Manifest this update:     Mon 20 May 2024 18:00:39 +0000
Manifest next update:     Tue 21 May 2024 18:00:39 +0000
Files and hashes:         1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: a8Xkbb6bmUAb6XySJrZrV3+2TCRZg/VxgBWj3U95AfU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:29:a5:ab:70:4b:ee:fa:7c:0a:3f:16:d3:c9:8f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
        Validity
            Not Before: May 20 18:00:39 2024 GMT
            Not After : May 21 18:00:39 2024 GMT
        Subject: CN=abc8fc8cb4e05d6f4312c91d00641d85494318ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:0d:af:97:1f:a9:28:71:1f:34:ae:e4:97:
                    60:af:8f:be:70:65:eb:e5:e3:e3:ef:54:54:bc:2c:
                    1a:0a:73:32:2f:7a:73:46:8a:61:d8:ca:68:29:64:
                    aa:d5:cd:46:db:4c:ec:9f:80:de:1a:42:05:8f:65:
                    e6:04:cd:99:82:d6:a9:5d:6f:08:79:5f:90:e6:4f:
                    65:b2:0f:e3:20:d9:bb:92:03:fd:98:72:2e:d8:83:
                    ef:7b:79:5e:51:57:85:5a:d1:1c:34:7c:c1:eb:a2:
                    f3:d4:fb:22:d0:6c:3e:79:9f:9c:a7:28:ae:2c:21:
                    e3:ab:ad:70:4b:41:3a:01:9b:94:19:4b:30:e6:03:
                    77:09:e1:c3:37:e9:8a:e5:51:49:2b:1b:14:37:77:
                    e7:72:04:35:66:75:7a:97:2d:5a:66:20:a7:f5:b9:
                    d8:46:df:08:3d:6d:28:b9:27:92:bf:08:c9:1f:e8:
                    82:68:14:75:45:17:e1:1b:ca:0f:34:3b:bf:9a:f3:
                    2c:ef:1c:2a:6f:fc:9b:c3:3b:cd:9e:60:8e:83:d8:
                    d7:58:f4:a3:d8:d7:7e:63:36:6c:26:6f:78:d0:89:
                    25:6b:30:cd:7d:65:a0:c3:3d:bd:a0:81:c7:85:76:
                    e5:3b:8c:00:cd:3c:0d:b9:2d:e1:1a:8d:64:c0:94:
                    e0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C8:FC:8C:B4:E0:5D:6F:43:12:C9:1D:00:64:1D:85:49:43:18:AD
            X509v3 Authority Key Identifier:
                keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a8:18:4b:98:95:4d:83:cb:52:9a:c0:95:55:92:c5:ac:d1:
         74:40:8d:dc:0b:31:d6:62:17:fc:76:e2:44:03:4e:33:63:c3:
         0e:ff:8d:94:e8:07:66:32:34:9d:bf:15:4b:4f:94:5e:31:b7:
         84:fa:08:c0:1d:85:ff:f5:3c:97:ce:33:fa:04:78:a5:dc:3a:
         1c:47:42:98:40:1d:ba:8f:22:7a:b2:9d:be:93:5c:07:b7:22:
         20:b0:2d:c9:83:89:0b:83:e7:c2:1b:b1:59:0e:ae:fd:c2:a7:
         ce:75:be:ac:03:97:71:15:7d:8f:ed:61:f5:92:99:95:72:9b:
         db:0c:98:4d:73:ca:db:83:e4:74:7c:2e:43:d8:b8:18:32:13:
         5a:6c:b0:7e:d9:fd:c8:d3:f6:05:44:ff:39:e0:4d:57:d4:f5:
         8f:6e:ba:79:84:27:20:37:a4:f5:3a:a9:43:2e:0f:b7:f9:3f:
         72:eb:f9:be:49:89:1f:45:45:8b:05:ab:a4:30:ff:97:66:bf:
         49:e6:c6:f4:89:d8:19:56:7f:61:78:9e:19:4e:e7:9b:40:ab:
         a1:38:70:ab:67:d3:cf:e1:ad:ff:3f:2e:38:95:ee:a0:86:b8:
         48:3d:08:fd:64:cd:c6:41:92:af:82:a6:b7:de:b8:29:59:55:
         f9:9b:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 23:52:58 2024 by rpki-client on console-ams.rpki-client.org