Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File:                     xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier:          szulMtaKdMIc9xqROVlcW+Mj7nYiDb9cK+iYq3WjBfw=
Subject key identifier:   81:CF:B8:01:18:64:13:E7:8C:A4:0F:40:F0:51:56:51:2C:8B:E8:AA
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer:       /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial:       018F88920DE4BB772E25A12511FA06A9977A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 22:00:24 +0000
Manifest this update:     Fri 17 May 2024 22:00:24 +0000
Manifest next update:     Sat 18 May 2024 22:00:24 +0000
Files and hashes:         1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: jX1IdMNSIXMmtn8UJdcH9Csvjq8h8pDH2AnxXolJJ+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:0d:e4:bb:77:2e:25:a1:25:11:fa:06:a9:97:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
        Validity
            Not Before: May 17 22:00:24 2024 GMT
            Not After : May 18 22:00:24 2024 GMT
        Subject: CN=81cfb801186413e78ca40f40f05156512c8be8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:ca:68:20:f3:b9:78:fa:b8:b4:95:82:8d:
                    5b:63:4d:65:1e:c3:0b:cf:88:12:d3:c2:88:d2:74:
                    c8:a0:4f:62:15:00:be:b6:9b:55:04:f0:d9:e7:8f:
                    fd:25:d8:6d:e8:ac:16:58:30:80:bb:ac:97:19:a9:
                    d4:50:5d:08:af:ee:16:3c:6d:95:85:36:87:95:11:
                    8e:1a:c0:79:7e:25:54:b8:13:90:b5:b0:e0:ae:fc:
                    eb:35:78:a2:80:6f:a8:10:17:61:1d:3c:c5:87:39:
                    78:87:39:ee:8b:be:5c:68:0e:95:fa:a9:95:a5:7b:
                    6d:28:ca:fd:2d:75:71:a7:5e:b6:42:7c:de:31:0d:
                    37:1a:d6:99:bc:25:f4:f6:d1:bb:a8:db:74:46:90:
                    9f:9c:a9:7c:26:94:77:f3:6e:54:84:74:58:45:aa:
                    95:5c:d7:2d:17:17:ac:17:5b:a2:e8:d1:26:a9:2b:
                    f2:4c:5b:5a:1d:da:68:a0:d0:09:e8:96:b0:35:e3:
                    8e:83:88:b8:a7:be:f4:6e:81:d4:4b:d1:b2:f9:3f:
                    9a:6e:a2:94:3b:07:4f:ad:0a:cb:1d:36:f9:3d:ee:
                    47:63:95:20:c3:6a:bd:48:f7:95:1d:2b:69:69:5d:
                    9f:b9:b8:f0:05:f1:ef:66:f6:64:06:b1:fc:5f:92:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CF:B8:01:18:64:13:E7:8C:A4:0F:40:F0:51:56:51:2C:8B:E8:AA
            X509v3 Authority Key Identifier:
                keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a0:33:71:5e:71:f6:d8:b1:2d:b0:8d:75:9d:33:c6:89:07:
         48:0f:9f:c5:31:0c:5e:30:af:a7:0b:d4:b3:a9:03:fe:44:ed:
         12:f1:a4:40:97:01:13:23:34:e8:42:11:1c:cf:44:59:f4:53:
         69:53:99:f5:bd:a9:bb:7c:79:0e:79:8a:ea:e3:45:3a:d0:3e:
         1a:20:b0:da:52:a4:60:b6:9e:c6:0b:a6:77:c9:cc:d6:2a:1c:
         d1:af:04:85:29:e4:81:db:29:46:70:7f:dc:2b:68:f1:0f:30:
         c8:3b:db:5d:f8:30:74:da:f4:82:a6:8a:ab:e2:1e:78:fd:d3:
         2b:ad:12:9c:98:c2:c4:c4:41:62:46:81:25:23:36:6e:d7:c5:
         95:be:4c:4a:aa:c2:03:77:e5:d2:a1:62:b4:22:66:16:6c:27:
         de:74:2d:66:40:4f:64:52:7c:d4:8d:36:71:cf:83:9a:7e:57:
         97:bf:4c:e5:b4:87:83:69:8b:80:c6:01:a5:26:fd:0a:21:9a:
         fe:68:33:8d:18:cb:1e:54:84:4c:f4:9c:4b:32:72:3e:36:0b:
         bf:f2:62:27:75:00:b1:87:1f:db:92:65:00:a6:c8:af:fb:78:
         0e:f5:14:df:70:d7:92:38:c9:b5:a2:76:54:e2:73:a3:a0:f1:
         80:20:90:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:55:35 2024 by rpki-client on console-fra.rpki-client.org