Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
File:                     FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft (raw, json)
Hash identifier:          /dMfKXTQDE1qk+z1TL0TPvhK2BPsnQsjWehfd9h0mJs=
Subject key identifier:   50:BA:67:74:53:86:F8:22:FE:56:7F:7A:2C:6A:E7:55:16:62:F4:69
Authority key identifier: 14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
Certificate issuer:       /CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Certificate serial:       018F43B471CD11B56C2F2B9C85480F630C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
Manifest number:          05F7
Signing time:             Sat 04 May 2024 13:04:10 +0000
Manifest this update:     Sat 04 May 2024 13:04:10 +0000
Manifest next update:     Sun 05 May 2024 13:04:10 +0000
Files and hashes:         1: FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl (hash: r0qvEB5zFAssGFtMIE+8wO5SFmerGYhIY8FMKUUeuKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b4:71:cd:11:b5:6c:2f:2b:9c:85:48:0f:63:0c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c2eab6a2960506046a1da4312773d98e97cd5a
        Validity
            Not Before: May  4 13:04:10 2024 GMT
            Not After : May  5 13:04:10 2024 GMT
        Subject: CN=50ba67745386f822fe567f7a2c6ae7551662f469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:38:7d:96:6c:43:e0:37:82:3f:9f:bf:59:75:
                    7f:98:26:8a:7e:19:e8:1a:f0:54:71:ca:00:0c:6a:
                    15:d9:a6:f0:1b:9e:f6:fd:df:89:8a:d3:07:68:50:
                    fb:b3:dd:bc:a0:6b:6f:46:64:cb:1d:f9:e8:6f:06:
                    09:7b:64:05:e8:4e:6d:da:59:47:7b:35:c0:04:15:
                    9e:4c:20:8c:26:7b:22:b8:7a:a8:18:ad:98:64:5d:
                    40:69:c7:4b:f2:3b:24:24:e9:fc:d5:3c:7b:20:8d:
                    29:2d:73:ba:f6:d5:dc:ee:67:c1:46:63:49:74:8f:
                    e6:ea:fc:b4:2a:42:7e:c7:b1:db:7a:97:5c:5f:91:
                    51:89:90:b1:86:9f:35:59:b0:44:67:6b:ea:16:a4:
                    e1:49:20:d3:4c:92:5f:52:55:58:d9:9a:86:6b:15:
                    f1:d7:bf:1a:39:ec:8e:de:16:c3:03:5c:f0:44:a9:
                    7f:05:b5:3f:18:d5:96:9b:62:cb:d7:42:fe:11:94:
                    5f:52:be:99:f1:3a:0d:8f:45:77:1f:25:09:26:c8:
                    63:34:85:a8:6c:03:f0:33:e8:f6:c5:c6:c4:dc:f8:
                    f1:4a:62:14:b3:3b:90:eb:82:24:94:f2:a4:33:21:
                    5a:c4:7f:07:92:79:54:a9:a7:c9:8a:94:a2:f7:88:
                    b7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BA:67:74:53:86:F8:22:FE:56:7F:7A:2C:6A:E7:55:16:62:F4:69
            X509v3 Authority Key Identifier:
                keyid:14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cd:4d:9c:7e:b4:1b:2f:6a:ee:6e:21:88:85:de:37:05:49:
         f7:02:d8:e0:f7:ad:99:8e:f7:7b:3f:47:f9:40:cb:3d:a9:28:
         7b:32:87:3f:8f:4f:31:4e:2f:a3:e1:14:15:a8:48:d6:c7:ba:
         ff:dd:10:b9:66:ef:b7:97:77:d1:97:92:82:0d:91:82:af:a6:
         80:63:a1:2d:36:c3:62:0e:21:a3:0a:fa:b7:8f:12:45:99:53:
         26:e0:39:ea:b2:1d:8a:93:eb:ee:d8:0c:ef:f2:1c:06:b9:d4:
         30:4a:a0:79:08:09:21:a5:e4:c7:0e:f1:44:f7:88:e8:e7:5d:
         23:25:42:bd:70:ae:48:b3:e1:cc:90:76:9c:7c:0c:88:f3:06:
         a2:b5:7b:fd:cb:41:61:43:89:15:b9:5d:86:37:d4:2e:73:e0:
         47:1a:3d:14:05:45:e7:c7:09:57:59:5c:f5:ce:a0:94:80:44:
         65:36:7a:af:f5:07:97:99:d0:51:fd:01:90:f7:c5:41:b8:0c:
         78:12:41:ef:0a:f3:a7:3d:1d:5b:6a:fb:6a:e3:81:5b:cf:c8:
         e1:2d:65:f8:eb:59:55:67:a5:87:b5:2a:ae:bf:84:d2:3a:ac:
         a3:5f:23:6b:7f:53:f5:0c:db:c6:0d:ee:da:5b:0d:50:6d:ce:
         6b:79:d4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:16:42 2024 by rpki-client on console-fra.rpki-client.org