Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File:                     _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier:          38cX9aL9Zk2jwtT69Oy9Ee+TTR/fvyV66wrWadu2t+o=
Subject key identifier:   99:00:52:A6:7E:70:C4:E0:F4:87:3C:6F:BF:E9:81:BF:76:F9:EB:D7
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer:       /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial:       018F8749CBB2E2F8639EFFD2198064BEE78F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 16:01:51 +0000
Manifest this update:     Fri 17 May 2024 16:01:51 +0000
Manifest next update:     Sat 18 May 2024 16:01:51 +0000
Files and hashes:         1: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: FXppUGOPwS86tbusoWX12V4Lj1xO9mjvff4mDnxerd8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:cb:b2:e2:f8:63:9e:ff:d2:19:80:64:be:e7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
        Validity
            Not Before: May 17 16:01:51 2024 GMT
            Not After : May 18 16:01:51 2024 GMT
        Subject: CN=990052a67e70c4e0f4873c6fbfe981bf76f9ebd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:de:e6:d1:fc:ab:af:99:3a:6a:99:12:d0:
                    28:51:c1:23:a2:4c:8d:be:f9:45:68:30:35:3d:44:
                    33:3b:bd:32:c8:1c:1d:d5:ed:07:dc:d3:ef:1f:52:
                    8b:bc:84:09:3d:34:34:ca:ca:79:5d:62:be:2a:ed:
                    d4:3e:0f:c4:98:fb:a8:6e:df:28:76:80:30:00:d6:
                    40:86:0f:14:f9:1f:26:2c:aa:30:ad:d3:0c:9c:28:
                    59:7e:25:5e:de:b3:3d:c8:27:f5:f5:c3:16:2e:b1:
                    4b:5d:fa:e9:d8:9a:bf:d9:de:9f:76:58:67:b1:9f:
                    3d:9d:bc:73:4f:5b:26:3f:7f:1b:15:7c:da:85:87:
                    14:32:5c:6f:46:36:7b:a5:5a:f5:ef:18:85:37:4d:
                    78:ab:2d:7c:25:75:a5:be:9e:da:bf:a0:ac:0b:46:
                    67:bb:67:25:b7:5b:d3:25:dd:f2:da:46:44:64:1a:
                    01:f8:81:ff:0e:b0:e1:16:97:72:08:15:bb:99:84:
                    47:f9:03:ee:71:82:b7:5e:e5:08:e1:23:9d:9e:d6:
                    9d:36:2d:cb:27:b4:43:0f:ef:76:7f:31:6f:94:30:
                    72:ba:86:93:43:3b:94:34:1f:a5:bb:95:39:59:01:
                    a3:8f:39:e5:65:57:9e:53:23:a9:a5:56:07:a0:4a:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:00:52:A6:7E:70:C4:E0:F4:87:3C:6F:BF:E9:81:BF:76:F9:EB:D7
            X509v3 Authority Key Identifier:
                keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:18:e1:a2:9b:4f:e9:54:a0:8d:95:79:72:41:e9:88:de:fc:
         25:3a:b1:53:39:b6:fc:0d:4f:dc:04:91:d1:33:84:e4:5e:e6:
         f5:62:22:5e:72:3b:4a:b0:84:21:50:65:c7:d5:f5:3a:17:cd:
         41:da:13:3f:8f:94:06:e3:2d:eb:9b:58:8c:6e:f0:8e:78:de:
         27:14:70:44:74:6b:e2:f9:0d:5a:e8:95:64:9e:c6:d6:11:1c:
         aa:9e:bb:cf:cb:42:a5:eb:c9:d9:df:d1:78:c7:b8:f0:3e:57:
         3f:31:4f:9e:5a:28:9d:1a:e9:48:27:fb:80:87:75:0a:cb:0e:
         5b:87:36:57:85:44:a8:ee:1a:6c:92:f7:e7:5c:ab:52:f6:c5:
         37:b5:90:59:18:c2:4d:af:ee:b2:76:3e:d1:49:55:c2:89:ed:
         3b:be:e7:fc:0b:cb:50:56:6e:9b:92:69:fb:17:3a:72:21:d2:
         2f:84:92:8d:21:47:8e:d8:ad:7a:8c:4b:ff:13:38:49:5d:ee:
         9d:56:c3:d8:2a:d9:3c:58:1c:29:cf:d3:1f:69:e9:4c:64:29:
         e2:34:e2:70:f3:2b:30:28:ec:ac:af:d3:1c:26:99:fd:de:27:
         e8:3b:6f:33:b1:94:f2:6c:31:8e:8c:9f:5f:08:65:5d:35:c4:
         ec:b9:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:18 2024 by rpki-client on console-fra.rpki-client.org