Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File:                     dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier:          qR1tt+AeHBSJXw/7Fc7lMP04+Tnj6mPJMWgsi+zeBKk=
Subject key identifier:   3A:B9:15:A9:94:7F:AA:50:AF:89:3A:B6:7B:9A:89:50:18:17:A7:68
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer:       /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial:       018F874990AA5B0E94584554551DE697A84D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:01:36 +0000
Manifest this update:     Fri 17 May 2024 16:01:36 +0000
Manifest next update:     Sat 18 May 2024 16:01:36 +0000
Files and hashes:         1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: abGnBGlMidMG0Gw2KKfqynAOh5BfFAqmKNdcCwwzJj4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:90:aa:5b:0e:94:58:45:54:55:1d:e6:97:a8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
        Validity
            Not Before: May 17 16:01:36 2024 GMT
            Not After : May 18 16:01:36 2024 GMT
        Subject: CN=3ab915a9947faa50af893ab67b9a89501817a768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ed:d2:5d:0e:4f:b2:34:09:5e:fe:51:83:6b:
                    68:96:c9:3e:da:dc:43:69:78:e7:f9:d2:00:c2:0d:
                    d1:f2:96:70:6f:7c:3c:a2:9c:0d:ef:af:ef:da:0d:
                    33:08:60:b9:9e:28:a6:72:18:e5:95:cb:77:e3:0c:
                    09:8f:05:73:0c:4d:40:17:cd:37:40:5b:19:58:ba:
                    77:63:1d:77:99:1d:7f:e0:2d:01:ad:5e:3f:4e:5a:
                    66:11:31:14:50:63:5f:3d:64:21:ce:a1:a4:67:cd:
                    df:0c:60:fd:27:b1:ff:ae:07:cf:c5:da:29:a9:70:
                    d2:0c:3b:bd:9a:0b:a4:18:c7:0f:6c:2c:1c:4a:e5:
                    79:d2:e3:82:45:24:93:8f:18:c8:a3:74:21:ff:31:
                    23:8e:30:90:21:b7:2e:b8:25:27:37:bb:8a:a2:f0:
                    32:7c:c7:d8:ff:8c:ae:8c:1b:7d:36:52:9d:48:23:
                    09:4d:c8:09:a6:1f:3b:1a:34:40:53:4b:02:d5:63:
                    50:ea:3c:de:d6:78:e1:6d:cb:9d:c3:12:30:74:1d:
                    f0:e6:2f:a9:53:1c:d2:ae:e0:67:20:70:2e:9d:6d:
                    e6:f8:5a:12:95:85:69:54:5c:5d:b2:22:a5:19:c6:
                    4c:fc:68:b9:c3:9f:a1:66:28:d3:66:52:d1:30:d8:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B9:15:A9:94:7F:AA:50:AF:89:3A:B6:7B:9A:89:50:18:17:A7:68
            X509v3 Authority Key Identifier:
                keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:be:25:33:c6:72:14:8b:79:c4:32:da:09:e2:4c:9b:b7:d8:
         90:53:ec:d5:dd:7f:65:03:fc:81:a8:d6:3c:d4:71:b6:0d:a3:
         bb:11:92:00:c3:96:60:c4:c1:69:8a:2e:6c:89:c5:a0:8f:1e:
         42:c7:48:7a:03:04:39:46:d8:dc:1c:e5:e7:95:d3:de:3f:aa:
         81:eb:92:a0:a4:cb:32:3a:ab:27:88:85:40:52:60:8d:20:56:
         1c:12:69:ec:83:6b:5e:37:66:15:47:4b:60:86:c4:8e:7a:f3:
         e6:73:9d:d4:3f:f3:58:4f:af:cf:a0:fa:20:69:2f:e3:19:e9:
         75:69:30:56:84:f4:77:6c:56:4e:5b:8f:1c:01:f7:de:30:4e:
         24:89:22:fb:bd:10:9d:0b:47:a4:1c:d5:e8:4f:96:49:41:e7:
         b1:ac:16:c2:b4:a7:af:e1:ef:df:de:3e:09:ab:dc:f7:af:e1:
         c8:a4:36:6b:09:32:f5:86:2b:20:78:aa:45:97:1f:34:87:f4:
         ac:83:64:0e:d6:4f:3c:14:39:7a:d7:68:8f:b1:6d:ee:11:dd:
         d5:d4:a3:d9:bf:17:f2:47:ef:2c:ed:ba:9b:cd:df:fe:b7:9b:
         33:c7:68:4a:a4:92:9d:22:c4:7a:e4:5f:8d:4e:d3:e7:20:61:
         81:b0:f0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:20 2024 by rpki-client on console-ams.rpki-client.org