Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.mft
File:                     q7FleujHzIoUq5qohFzUurULpBw.mft (raw, json)
Hash identifier:          BzGNur1OWA3B40G9XE3cj2Mf3c5BaXYyTqD7dPUFCHA=
Subject key identifier:   A7:77:46:86:9A:53:F3:13:6A:17:6C:21:56:73:2E:66:E5:7E:03:51
Authority key identifier: AB:B1:65:7A:E8:C7:CC:8A:14:AB:9A:A8:84:5C:D4:BA:B5:0B:A4:1C
Certificate issuer:       /CN=abb1657ae8c7cc8a14ab9aa8845cd4bab50ba41c
Certificate serial:       018F86A4136182DEC4AA7822CC8D8AB02AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7FleujHzIoUq5qohFzUurULpBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.mft
Manifest number:          0712
Signing time:             Fri 17 May 2024 13:00:50 +0000
Manifest this update:     Fri 17 May 2024 13:00:50 +0000
Manifest next update:     Sat 18 May 2024 13:00:50 +0000
Files and hashes:         1: q7FleujHzIoUq5qohFzUurULpBw.crl (hash: BqQxHIm+QCw41hHBMTvzCYm+CTwWJSl0ximdkiaDih8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7FleujHzIoUq5qohFzUurULpBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:13:61:82:de:c4:aa:78:22:cc:8d:8a:b0:2a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb1657ae8c7cc8a14ab9aa8845cd4bab50ba41c
        Validity
            Not Before: May 17 13:00:50 2024 GMT
            Not After : May 18 13:00:50 2024 GMT
        Subject: CN=a77746869a53f3136a176c2156732e66e57e0351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:5c:30:26:20:a0:bf:e7:ad:67:10:46:16:
                    02:02:83:74:c4:36:2b:a0:95:fc:fd:6f:8f:d7:a1:
                    80:85:84:88:a4:9a:07:ca:87:7d:00:e7:91:7f:1a:
                    da:59:bd:87:9d:56:6c:6c:58:bf:7e:d6:72:18:82:
                    b3:2a:58:ba:4d:8f:ae:1d:bd:46:bd:d3:f5:dd:7e:
                    67:2b:4f:36:63:45:ea:7e:12:ea:14:a9:b1:d2:18:
                    9f:f6:59:bc:de:86:3d:6b:1a:79:95:50:c0:b7:a8:
                    7d:18:cc:df:fe:28:e5:c5:6a:55:92:77:20:0a:95:
                    44:84:bb:84:83:10:5d:fa:24:d7:a4:dc:8a:5c:41:
                    cf:09:0c:77:7f:46:57:20:d6:ac:9b:9d:93:f7:27:
                    45:86:dd:e8:95:3d:d1:d5:e1:ad:95:f6:da:97:2c:
                    ed:f4:8f:2a:fe:8d:34:4d:43:f2:cc:90:e5:f9:47:
                    b6:24:39:d6:c2:7b:7a:61:01:0a:aa:ba:eb:dd:9b:
                    10:28:34:86:02:68:fd:b7:19:03:6e:b1:e0:22:cf:
                    09:69:d4:52:0c:d6:57:83:4a:1d:2b:2d:4e:5d:d8:
                    d2:32:ef:d9:cb:f8:c8:a8:d2:5b:e0:a8:b2:0c:c7:
                    a5:7a:06:1e:f9:d3:22:15:24:9d:b7:4a:c5:1b:a6:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:77:46:86:9A:53:F3:13:6A:17:6C:21:56:73:2E:66:E5:7E:03:51
            X509v3 Authority Key Identifier:
                keyid:AB:B1:65:7A:E8:C7:CC:8A:14:AB:9A:A8:84:5C:D4:BA:B5:0B:A4:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7FleujHzIoUq5qohFzUurULpBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:19:b0:f0:af:38:2a:85:63:c6:f2:35:f1:56:7f:ef:20:82:
         67:dd:85:da:ee:d0:b4:71:b9:ee:fc:fb:7b:27:46:45:93:da:
         74:28:e6:9b:ee:c3:e4:32:5f:10:eb:b5:5e:43:1a:b8:10:3f:
         fd:30:47:9a:47:01:e8:58:d7:c5:17:be:3e:98:8a:06:c6:31:
         05:cc:f6:d7:00:5e:dc:36:f5:36:b7:be:3b:cd:39:f0:71:9e:
         ad:48:f3:4f:69:97:e5:cf:d6:85:f6:49:25:a0:da:4f:b9:b6:
         64:ed:f8:f5:c1:01:5c:63:42:ba:37:ba:a9:b3:63:6c:a2:f4:
         67:07:dc:73:11:e5:3d:1a:34:bb:e9:f6:39:3d:e3:b2:84:bd:
         07:94:57:07:06:22:3a:88:a0:a9:31:58:65:b6:c6:28:33:ee:
         ea:08:1c:3d:f1:a1:06:97:d9:3d:72:b3:96:57:dd:86:bc:e4:
         e5:a7:d1:ef:58:45:2b:3b:62:15:29:f5:fd:cf:e0:2c:9a:78:
         91:e1:e0:91:56:e8:c6:be:3d:4d:be:1e:3b:f1:9c:15:48:b3:
         5f:d9:09:e8:02:61:3a:40:32:df:66:a7:ba:36:d2:e4:a0:1a:
         57:ad:33:4f:c8:0d:9b:8c:ac:87:b4:01:ac:da:02:0d:b4:ad:
         b3:92:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:25 2024 by rpki-client on console-fra.rpki-client.org