Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft
File:                     FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft (raw, json)
Hash identifier:          /E3aSVApTIOwXu/MxazT4b59mL7tXddIIZRaPiR0lMA=
Subject key identifier:   84:83:CC:99:B8:10:12:5D:F2:1D:B4:C2:B5:01:94:B8:08:48:9A:1D
Authority key identifier: 14:47:0D:33:88:72:EF:1F:1E:5F:E4:FC:E6:E3:F6:83:26:7A:21:F7
Certificate issuer:       /CN=14470d338872ef1f1e5fe4fce6e3f683267a21f7
Certificate serial:       018F2DCEA20B025A395B0EED2DC3A32833D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft
Manifest number:          044E
Signing time:             Tue 30 Apr 2024 07:01:07 +0000
Manifest this update:     Tue 30 Apr 2024 07:01:07 +0000
Manifest next update:     Wed 01 May 2024 07:01:07 +0000
Files and hashes:         1: FEcNM4hy7x8eX-T85uP2gyZ6Ifc.crl (hash: Zm6rf1pdbxQNJr+VaRrU8lb8mGZFaM0f0eiKWf801Rc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Apr 2024 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:ce:a2:0b:02:5a:39:5b:0e:ed:2d:c3:a3:28:33:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14470d338872ef1f1e5fe4fce6e3f683267a21f7
        Validity
            Not Before: Apr 30 07:01:07 2024 GMT
            Not After : May  1 07:01:07 2024 GMT
        Subject: CN=8483cc99b810125df21db4c2b50194b808489a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ac:37:55:35:1f:df:80:3a:08:58:ac:fd:19:
                    a2:eb:e0:d2:89:67:05:9a:6a:04:1b:ff:fa:ef:e8:
                    c3:e7:4c:ea:68:fd:ce:02:1e:51:21:df:df:49:e8:
                    25:18:ea:ac:05:d8:27:f1:62:26:53:d9:37:af:5b:
                    c8:95:f5:de:60:d6:f1:f5:3d:ac:1b:2c:d2:a9:1d:
                    14:28:af:7d:cf:91:6e:36:c9:65:cc:46:22:ee:b5:
                    2b:99:0e:6f:e1:c3:9a:ac:02:f1:f7:44:32:0e:bb:
                    ba:63:3d:4b:ca:34:ec:63:bb:de:15:66:c1:f6:59:
                    bc:54:69:2e:44:78:94:c1:21:04:31:e6:27:58:0f:
                    09:e3:29:74:8e:d6:ae:7e:ed:c4:7f:47:67:e9:6a:
                    2b:8e:61:e4:36:94:a8:d2:ba:e8:45:0c:4a:e5:dd:
                    9b:20:e6:2e:0b:82:e3:dd:6e:2d:90:17:5b:28:79:
                    35:b2:aa:94:11:c9:8d:8e:f4:c4:5f:4b:36:05:aa:
                    1d:e6:58:b6:e0:91:09:9d:22:b1:cd:69:6c:ab:1b:
                    c9:f3:63:24:11:00:4f:bf:c3:a6:6d:12:be:5c:e0:
                    da:17:31:82:30:2f:42:11:8c:a2:28:70:78:4e:49:
                    5b:38:b6:fd:60:67:92:aa:3e:47:1b:6e:23:43:86:
                    78:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:83:CC:99:B8:10:12:5D:F2:1D:B4:C2:B5:01:94:B8:08:48:9A:1D
            X509v3 Authority Key Identifier:
                keyid:14:47:0D:33:88:72:EF:1F:1E:5F:E4:FC:E6:E3:F6:83:26:7A:21:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:78:d1:36:77:e2:f9:0c:a0:e2:03:63:67:67:53:94:3f:dd:
         6f:78:ac:69:66:34:31:f3:8e:b5:9b:de:70:ad:4e:2e:0e:b5:
         a6:59:5c:68:8b:1a:93:39:99:51:99:09:3a:40:29:7b:51:66:
         f0:b0:d4:c5:ed:65:24:75:89:7e:8b:dd:3b:b3:e4:72:d8:79:
         40:d8:47:7e:99:84:fe:d2:b5:0d:be:ad:ac:d7:32:3d:cb:c4:
         b7:91:d7:bc:e2:b3:ba:e8:d5:31:d5:0a:0e:91:7c:6e:21:a1:
         a2:d3:ca:c2:34:0c:02:e9:9f:a2:d1:ca:0e:41:56:a6:56:98:
         36:dc:c5:71:91:0c:21:9a:7c:00:0b:95:97:1a:b1:8a:02:6a:
         43:e1:16:6f:e5:b9:b4:18:be:f7:a6:a2:db:0e:96:2f:ac:50:
         32:cc:03:a8:e7:d1:93:ad:8c:ea:ff:dd:f8:7e:6a:23:92:f2:
         a0:f0:cc:67:d7:5a:ff:f0:d1:fb:5c:b5:bf:2b:3e:8b:9a:23:
         62:09:0d:81:8f:3a:de:22:2d:4c:63:41:c9:e0:c1:42:6a:53:
         7b:a1:e5:53:c0:48:b6:5a:03:c1:87:94:a1:cd:ad:6f:a1:c6:
         67:e2:db:02:65:a8:d3:d9:15:a6:a5:4c:c3:42:b0:65:e1:2b:
         a9:08:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 07:59:43 2024 by rpki-client on console-fra.rpki-client.org