Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File:                     I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier:          E2Ne3GJREhCNwPTBYxuRIB3pLfp/5bFLI8/TuhnKfBA=
Subject key identifier:   99:7E:43:AD:83:49:BE:F0:CB:1C:04:9A:D6:5A:25:D6:FD:8E:DD:8F
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer:       /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial:       018F460E9B25A9D103AEC33F43BBA7C07130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number:          1151
Signing time:             Sun 05 May 2024 00:01:53 +0000
Manifest this update:     Sun 05 May 2024 00:01:53 +0000
Manifest next update:     Mon 06 May 2024 00:01:53 +0000
Files and hashes:         1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: XhV3TtPM3JJKGMLVi/F0KZgos8z4O9G8feiiBnuG3Z0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0e:9b:25:a9:d1:03:ae:c3:3f:43:bb:a7:c0:71:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
        Validity
            Not Before: May  5 00:01:53 2024 GMT
            Not After : May  6 00:01:53 2024 GMT
        Subject: CN=997e43ad8349bef0cb1c049ad65a25d6fd8edd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:50:5d:bd:1b:2e:62:f0:1d:66:a7:0f:bf:
                    c9:fa:48:02:81:e1:d4:ed:48:83:c7:81:67:02:3a:
                    73:e5:25:a4:4a:a1:da:7f:47:68:1b:2d:87:1e:b7:
                    bc:23:d8:ef:d6:e2:dc:25:a3:63:76:31:ad:b5:b4:
                    32:f8:81:12:c4:72:9d:fc:d6:77:49:b7:31:cc:2a:
                    75:d0:43:e3:dd:87:ab:b7:c3:00:0e:54:33:3e:15:
                    3c:d5:89:fd:0e:f1:f7:06:e2:1a:25:d0:b4:de:9e:
                    66:c3:a1:f1:e9:49:a4:e3:43:34:74:a5:67:3e:7c:
                    bc:f1:23:17:8f:ec:e3:43:2e:23:a3:67:7d:31:a3:
                    85:64:da:a2:92:69:44:51:1e:ed:e0:30:e9:97:e0:
                    6b:5d:78:1f:86:87:6f:46:c0:b5:98:1b:5c:23:0f:
                    a4:e4:dc:ec:21:f0:f4:f4:49:a1:8d:a5:32:af:5c:
                    84:d9:17:f8:7e:bc:38:1f:c9:b3:af:93:a3:71:e0:
                    1c:0c:bc:2d:a9:43:41:1a:cf:ee:b4:63:34:2d:b7:
                    78:3f:d3:b5:e5:f5:38:e8:0a:a7:6f:d5:e9:47:04:
                    3a:e4:84:93:e3:50:75:af:5d:8c:02:3d:9c:d7:20:
                    06:ce:94:f9:0c:61:f6:42:3c:7c:e0:2d:b2:54:0b:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7E:43:AD:83:49:BE:F0:CB:1C:04:9A:D6:5A:25:D6:FD:8E:DD:8F
            X509v3 Authority Key Identifier:
                keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b6:5d:f0:a8:0b:80:c2:22:c3:2e:58:04:b2:a4:ac:b0:1c:
         89:ff:a6:10:12:10:8c:91:fb:d7:e1:4b:36:96:cd:5b:6c:1d:
         10:e1:1b:cf:32:8d:b5:60:9a:7e:83:7a:c4:9b:19:82:69:96:
         ec:3c:b6:52:8a:79:13:29:d0:ac:2d:b6:f8:2d:3f:b9:e0:f6:
         af:77:9c:03:cd:04:d3:39:fd:a7:23:7f:de:86:e7:45:c9:1c:
         b0:c4:e8:a5:8f:ae:91:4c:af:1b:a4:f7:cc:25:04:94:9f:d1:
         b3:52:a8:55:04:93:c0:bf:5c:7e:ad:51:9b:b6:0b:d1:2a:be:
         e2:47:f2:09:05:25:21:25:37:9e:d6:e1:69:71:cd:a9:cc:ba:
         07:de:c3:b8:fb:19:2b:44:0e:96:09:a7:bf:2d:95:f0:16:f7:
         41:76:b1:c0:3d:7a:fd:32:ef:02:19:45:10:b9:ba:2a:12:07:
         89:67:4a:a8:95:50:08:29:54:a9:1d:ce:83:48:4f:4d:61:cb:
         18:70:a6:07:fa:36:0d:9a:62:28:78:74:71:e8:52:d9:44:ce:
         29:a1:37:a0:4b:c5:c9:42:99:3a:06:6c:e1:d8:5b:e8:a8:29:
         37:64:73:96:1a:b5:af:25:a6:c7:f5:75:7f:49:34:f4:75:ed:
         2a:7a:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:23:08 2024 by rpki-client on console-fra.rpki-client.org