Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File:                     qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier:          eKJSPfWHBp66oD9gY4NOXx0GeIyWi5rxMdMHNd+75Dg=
Subject key identifier:   E9:B5:23:84:66:D8:40:04:A0:05:84:D9:AB:06:F0:74:54:AE:A9:C7
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer:       /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial:       018F87ED4C0CB4518CFC6413049C5F62BAE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number:          01AB
Signing time:             Fri 17 May 2024 19:00:26 +0000
Manifest this update:     Fri 17 May 2024 19:00:26 +0000
Manifest next update:     Sat 18 May 2024 19:00:26 +0000
Files and hashes:         1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: 9Up65fdEEh/RViFQlyLxDe+xLDfKjLk9vbi6s2qYeEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:4c:0c:b4:51:8c:fc:64:13:04:9c:5f:62:ba:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
        Validity
            Not Before: May 17 19:00:26 2024 GMT
            Not After : May 18 19:00:26 2024 GMT
        Subject: CN=e9b5238466d84004a00584d9ab06f07454aea9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:0b:d2:6c:04:a8:3a:96:0c:4b:aa:92:f5:
                    21:01:20:d1:8f:c2:49:dd:28:39:ba:07:a3:16:9a:
                    04:44:20:c1:54:d0:64:dd:98:b8:3c:22:45:0f:9e:
                    ee:b2:dc:f4:fe:5c:70:94:0e:a6:09:9d:b1:3d:9a:
                    b5:ab:03:44:06:7a:de:18:1e:6e:c2:bf:3f:7b:7b:
                    e5:54:b4:96:13:1d:f3:cf:19:aa:85:b0:93:3d:1f:
                    15:6e:ed:d5:28:35:e0:1e:48:7a:22:9b:06:13:0e:
                    bf:11:2f:14:78:e4:56:27:e3:bd:96:b8:8b:92:c5:
                    5a:95:6f:ed:9f:ea:ee:27:ef:3f:e1:49:b9:e3:38:
                    e9:52:b2:a1:97:b9:03:27:c2:c8:74:f8:39:fc:c0:
                    9a:46:bc:0c:40:59:19:e5:57:57:81:5c:a0:62:0f:
                    55:d7:44:ee:3a:f2:68:9b:18:9a:c0:1e:0c:dd:01:
                    2a:c8:31:02:a3:0d:9e:55:bf:bb:9a:b6:2b:26:ff:
                    dc:f2:f7:a2:05:ed:ce:93:8c:2f:16:e2:85:d6:1a:
                    de:3a:cd:29:cb:58:20:e3:83:8a:97:99:e7:ba:ad:
                    8b:14:00:94:0e:6b:6e:56:b3:26:bd:f6:cc:76:c5:
                    7a:93:32:65:62:80:c9:73:3d:cc:22:59:9d:7a:b5:
                    77:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B5:23:84:66:D8:40:04:A0:05:84:D9:AB:06:F0:74:54:AE:A9:C7
            X509v3 Authority Key Identifier:
                keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3f:0c:cb:57:b1:b8:20:c3:59:6c:60:88:13:e2:96:fa:e6:
         75:c5:0d:3d:ea:db:a7:59:0b:1c:e6:a8:9e:fa:01:a1:4b:eb:
         21:34:5c:5c:7a:3d:eb:fc:12:1f:59:8f:1a:38:11:8d:ca:27:
         1d:f9:9f:71:ef:06:6c:a4:6e:d6:99:2e:ba:67:83:50:96:7e:
         29:53:ac:36:5d:47:7b:4f:68:73:fd:99:e0:22:4b:7a:f0:90:
         f1:48:da:33:df:6a:52:e5:1d:74:ee:08:19:fb:8e:07:39:41:
         8b:61:90:66:ea:14:74:6b:b3:b9:eb:44:01:e2:9e:e2:8f:1d:
         c8:9e:4d:bc:a3:2c:63:bf:e2:3e:05:39:2e:23:fe:c7:8c:89:
         21:0d:e4:74:91:31:55:88:5b:40:db:6f:ab:b7:dd:95:75:a5:
         47:7a:95:ab:07:ba:cb:08:37:b0:c6:ba:69:d1:b0:b4:1a:25:
         24:54:92:79:bc:3d:0d:59:aa:d6:bd:6e:49:d0:9a:1b:16:cf:
         60:3e:2a:49:15:86:c3:c6:80:f3:57:e7:30:44:f1:47:65:02:
         61:f7:62:74:da:15:72:65:31:52:81:5f:65:b1:f9:17:5f:06:
         18:a2:ff:b5:28:b7:a1:56:3d:b1:ea:57:f3:40:fb:ea:6e:94:
         ad:69:c2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:17:03 2024 by rpki-client on console-ams.rpki-client.org