Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File:                     FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier:          N2l0peNoXipqI7yYQulrUjJmBX/pn2ObGcAZh5Pn084=
Subject key identifier:   87:D8:C9:89:B6:8D:2E:2D:2C:9A:FE:B8:FB:8E:19:89:39:9A:4C:1D
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer:       /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial:       018F41C4F5907C745B307A877C865DD62E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number:          073F
Signing time:             Sat 04 May 2024 04:02:57 +0000
Manifest this update:     Sat 04 May 2024 04:02:57 +0000
Manifest next update:     Sun 05 May 2024 04:02:57 +0000
Files and hashes:         1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: z7KaVny288QKKaBs9AEH21+jd9a4ci9f3duy5Ac7RYE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:f5:90:7c:74:5b:30:7a:87:7c:86:5d:d6:2e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
        Validity
            Not Before: May  4 04:02:57 2024 GMT
            Not After : May  5 04:02:57 2024 GMT
        Subject: CN=87d8c989b68d2e2d2c9afeb8fb8e1989399a4c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:56:3b:62:bf:03:b7:69:9e:62:ea:11:df:77:
                    07:97:61:e2:0b:a3:76:2d:3b:01:8c:52:c5:3b:3c:
                    29:d3:04:30:c8:66:76:8f:71:aa:0a:a9:60:f9:4b:
                    eb:bd:c7:0a:fb:ba:74:af:6f:08:54:4b:a4:8d:d0:
                    72:75:a4:59:66:4b:84:5c:f0:3a:91:dd:f7:bd:8b:
                    2c:38:21:75:1d:41:6f:14:af:48:59:57:cd:19:07:
                    d9:48:a7:d6:9b:3c:70:b7:ae:21:41:40:36:e7:39:
                    e9:81:39:8a:c3:bf:4c:fd:1c:3c:ea:bc:7f:50:5d:
                    3a:67:06:36:f7:03:c4:18:1b:98:99:f7:fe:51:7a:
                    bf:88:87:a9:ed:0c:d5:30:9c:61:06:b8:05:35:a5:
                    1f:71:cc:84:4f:d0:c0:23:79:06:09:97:2a:20:c0:
                    a9:43:5c:6b:e1:2a:9d:8d:5e:c5:01:48:c8:c4:a3:
                    3e:e3:56:0d:fc:06:19:df:77:e9:b2:c4:c4:24:ef:
                    5f:c5:4d:2f:05:af:f3:a8:1b:82:2f:3f:9d:b9:fe:
                    dd:41:49:72:d7:45:f8:9e:57:fd:af:80:3c:2d:98:
                    49:1a:2d:10:f2:4a:9a:80:2c:cd:5c:a8:ed:af:73:
                    4e:d6:21:11:74:c7:5b:26:fe:3b:b3:5f:a6:7e:57:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D8:C9:89:B6:8D:2E:2D:2C:9A:FE:B8:FB:8E:19:89:39:9A:4C:1D
            X509v3 Authority Key Identifier:
                keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5c:3c:50:c8:be:f1:e4:25:ec:93:d5:89:35:9a:a6:9c:64:
         4c:3c:a4:2e:d2:53:9c:5a:10:84:42:85:33:05:ff:32:c7:62:
         9c:08:95:b9:68:9e:00:9c:6c:43:07:f6:8a:34:87:e5:64:58:
         83:83:1e:04:f4:b7:80:b9:a9:dd:80:cc:56:bb:26:3f:93:13:
         7d:08:a9:ba:60:4e:12:56:9d:f7:a0:4a:60:53:79:33:5b:4c:
         86:9c:36:ce:24:2f:fb:aa:21:63:7b:5c:a9:16:48:8d:8f:4d:
         e0:5a:4a:8e:e1:c5:39:05:b9:fa:f1:11:f6:40:ba:7d:98:d1:
         a4:25:d0:39:61:40:0f:3a:f1:6e:a2:4d:b3:e0:a6:32:d2:43:
         c6:45:50:0f:de:67:f4:2c:90:95:ca:52:b8:a1:a9:7c:43:a6:
         dc:ce:8f:73:e6:ad:aa:1a:37:82:20:cf:77:82:63:ba:73:4f:
         62:36:7d:e0:de:e9:07:5d:b1:4f:a8:a2:44:02:f1:6e:bd:08:
         2c:26:de:4e:b2:49:fd:6a:9b:17:6a:8e:b2:51:23:bd:cb:85:
         f9:e8:12:3b:23:ff:65:d7:5c:81:47:1f:f9:ce:6d:a6:5a:86:
         b5:2a:4e:d4:95:07:cc:a0:c2:8a:db:c3:13:32:48:61:db:06:
         16:e7:21:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:12:19 2024 by rpki-client on console-ams.rpki-client.org