Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File:                     V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier:          zX7NLED7bACSkrZX8q01dRPjKVBtNZwHjBCkGushofA=
Subject key identifier:   94:EA:09:C4:0F:13:87:B3:C4:56:4F:F9:9E:A3:AC:CA:E5:AA:29:F0
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer:       /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial:       018F874A4EE279A75B6BABFF9CB393A0680E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:02:24 +0000
Manifest this update:     Fri 17 May 2024 16:02:24 +0000
Manifest next update:     Sat 18 May 2024 16:02:24 +0000
Files and hashes:         1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: 0+iu/Fy3M5YciKht674ZHvOTjhzGmb/1JQljHk5n8ts=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:4e:e2:79:a7:5b:6b:ab:ff:9c:b3:93:a0:68:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
        Validity
            Not Before: May 17 16:02:24 2024 GMT
            Not After : May 18 16:02:24 2024 GMT
        Subject: CN=94ea09c40f1387b3c4564ff99ea3accae5aa29f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:21:35:53:2f:0b:4d:15:73:95:c4:06:3e:
                    86:98:97:a2:9e:ac:da:5f:96:ff:01:2a:1c:54:59:
                    4d:70:f8:8a:72:e7:84:d0:05:30:2b:9f:5a:f9:2d:
                    c8:19:4f:f0:c5:b1:44:50:8f:be:97:97:f8:2b:01:
                    09:17:77:01:b9:cd:87:56:4e:1b:36:b5:60:79:83:
                    7c:83:e5:9f:80:bb:68:a3:d5:04:9b:6c:01:8f:22:
                    3b:b5:c1:c4:e9:0c:90:c9:14:5b:2a:af:85:00:83:
                    7c:e6:30:40:6a:2b:ba:61:1d:16:6b:54:34:cc:90:
                    8f:57:ba:73:9c:64:16:80:68:3f:da:87:c4:ae:71:
                    2e:66:3f:1d:10:38:cf:2c:d9:2d:d0:81:9e:19:8f:
                    6c:7d:34:98:6a:c4:07:b0:19:43:91:11:20:cd:a2:
                    c7:b9:46:f4:07:56:73:ea:84:88:17:d1:4a:78:22:
                    35:47:b7:05:5e:b3:3f:9f:1f:8f:4b:b1:4e:63:59:
                    50:98:13:7d:58:b3:15:b5:31:8f:bc:f2:72:53:7d:
                    b2:a7:1d:79:0c:c9:f6:d3:02:56:20:93:ef:28:7f:
                    4a:b9:7b:0e:04:0b:16:15:c0:51:e4:eb:fc:23:76:
                    28:fc:2c:2a:e1:ea:30:94:b9:a1:3c:a8:60:9b:a3:
                    ce:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EA:09:C4:0F:13:87:B3:C4:56:4F:F9:9E:A3:AC:CA:E5:AA:29:F0
            X509v3 Authority Key Identifier:
                keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:69:7b:68:be:15:7e:21:1b:22:8a:03:09:88:e8:09:78:d0:
         15:73:de:63:38:0b:13:6a:8f:35:29:4a:a7:ad:ce:57:4c:80:
         2b:ab:a0:0a:8a:00:1a:96:44:05:d4:3c:27:68:9a:c2:71:b1:
         54:be:52:30:2c:d3:9f:29:5d:7a:02:5e:0a:45:dc:bb:f6:cb:
         a8:10:80:81:99:b1:f5:2c:04:98:81:fe:66:c4:91:01:2a:6c:
         9b:64:12:e9:48:f6:b0:49:61:91:c1:c2:82:6c:95:91:98:c5:
         39:d1:cd:28:e2:ef:6f:64:eb:de:da:a2:d8:fa:2c:e7:b6:6b:
         d0:c0:52:5e:98:20:57:f8:c1:11:92:77:bc:a0:0b:9d:5a:5f:
         b4:d4:79:e1:8d:f4:0d:84:0b:ad:6c:a0:38:46:ef:c9:9a:02:
         11:0c:66:3f:46:0c:80:d1:ac:8b:f6:52:b5:45:9f:13:6b:bc:
         53:a8:b5:0c:31:04:f5:9e:03:ab:32:08:9d:47:41:26:bf:a8:
         07:1e:d1:8a:7d:da:69:56:1d:20:f2:54:a3:00:3a:8f:dc:d4:
         47:53:2b:81:34:6d:00:09:b8:6e:32:b6:03:9f:b8:80:0b:38:
         95:83:ee:aa:16:6c:d4:c4:ce:30:10:97:ef:c5:ce:0a:33:7a:
         68:fd:bc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:09:09 2024 by rpki-client on console-ams.rpki-client.org