Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File:                     l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier:          WadEx1pyyrgZXrstBAjJyPHkVaAGMEgqXG+u1/399to=
Subject key identifier:   43:28:8C:9F:69:3D:0D:B7:08:E2:93:0B:03:A8:98:BA:36:EB:AE:ED
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer:       /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial:       018F874B10E08DD4B83484C1EDFF703F99BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number:          017C
Signing time:             Fri 17 May 2024 16:03:14 +0000
Manifest this update:     Fri 17 May 2024 16:03:14 +0000
Manifest next update:     Sat 18 May 2024 16:03:14 +0000
Files and hashes:         1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: EkDhIVhyrbRd+2nBV7zrc0C5y5Oqhh5FoEp1IwAVx40=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:10:e0:8d:d4:b8:34:84:c1:ed:ff:70:3f:99:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
        Validity
            Not Before: May 17 16:03:14 2024 GMT
            Not After : May 18 16:03:14 2024 GMT
        Subject: CN=43288c9f693d0db708e2930b03a898ba36ebaeed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:a3:ea:48:97:b0:9b:90:a8:de:b3:53:e9:
                    79:01:19:7f:39:e1:02:50:8f:41:da:06:0a:af:4a:
                    4b:98:39:4b:85:42:f9:9f:0c:b1:94:c2:f1:81:40:
                    e7:37:5d:b3:ce:8b:f0:e0:34:03:29:ec:c8:a5:75:
                    25:fb:2b:b6:c6:32:a6:c4:21:aa:f9:4a:c3:20:0f:
                    a5:66:1a:ce:85:7a:04:e8:6d:48:d9:1d:95:9a:d9:
                    1f:03:92:65:63:24:af:e5:35:1f:04:e1:66:f0:b0:
                    9b:ea:09:64:91:e6:37:e2:44:00:19:8e:cd:cf:8d:
                    1e:c4:41:d2:b6:69:04:f4:fa:b2:aa:23:31:5f:77:
                    13:e9:c8:cd:55:1d:c3:f5:13:bf:80:0a:22:89:0a:
                    23:5f:85:4b:86:ea:37:ad:84:ff:6d:0f:1a:5b:63:
                    9d:45:54:ad:45:0f:e1:f4:8c:4d:97:29:43:86:74:
                    42:f7:53:84:f9:6c:39:a7:67:ba:5a:64:28:d7:44:
                    83:ba:73:18:06:ec:20:ce:5d:bb:c1:d1:7a:2d:c0:
                    3b:3e:2a:99:db:9c:27:8d:48:34:7f:b3:cd:d9:ce:
                    9c:06:d9:9c:32:a8:3a:92:32:a3:ef:bc:53:94:f9:
                    37:5f:68:86:ba:be:01:a7:46:9b:71:79:34:58:96:
                    f5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:28:8C:9F:69:3D:0D:B7:08:E2:93:0B:03:A8:98:BA:36:EB:AE:ED
            X509v3 Authority Key Identifier:
                keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:91:09:f2:08:af:68:74:ca:6f:36:c0:5f:68:46:f5:fa:c9:
         7d:e7:3e:d6:7a:d7:e1:b7:1e:5c:70:fb:94:0b:c1:33:22:24:
         57:03:b8:29:2e:60:15:93:9e:8d:20:1b:7a:3e:65:d9:bf:48:
         bb:28:1a:12:58:0a:29:4f:6b:a0:d0:df:b9:5a:c4:c8:45:55:
         11:57:ef:9a:10:0d:fa:54:06:d6:62:4f:6a:9e:46:41:55:2d:
         9a:a4:47:25:06:73:2e:6b:71:1e:45:5d:cf:cc:1d:b6:66:2d:
         da:94:7e:fc:f1:fd:7e:99:11:94:04:08:90:b4:85:56:b1:c4:
         c7:69:5c:a4:7f:67:e6:be:90:d0:73:c0:de:bc:16:97:8c:70:
         bc:4c:e7:c1:0d:d8:ab:e9:0c:55:86:05:ca:eb:3c:ca:1b:81:
         42:54:07:e9:8b:7a:89:30:57:d8:80:97:bf:41:44:e1:06:03:
         23:0d:9b:d4:79:71:5e:02:76:c1:7e:ce:a0:d2:c2:a6:d0:67:
         33:cc:7c:a0:b7:55:71:31:0f:ea:a8:48:95:ac:3d:3a:d5:60:
         57:f0:0e:91:95:00:76:68:d9:83:7c:e9:7d:a4:86:15:1f:82:
         82:2b:61:05:44:0c:34:69:e4:27:40:5b:04:d8:e3:8c:44:d1:
         22:d2:ab:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:43 2024 by rpki-client on console-ams.rpki-client.org