Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
File:                     Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft (raw, json)
Hash identifier:          Q8jb1A4u9/NwSKAj6R0wRQLzQkkeIcXcnq5esBjbsU4=
Subject key identifier:   90:22:48:82:80:63:5B:FF:66:54:F4:F8:5B:DB:27:E8:99:CE:77:27
Authority key identifier: 16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
Certificate issuer:       /CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Certificate serial:       018F4DFEE84237E089130F505B4FE206C577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
Manifest number:          10E8
Signing time:             Mon 06 May 2024 13:01:42 +0000
Manifest this update:     Mon 06 May 2024 13:01:42 +0000
Manifest next update:     Tue 07 May 2024 13:01:42 +0000
Files and hashes:         1: Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl (hash: rkwLnfIrKOjvBjqW5JTHkwM2qBIN/pRI9G8WRqpaDG0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:fe:e8:42:37:e0:89:13:0f:50:5b:4f:e2:06:c5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
        Validity
            Not Before: May  6 13:01:42 2024 GMT
            Not After : May  7 13:01:42 2024 GMT
        Subject: CN=9022488280635bff6654f4f85bdb27e899ce7727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:57:76:64:53:11:b8:dd:5c:75:59:c9:b6:
                    6b:e0:ad:74:38:f8:c3:28:b8:3a:01:48:f0:57:80:
                    47:da:0b:d2:96:cb:a0:52:3b:52:36:0f:8c:f3:ef:
                    79:d5:1c:0b:c6:82:3f:f8:00:ed:3c:6e:42:eb:e9:
                    60:9e:f2:c5:02:a0:12:59:aa:0a:b9:9f:06:10:b3:
                    55:9d:59:a0:a7:1c:10:08:49:81:05:0d:0b:bf:c6:
                    26:0c:8c:2c:70:7f:37:1c:dd:da:36:5a:b5:86:6e:
                    78:fd:bc:15:51:0f:a1:55:fb:91:5b:c1:c4:ee:1b:
                    18:14:a6:69:7f:6c:f9:46:5b:03:85:59:42:23:51:
                    e5:c6:0a:be:63:81:4a:76:95:bc:76:dd:fc:7e:51:
                    f8:b6:10:f8:2e:fb:95:61:7a:30:8e:b4:02:bd:ce:
                    ed:3d:2e:80:18:4e:38:d9:e8:90:aa:db:fd:50:d2:
                    6b:a7:31:83:41:d5:5d:44:f9:e1:79:76:25:fa:17:
                    3c:b4:dc:94:13:3f:60:ab:bb:78:4e:39:bc:99:01:
                    bf:8a:c3:8f:13:22:df:4c:67:8a:d5:7e:91:28:cf:
                    ab:d5:c2:f2:3a:06:20:b5:27:e6:71:7c:28:1d:e8:
                    5b:bd:87:72:4c:69:d3:6b:3c:0c:22:c6:fb:d6:a8:
                    0f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:22:48:82:80:63:5B:FF:66:54:F4:F8:5B:DB:27:E8:99:CE:77:27
            X509v3 Authority Key Identifier:
                keyid:16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:3d:4b:0f:c3:58:26:90:de:e4:6f:69:c4:3a:ac:9b:97:bf:
         62:6c:34:d1:52:3e:c9:df:d7:02:c3:f4:56:ce:f1:1b:e5:0b:
         33:64:6f:3a:1e:16:07:ca:5b:e1:19:01:29:3d:3c:c1:6b:a3:
         9f:3f:88:5f:ce:45:02:5d:c2:87:8d:e2:f2:c0:52:c2:6c:06:
         97:44:51:84:09:77:6c:7d:96:a5:46:ae:de:3e:7c:53:da:8a:
         2b:7e:8c:3b:ef:2b:d3:fb:67:32:bf:c7:ba:2f:f1:87:3d:17:
         9d:29:97:f0:cb:88:a1:2d:24:ce:b7:ff:2a:c9:35:34:bb:6a:
         14:68:0a:18:7f:d1:ba:e4:b9:1f:d6:b4:1c:b8:21:7c:63:af:
         2b:b7:56:2a:37:e3:c6:5a:57:a0:aa:f5:b7:32:43:ae:02:76:
         c1:f4:b0:82:9c:fa:73:8b:6b:c4:63:e1:f1:c0:da:ae:54:aa:
         7e:2d:b6:37:96:53:db:82:c7:51:22:97:f8:61:5e:a5:17:10:
         a7:1b:58:e4:5f:bd:c3:81:3c:a8:02:2f:7d:00:9a:34:df:dd:
         77:05:0d:3a:b3:a6:6c:ba:7f:0a:3d:c2:63:2c:ab:eb:67:47:
         a7:ce:c1:58:73:82:cf:d2:63:c4:09:4e:93:50:92:9f:80:dc:
         1e:15:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:52:50 2024 by rpki-client on console-ams.rpki-client.org