Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File:                     2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier:          YROvkcmcYAAEcPev3dk19fbFnpzuNHzdVXK4OSTUo7o=
Subject key identifier:   DA:88:FB:57:C7:54:B0:CB:D0:89:60:DE:5D:45:4B:8E:01:0E:54:03
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer:       /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial:       018F430D50573C0085348549959C4A77EFB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number:          1151
Signing time:             Sat 04 May 2024 10:01:36 +0000
Manifest this update:     Sat 04 May 2024 10:01:36 +0000
Manifest next update:     Sun 05 May 2024 10:01:36 +0000
Files and hashes:         1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: ptC6Mz/h9gafbG/YliFKpE8L+F8T/0L5Pjq7qH4TJzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:0d:50:57:3c:00:85:34:85:49:95:9c:4a:77:ef:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
        Validity
            Not Before: May  4 10:01:36 2024 GMT
            Not After : May  5 10:01:36 2024 GMT
        Subject: CN=da88fb57c754b0cbd08960de5d454b8e010e5403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1f:0d:d0:bd:87:88:2f:ee:1f:3a:31:32:31:
                    2e:a2:c9:4e:53:38:f4:41:fe:f3:80:12:1c:a0:63:
                    19:87:01:14:71:26:5a:41:2b:88:1d:cd:79:93:60:
                    34:01:d0:0f:a4:4b:54:1c:d2:6c:43:1d:bb:07:8e:
                    01:38:ad:63:5c:d0:10:5f:ec:ef:e5:8a:f2:72:ce:
                    a1:85:75:4b:cb:a1:82:d1:69:49:5f:66:b4:87:b8:
                    18:f7:7e:ae:a9:e3:bd:83:f8:b0:d8:4d:be:31:93:
                    a4:94:d3:b7:27:62:72:f3:bb:b0:93:c0:27:0e:80:
                    c3:2b:55:de:48:21:bb:67:51:dd:e1:7f:14:c6:29:
                    a0:33:74:52:9e:24:92:83:19:99:0b:fc:f9:29:4e:
                    e4:c6:b7:b9:76:cb:73:7b:72:59:01:85:ad:6d:1b:
                    eb:50:d2:a1:f0:5c:3c:19:83:34:f4:77:62:ff:ca:
                    db:2b:d1:9e:b8:35:47:a3:2b:a2:ab:88:e3:d0:81:
                    da:39:11:14:7b:63:30:eb:db:99:17:28:8b:a6:d4:
                    e0:be:c2:17:04:5a:99:93:a1:3d:cb:fa:d1:bd:27:
                    66:94:e9:e5:09:11:72:e4:5f:93:56:20:11:d3:17:
                    29:37:c3:62:a3:ae:0e:38:cc:52:31:58:bb:2e:2b:
                    d7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:88:FB:57:C7:54:B0:CB:D0:89:60:DE:5D:45:4B:8E:01:0E:54:03
            X509v3 Authority Key Identifier:
                keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:59:3c:ac:6d:9c:46:5d:3d:51:ac:f3:be:20:89:10:57:45:
         49:bf:bb:17:0f:8a:78:88:46:c1:b5:c1:ed:8f:f9:8f:e8:ab:
         da:83:38:ec:e3:37:1d:36:ab:45:63:9f:84:57:b6:08:53:51:
         7c:df:12:3a:f3:1c:8d:ab:b8:5e:88:77:ef:79:13:c8:7b:ba:
         c4:2f:76:0d:25:3b:72:fc:a0:dc:fd:de:94:e4:76:92:7f:d8:
         89:6d:fd:47:0f:c5:86:aa:44:3f:23:13:96:0f:eb:f3:3d:fd:
         0e:4d:94:3a:33:94:9f:c6:ab:dc:46:77:b5:82:b4:ec:38:74:
         e8:8d:b0:b1:2d:6e:11:9b:f6:d4:a2:f5:c9:9f:2e:d1:d7:50:
         c5:d0:13:37:bf:79:94:60:a9:0d:66:27:0a:07:15:30:85:3a:
         1e:ae:0f:99:e0:08:9d:94:a4:84:b8:71:bd:54:ff:4b:3d:d3:
         be:94:51:31:e0:02:bb:27:1d:7f:f9:47:03:b8:cf:47:ff:6d:
         d5:89:28:da:c9:a2:8c:73:46:79:c0:ff:1b:27:66:f7:84:2f:
         de:a7:87:cb:b6:c9:59:4d:25:c0:ab:e7:e0:ac:b4:61:c7:86:
         21:b0:03:56:b0:17:37:ac:a4:84:d9:a9:62:ad:98:49:e6:23:
         0c:7c:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:24:16 2024 by rpki-client on console-ams.rpki-client.org