Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File:                     Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier:          Z6B5qldqQzOCJ0QVGZlqKlZXThTsMzSJpIKKZsZOIKg=
Subject key identifier:   55:98:1D:41:F3:2C:CD:87:30:09:3C:A8:C7:D7:37:0B:1F:CF:89:4F
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer:       /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial:       018F87ED54694133B44841997BE0A178AE64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number:          0237
Signing time:             Fri 17 May 2024 19:00:28 +0000
Manifest this update:     Fri 17 May 2024 19:00:28 +0000
Manifest next update:     Sat 18 May 2024 19:00:28 +0000
Files and hashes:         1: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: 1gI/8inRCMxdZK+JxssUL5x0/6jYZjShlOE8W18Fwbo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:54:69:41:33:b4:48:41:99:7b:e0:a1:78:ae:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
        Validity
            Not Before: May 17 19:00:28 2024 GMT
            Not After : May 18 19:00:28 2024 GMT
        Subject: CN=55981d41f32ccd8730093ca8c7d7370b1fcf894f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:f6:4d:1f:4b:c8:3e:b1:d8:27:df:49:dd:
                    fb:0c:26:71:98:03:3c:b0:80:53:3e:72:f1:15:0a:
                    6f:cb:33:cc:1c:1b:83:17:2f:62:f6:bf:4b:0e:b0:
                    6b:1c:08:d6:97:b4:14:c9:10:01:b2:79:6a:d8:0a:
                    9a:43:30:a9:e5:2b:d6:27:bf:8b:39:9b:b3:94:ca:
                    f8:aa:6a:bb:c7:45:fd:54:cd:2e:78:23:df:e8:29:
                    46:30:ae:f1:c8:c5:f1:ac:78:53:9d:19:6b:f9:05:
                    d4:a4:2a:a9:b9:88:34:39:af:cd:3e:2e:05:73:30:
                    a9:00:a2:2b:20:a3:8a:60:2c:a4:eb:5d:12:60:e9:
                    64:06:10:a8:24:c8:10:51:ec:33:d6:fd:a6:dc:2f:
                    91:ad:6f:6d:99:1b:ac:29:a6:f0:8b:a1:b8:fa:26:
                    47:ee:e8:5c:4a:f3:c9:e1:17:85:f8:cf:1f:59:c3:
                    82:dc:b0:04:90:fe:23:9b:31:ea:91:89:bd:d5:ff:
                    19:21:87:8a:b7:c8:60:c4:3e:bd:6f:4a:68:76:54:
                    c6:65:6a:50:47:4c:21:24:1f:08:2c:b6:32:c5:cd:
                    ef:dc:0e:91:18:ff:66:27:9a:56:f5:55:56:64:b1:
                    a4:ba:73:43:cc:26:0f:46:68:8c:54:a6:44:01:76:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:98:1D:41:F3:2C:CD:87:30:09:3C:A8:C7:D7:37:0B:1F:CF:89:4F
            X509v3 Authority Key Identifier:
                keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c7:df:53:c7:19:a3:3a:12:9d:1e:18:7b:cb:67:91:86:33:
         13:16:68:2e:17:70:66:26:60:cf:7d:fe:f3:ba:63:a8:18:58:
         25:96:8c:1f:db:ae:f3:52:bf:be:22:8c:d1:e1:55:c0:fb:3d:
         7c:12:4f:51:ab:0f:c3:3d:88:2e:e9:6c:0b:81:f1:d3:56:b3:
         be:76:33:52:fb:e0:9b:e9:18:93:a2:65:cd:ac:74:70:1c:f8:
         2c:b6:9f:1c:02:f5:a3:6a:6b:35:97:8c:fb:a7:b9:0d:62:46:
         be:04:dd:a5:ca:43:56:1e:53:e7:97:9f:ce:5e:65:d5:01:50:
         2c:28:d2:ae:25:e1:03:da:92:9a:3f:57:a8:74:e3:be:4a:ad:
         ed:a1:f4:d7:9f:6c:dc:d9:08:87:8c:a8:cd:65:e9:32:1e:70:
         a1:e2:c7:56:ca:91:ba:07:de:28:3c:30:60:02:c8:0a:44:79:
         2c:ea:37:e0:d1:c3:60:47:7f:64:16:31:25:92:5c:d0:c8:05:
         88:91:57:a2:78:71:50:be:c8:83:ed:f9:7d:cb:3a:91:45:8b:
         55:cc:17:e5:9d:22:09:93:46:ed:0b:09:35:c2:f7:d3:82:82:
         0a:a3:82:71:04:aa:1a:8c:ab:c3:fe:8b:52:68:fa:52:9b:21:
         9c:b5:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:44 2024 by rpki-client on console-ams.rpki-client.org