Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File:                     gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier:          xVzAuRtoX7uCC9oc+1nc3U8llaN/Tce3E+4WqCSa6M8=
Subject key identifier:   48:7F:B3:A5:26:7C:F3:29:B6:16:FE:3F:31:BF:F7:E3:56:75:C7:41
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer:       /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial:       018F874950201CCCA83710F4007BD9532391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:19 +0000
Manifest this update:     Fri 17 May 2024 16:01:19 +0000
Manifest next update:     Sat 18 May 2024 16:01:19 +0000
Files and hashes:         1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: UEtBquTnSVCW/rshIiPtSKEtBMg7wqGb4lWcxratIEs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:50:20:1c:cc:a8:37:10:f4:00:7b:d9:53:23:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
        Validity
            Not Before: May 17 16:01:19 2024 GMT
            Not After : May 18 16:01:19 2024 GMT
        Subject: CN=487fb3a5267cf329b616fe3f31bff7e35675c741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c9:22:37:71:55:5e:4f:e0:79:13:44:03:b6:
                    cf:3b:88:bd:b3:1e:b6:0b:6c:26:25:fd:4d:8e:f7:
                    27:ce:7d:a9:26:20:bf:4b:dd:60:b4:92:45:26:bd:
                    18:96:1b:98:0c:45:4b:7b:1c:0c:99:40:a9:7a:08:
                    e7:9d:2d:f2:7b:fc:a6:a9:ad:33:e5:5d:c1:a3:d5:
                    ac:0e:b6:49:41:aa:9a:de:ce:73:06:88:40:4f:21:
                    24:d1:52:c5:1c:9a:ae:01:ad:d3:37:9d:c6:71:61:
                    96:74:b0:4e:18:f3:7d:bd:00:a7:fe:f8:e8:bc:68:
                    aa:33:56:11:37:c5:d6:3b:64:66:de:e3:38:ba:d4:
                    05:8f:28:76:fc:18:5d:0f:b6:c4:9e:3f:52:6f:a5:
                    93:37:8a:de:d1:f9:3f:f7:bf:37:83:64:87:77:6f:
                    31:51:8f:06:1d:3c:c1:3b:1b:28:0a:9e:2c:c9:f9:
                    4a:71:d6:d9:60:af:86:f0:1f:1f:7f:bc:9a:bd:26:
                    c6:fa:85:5e:68:83:bb:dc:e8:a1:d6:65:b9:c4:b8:
                    30:ef:aa:c7:da:93:b4:5e:6a:1a:3b:c2:ae:16:ab:
                    e5:7c:dd:a7:77:e2:4a:80:69:02:d8:1b:09:5d:f1:
                    c3:e7:41:c3:f9:74:b6:20:06:4e:7d:a0:39:a5:7c:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7F:B3:A5:26:7C:F3:29:B6:16:FE:3F:31:BF:F7:E3:56:75:C7:41
            X509v3 Authority Key Identifier:
                keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:11:21:c0:a8:22:c7:c2:93:72:f2:84:ef:4d:6c:cd:a1:3b:
         8d:d7:cb:9b:d1:0a:53:6a:49:24:d2:b1:3f:0e:bb:61:47:8b:
         8c:21:b4:35:83:3b:19:8f:f5:4f:c8:60:16:98:4b:f6:eb:de:
         76:56:d5:d1:e0:03:8c:19:85:47:ea:2d:3e:2c:fb:49:e4:be:
         08:79:b2:87:29:96:e7:bd:ee:bd:3d:72:e0:43:4a:ff:dc:54:
         20:d7:a7:4b:a6:a0:57:a2:e5:c6:9e:07:9f:a4:7c:7d:a1:99:
         bd:47:86:35:75:0c:4f:d0:d4:64:b7:40:ba:48:02:6d:75:e4:
         95:2b:1b:de:03:02:c7:c9:f3:af:b6:c5:4e:84:e4:28:94:75:
         27:3d:09:48:ee:34:e2:d7:e7:94:bf:87:bf:de:53:52:f7:e4:
         1c:02:6e:30:1c:50:05:dc:51:88:91:e4:ca:4e:c0:53:cb:0f:
         f6:64:6d:4e:a0:d8:00:28:78:8e:8d:de:6d:b6:85:10:52:5f:
         99:18:ad:13:2e:e5:b0:45:9d:19:7b:53:f4:f1:8f:ab:b2:41:
         9e:e2:28:52:89:0f:d4:4e:49:17:39:da:a9:7d:2f:d6:d6:d9:
         43:d0:88:ce:37:cf:47:59:71:dc:84:5e:4c:62:c8:52:d5:10:
         40:45:ca:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:05 2024 by rpki-client on console-ams.rpki-client.org