Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
File:                     xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json)
Hash identifier:          63fM7fWyIXLQP0xql/T2ek1SUwprAJUzTT+7dXqATQE=
Subject key identifier:   6B:DD:C8:2D:0F:0C:A2:68:B8:B1:FF:A8:8F:4A:05:CC:D2:6F:65:41
Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
Certificate issuer:       /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Certificate serial:       018F88249B065618C087AA7133F1DB5A7DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
Manifest number:          01D7
Signing time:             Fri 17 May 2024 20:00:51 +0000
Manifest this update:     Fri 17 May 2024 20:00:51 +0000
Manifest next update:     Sat 18 May 2024 20:00:51 +0000
Files and hashes:         1: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: oy5u6pWKFWO78p/zHQmspHzDFoYqV894MKQHIJJz8O8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:9b:06:56:18:c0:87:aa:71:33:f1:db:5a:7d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
        Validity
            Not Before: May 17 20:00:51 2024 GMT
            Not After : May 18 20:00:51 2024 GMT
        Subject: CN=6bddc82d0f0ca268b8b1ffa88f4a05ccd26f6541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:a8:6e:80:6f:35:09:18:4c:d8:37:dd:f0:
                    a0:1d:52:09:b1:21:df:2e:2a:28:6e:de:b2:be:46:
                    19:47:1e:d6:c8:ed:72:0f:63:fb:79:2a:10:65:c8:
                    8f:f0:6f:28:40:e9:f5:23:29:59:c9:c4:d2:11:bf:
                    20:b7:2b:3a:0c:54:5d:be:5b:45:ef:bd:2b:02:96:
                    41:c0:d9:29:45:ca:5e:b0:55:e9:a5:3b:7a:58:c9:
                    0c:9b:f5:ce:2f:ee:ae:7f:ce:84:d4:fd:15:da:5b:
                    88:8c:af:30:0c:fa:4d:20:54:b5:af:bc:7f:89:0a:
                    24:2e:6c:2d:24:b4:95:8d:59:6f:4a:cd:c6:5a:86:
                    cd:6d:05:fc:5e:8e:4e:0c:b3:29:cf:12:eb:5c:d8:
                    33:ed:dc:13:76:64:64:b6:ab:65:f0:7f:7a:ec:ea:
                    cf:ad:c8:19:f0:d1:9c:f6:f5:40:a0:04:2c:51:9c:
                    2e:d3:5e:e8:16:8d:66:bf:dd:f7:ce:10:46:99:eb:
                    76:34:00:33:7c:d3:5e:9d:be:14:69:73:23:eb:62:
                    d3:8b:05:18:38:02:46:f9:4f:43:75:bc:f3:fa:d0:
                    0e:be:a8:a9:df:a8:d7:1c:52:70:1e:cf:47:33:03:
                    80:53:97:0d:be:88:ec:c4:5a:71:05:b3:47:c5:01:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DD:C8:2D:0F:0C:A2:68:B8:B1:FF:A8:8F:4A:05:CC:D2:6F:65:41
            X509v3 Authority Key Identifier:
                keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:be:33:34:57:08:82:04:f9:ac:d3:05:03:a9:28:93:af:e8:
         75:f6:a4:34:21:3b:3f:f9:c2:2e:98:99:69:2e:d5:8e:82:5f:
         32:cc:cf:5f:7f:7d:42:87:1c:ab:2c:f4:38:ae:94:09:a9:54:
         0a:14:d6:a6:e6:e8:75:f4:30:9e:03:65:14:4a:f9:b2:d6:1e:
         8d:92:40:35:fa:c9:bd:fc:62:f1:fa:aa:29:67:68:06:17:f6:
         69:dc:2d:3b:1a:21:ab:92:9f:ed:2d:d2:db:9e:21:a9:7e:cf:
         84:24:64:99:32:f9:d7:65:08:d7:06:15:f2:26:20:44:df:e3:
         b1:e7:a9:40:82:95:3b:f5:e2:54:58:40:e5:6d:f2:39:cd:ea:
         3c:07:ce:3d:b6:32:54:f6:b6:16:94:e7:12:e8:69:53:21:39:
         3d:44:9b:21:27:f3:02:03:e5:dc:bc:f8:d3:80:15:15:2a:a7:
         3a:83:07:bb:c2:3f:82:2c:9b:4c:81:a6:ba:d5:aa:4b:29:bb:
         23:5d:82:4c:9f:f4:d5:08:d8:a7:c3:6f:0c:00:34:a4:a1:19:
         3b:6f:2c:3b:bb:6a:ec:ec:89:d7:e5:5d:b8:ab:e3:3a:3a:db:
         fa:50:51:ea:49:15:f0:a2:68:6a:7b:cb:f3:39:76:35:8a:f8:
         f4:af:be:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:10:10 2024 by rpki-client on console-fra.rpki-client.org