Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
File:                     kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json)
Hash identifier:          tcV5l+7yuZMucxPE+0G4rOq61JW8LQjnFs8sNvRcR8Y=
Subject key identifier:   3F:5A:52:89:C7:29:27:60:95:47:2A:34:69:CF:47:FE:80:55:BE:E2
Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
Certificate issuer:       /CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Certificate serial:       018F8823F6108AFFB7792D3B9E1895AB4D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 20:00:09 +0000
Manifest this update:     Fri 17 May 2024 20:00:09 +0000
Manifest next update:     Sat 18 May 2024 20:00:09 +0000
Files and hashes:         1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: AQqwILgnjJRIhB3/eMQTCCVqCLbI8eSgZ0O6elTJDQU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f6:10:8a:ff:b7:79:2d:3b:9e:18:95:ab:4d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c
        Validity
            Not Before: May 17 20:00:09 2024 GMT
            Not After : May 18 20:00:09 2024 GMT
        Subject: CN=3f5a5289c729276095472a3469cf47fe8055bee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:f7:88:06:cd:cd:6c:1e:61:9d:a2:ac:da:
                    ae:84:f3:2f:fb:b4:f3:41:29:ad:b5:68:29:33:de:
                    ee:16:a4:39:dd:03:a7:41:be:17:59:57:4f:00:cc:
                    a0:c6:42:d3:09:52:91:d0:68:b4:89:05:0c:61:42:
                    5e:b2:09:2b:8e:42:b3:72:af:f3:a4:88:4e:0d:fb:
                    d6:05:60:7b:3d:62:f7:98:1d:60:2c:3b:0e:ca:7c:
                    7e:14:e5:b2:09:c1:75:23:05:ae:a1:49:18:4c:aa:
                    4c:b9:c9:ce:11:2b:93:58:82:85:0b:24:25:73:c7:
                    07:9e:28:12:f1:fd:ec:f5:c6:7c:3e:ea:f9:0d:1a:
                    bb:49:1c:3e:0f:e0:0b:6b:91:f0:e4:eb:0e:97:4b:
                    fa:cd:0e:62:2b:ef:d7:f7:6b:12:d5:dd:47:ec:1c:
                    3d:7b:ba:e5:03:21:08:be:2b:20:81:f2:ee:3b:d7:
                    82:5b:0b:aa:56:23:6d:59:7a:76:b3:39:c2:30:ed:
                    8f:b4:67:d0:0a:ca:7c:32:26:33:99:c6:ec:0a:d3:
                    c0:01:e4:34:44:23:a3:33:c6:8b:6a:d5:97:62:f8:
                    f9:7e:2e:96:d6:99:84:ba:94:2e:ac:8c:f7:a7:6a:
                    28:04:d4:c2:53:15:c5:5d:f5:7b:73:e4:24:50:bd:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5A:52:89:C7:29:27:60:95:47:2A:34:69:CF:47:FE:80:55:BE:E2
            X509v3 Authority Key Identifier:
                keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:e1:4f:a0:27:e0:7e:90:5e:eb:71:a9:b0:7e:c1:f1:5a:e3:
         37:2c:37:2f:f2:00:58:31:10:11:de:4e:cb:d7:17:fe:82:69:
         e2:ca:72:38:a8:2d:e4:5f:76:fe:fc:0d:4f:3f:15:62:a1:a0:
         3e:55:61:57:6e:49:7d:e3:ef:b8:c8:d7:30:fb:4b:17:c6:fb:
         e1:2b:91:8c:7b:2f:85:22:e4:a2:53:51:ed:5a:38:42:08:10:
         8a:9b:8f:b7:b4:bb:ca:cd:90:7c:9c:7e:ba:50:3e:7e:5d:ba:
         32:b6:85:1d:80:e0:9c:f1:c8:70:4d:b1:18:1d:24:e7:de:08:
         13:b5:db:3e:5c:a8:35:ad:a1:9d:2b:08:5f:c4:66:ee:11:6a:
         b5:1b:5d:09:16:7c:ac:d2:09:04:8c:71:23:87:44:d8:1b:3e:
         f5:62:48:44:70:84:5c:90:be:80:a1:bd:2b:4f:8d:ab:7f:f8:
         e7:75:f5:e9:ea:ff:d1:7c:29:11:dd:9d:e8:ce:89:2d:3d:4e:
         6f:54:4e:0f:bb:c6:f2:04:e4:e3:b6:40:63:83:4c:5c:2f:d7:
         9b:b2:08:66:d8:cb:3e:7d:47:75:10:ca:6f:2f:df:ac:47:57:
         76:70:f2:35:e0:c9:93:ee:b9:f3:b8:88:eb:96:ca:ec:11:27:
         36:41:ba:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:23 2024 by rpki-client on console-fra.rpki-client.org