Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
File:                     FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json)
Hash identifier:          komFvqRhdAqjm18MZ7q/g02J/uNDwuoNIn+VRVROd60=
Subject key identifier:   50:CD:2B:55:50:6E:9C:F1:CF:B2:FC:58:BD:29:1A:3C:60:AA:8F:25
Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
Certificate issuer:       /CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Certificate serial:       018F4EA3CC545D9C98F7F00CA193089AED0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
Manifest number:          1156
Signing time:             Mon 06 May 2024 16:01:48 +0000
Manifest this update:     Mon 06 May 2024 16:01:48 +0000
Manifest next update:     Tue 07 May 2024 16:01:48 +0000
Files and hashes:         1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: ru5DFhS4ClrtFnC0CLloqesOFUjddg1f/Tq7z77Hjt0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:a3:cc:54:5d:9c:98:f7:f0:0c:a1:93:08:9a:ed:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68
        Validity
            Not Before: May  6 16:01:48 2024 GMT
            Not After : May  7 16:01:48 2024 GMT
        Subject: CN=50cd2b55506e9cf1cfb2fc58bd291a3c60aa8f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:af:3b:9f:dd:0a:f4:e9:a3:e2:d3:b7:aa:77:
                    36:37:9b:8c:0c:cc:6b:53:a3:9b:8c:c1:dc:28:16:
                    b3:e2:4c:be:60:02:1c:de:ce:7e:d9:47:56:29:f0:
                    23:8c:36:4a:17:ad:04:57:ce:fb:e6:33:a4:05:16:
                    49:46:dc:1f:ed:62:50:95:d7:c4:1f:3e:b2:a7:fe:
                    6b:86:91:94:8e:df:67:1a:3a:bc:d3:00:f3:f6:a5:
                    0e:7e:4f:e5:8a:fd:4c:0a:26:d6:4e:73:1e:93:cb:
                    e8:ba:68:3f:8c:06:8c:24:9e:17:53:a9:30:9f:f5:
                    2a:8f:eb:0a:c3:10:87:b6:87:9c:3f:f3:02:4a:cc:
                    26:ae:82:d7:06:a3:7b:e4:3f:15:95:e0:0c:f3:3e:
                    2b:1c:17:6b:7b:e7:1c:58:0e:0a:8b:d8:f0:e5:de:
                    94:64:90:90:1b:ef:6f:69:4e:05:9d:25:fd:a9:11:
                    9d:de:89:2e:50:71:95:ad:47:80:d4:35:a2:78:6d:
                    7f:c0:87:40:e4:50:d6:db:fc:a7:e0:69:89:cc:47:
                    14:81:f0:16:80:e7:57:77:6c:14:20:cd:ea:53:a6:
                    3b:5a:9b:19:d0:26:f5:11:d1:70:c0:b7:1c:b6:06:
                    53:7c:ee:a7:18:19:7a:a9:7d:68:f4:e7:b8:dd:bd:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CD:2B:55:50:6E:9C:F1:CF:B2:FC:58:BD:29:1A:3C:60:AA:8F:25
            X509v3 Authority Key Identifier:
                keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:33:ae:d1:bd:9f:f9:b9:6e:d6:a5:86:c0:88:61:3a:49:
         94:4f:4d:8b:27:a9:2d:9c:f7:6f:34:e5:68:b3:f9:a7:87:13:
         83:b5:ff:8d:37:aa:2c:68:49:e8:a7:9f:ce:36:37:7c:8b:54:
         49:26:de:fb:91:b8:23:80:30:36:88:95:78:ed:15:33:96:a3:
         3c:86:95:e8:e9:76:00:14:68:62:e0:a5:2a:74:3f:51:9d:80:
         8b:0e:57:8a:98:b0:15:8a:aa:ae:82:89:48:e4:20:94:51:2e:
         1a:0a:2c:68:a0:c8:49:26:b6:8e:6d:62:52:da:5a:89:1c:39:
         e7:55:28:89:d1:23:73:5a:8f:65:dd:7d:6e:fa:d8:4f:9e:2f:
         7c:a9:39:09:6e:a9:4f:36:5c:7f:50:36:16:7a:c8:6a:9f:57:
         85:bd:91:25:04:d7:32:f1:21:12:d3:70:bb:b0:18:0e:1c:a1:
         0d:82:83:47:a9:cf:cd:fe:5d:56:56:69:f4:bb:4d:8c:4a:2f:
         be:32:9d:ef:57:5e:65:12:96:9d:24:d4:f7:e5:38:90:af:a1:
         67:19:b4:4d:d0:2d:21:c9:0b:74:93:eb:4a:c9:3c:cf:c7:6d:
         74:7f:d1:83:d4:8b:c7:87:cd:3f:69:d2:b0:a4:d7:92:b6:a3:
         61:b9:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 21:05:19 2024 by rpki-client on console-fra.rpki-client.org