Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.mft
File:                     hMOh9T3IFfgQHLJuu1T15w1AFrI.mft (raw, json)
Hash identifier:          rm5c1nWyh0hN1e/xVkir4iGbN4yA1EIjRCgVA9xWauI=
Subject key identifier:   4A:83:6F:F6:C0:02:1D:D2:AB:7C:6E:7E:89:A0:55:42:6A:24:EB:B3
Authority key identifier: 84:C3:A1:F5:3D:C8:15:F8:10:1C:B2:6E:BB:54:F5:E7:0D:40:16:B2
Certificate issuer:       /CN=84c3a1f53dc815f8101cb26ebb54f5e70d4016b2
Certificate serial:       018F87B6B1854B10EDC7FF80CA0775E3F74A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMOh9T3IFfgQHLJuu1T15w1AFrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 18:00:48 +0000
Manifest this update:     Fri 17 May 2024 18:00:48 +0000
Manifest next update:     Sat 18 May 2024 18:00:48 +0000
Files and hashes:         1: hMOh9T3IFfgQHLJuu1T15w1AFrI.crl (hash: YRcTCeGMaT6FvtvprydQVQAT82F1iSB+ocJVwhjXYqY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hMOh9T3IFfgQHLJuu1T15w1AFrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b1:85:4b:10:ed:c7:ff:80:ca:07:75:e3:f7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c3a1f53dc815f8101cb26ebb54f5e70d4016b2
        Validity
            Not Before: May 17 18:00:48 2024 GMT
            Not After : May 18 18:00:48 2024 GMT
        Subject: CN=4a836ff6c0021dd2ab7c6e7e89a055426a24ebb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:86:f9:f2:73:59:e1:8d:3e:5c:60:7d:73:
                    5e:40:10:df:73:85:a0:84:4a:67:31:12:3c:fa:14:
                    7f:25:57:12:76:40:fc:bd:81:bd:ab:58:71:7a:19:
                    75:9e:b0:57:e3:c1:47:5b:1d:60:17:ff:b4:21:f0:
                    2a:92:0d:6c:3c:c9:fc:c2:13:1c:44:3b:f7:47:fc:
                    a8:2d:58:de:09:78:61:b8:da:1b:97:d3:36:4c:f2:
                    d4:86:8a:05:76:75:ed:6d:90:40:42:f5:01:7d:35:
                    fb:54:47:9d:95:21:f0:89:cd:e4:2a:4d:e1:04:39:
                    43:a0:3a:c3:03:0b:ec:b7:21:b4:0a:2f:8d:4f:a4:
                    2c:f0:63:97:89:c4:42:e5:0f:19:98:70:7d:7d:17:
                    27:b3:86:1a:38:24:38:68:ef:72:eb:5d:13:45:b1:
                    da:bc:67:2b:da:a4:72:9a:5d:b4:72:b0:76:ab:fd:
                    ac:c1:13:b5:6d:d9:c3:90:6f:2b:20:05:a5:fa:37:
                    49:d7:58:0c:91:4c:d2:7d:80:86:51:e3:19:4e:f9:
                    3f:34:33:e5:f9:78:3e:b0:26:cb:1a:82:b4:2b:a6:
                    5b:7e:41:0c:fe:37:2a:df:d0:a6:9f:c6:0e:0b:da:
                    e6:83:68:c1:62:ee:92:f5:2e:90:cb:4c:2a:91:12:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:83:6F:F6:C0:02:1D:D2:AB:7C:6E:7E:89:A0:55:42:6A:24:EB:B3
            X509v3 Authority Key Identifier:
                keyid:84:C3:A1:F5:3D:C8:15:F8:10:1C:B2:6E:BB:54:F5:E7:0D:40:16:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMOh9T3IFfgQHLJuu1T15w1AFrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8c:39:4c:b0:6d:64:ea:1e:67:d9:c9:4e:d7:f5:9a:e7:17:
         31:86:fe:de:97:af:ed:91:42:a2:8b:e1:38:c9:b6:e7:83:76:
         92:fa:a4:d3:5a:0e:92:41:65:ce:ee:ab:b9:d2:4a:13:c0:ec:
         ff:3d:01:06:8b:51:85:b4:0b:97:66:10:ca:7c:96:34:6b:12:
         af:b0:a0:a7:41:e2:74:a6:f0:bb:d5:53:67:f2:bd:8b:a6:2b:
         4d:d5:43:4c:60:e7:25:d2:7c:00:67:14:61:6e:72:3c:93:29:
         ec:f0:16:c9:dc:29:23:04:30:99:bf:ee:58:6b:2c:35:e0:b3:
         a2:2f:78:8c:4a:22:52:ec:d7:5a:ed:60:56:05:8f:87:ea:6b:
         b6:2b:45:43:87:c2:7e:bd:8b:2b:ce:3c:bf:d0:98:b0:14:33:
         68:f7:17:63:d4:60:3b:2a:55:e3:9d:39:70:56:09:21:ce:a8:
         f8:05:63:cd:e7:f8:10:ec:e0:7a:6c:7f:34:8e:4b:05:f5:9c:
         d4:b3:9e:18:3a:59:4d:2d:db:bc:69:0a:81:1c:85:d0:83:f9:
         6e:32:7c:08:e8:c0:32:33:c1:06:01:f2:54:94:9b:31:39:0e:
         60:1c:9b:ec:b9:00:0a:e6:a0:c7:dc:fa:c1:b8:50:d7:5f:22:
         2b:f1:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:42 2024 by rpki-client on console-fra.rpki-client.org