Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
File:                     F1yfOANJZKGpKvgMdo-D0IVAeT4.mft (raw, json)
Hash identifier:          yLqWEMXRvvw9qg8zeULv698aj2FNGZ8DEggcX/Mx1XE=
Subject key identifier:   B7:56:47:58:F5:43:FB:0B:D1:AD:FD:CE:5B:54:BE:E7:C5:F7:B3:7D
Authority key identifier: 17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E
Certificate issuer:       /CN=175c9f38034964a1a92af80c768f83d08540793e
Certificate serial:       018FF1EDEB4F7431F86CD516BD4D49F8E16A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
Manifest number:          113E
Signing time:             Fri 07 Jun 2024 09:00:52 +0000
Manifest this update:     Fri 07 Jun 2024 09:00:52 +0000
Manifest next update:     Sat 08 Jun 2024 09:00:52 +0000
Files and hashes:         1: F1yfOANJZKGpKvgMdo-D0IVAeT4.crl (hash: Oea3bpxBB8RKe62glLiuX//8nii+a6ev+h3Mzzq9dKY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f1:ed:eb:4f:74:31:f8:6c:d5:16:bd:4d:49:f8:e1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175c9f38034964a1a92af80c768f83d08540793e
        Validity
            Not Before: Jun  7 09:00:52 2024 GMT
            Not After : Jun  8 09:00:52 2024 GMT
        Subject: CN=b7564758f543fb0bd1adfdce5b54bee7c5f7b37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:18:04:8a:f5:e3:14:b4:88:6f:4e:3a:64:
                    05:d3:d1:14:f6:2d:36:f1:57:37:ff:23:1a:23:bc:
                    71:43:bf:6b:01:c1:eb:6c:d5:2c:95:a2:44:2b:e7:
                    ad:a1:0b:bf:1c:3e:fc:88:b4:81:fb:4f:54:67:18:
                    a5:a7:24:dc:d5:1f:83:ed:a4:6e:e1:9b:94:89:73:
                    8e:b5:e2:91:28:94:45:09:de:9c:1f:70:ac:5e:8d:
                    99:e3:59:8e:82:92:78:5b:de:8c:e0:20:cd:b6:c6:
                    e4:0d:0c:1c:66:0b:1c:cc:9b:90:77:86:93:88:c1:
                    42:24:87:70:c5:5f:90:76:0d:3f:aa:73:6c:b3:5b:
                    0c:a2:22:0c:14:14:25:2a:bc:2c:62:5f:c4:62:74:
                    31:cd:ae:dd:86:f3:e2:f6:00:52:ae:47:37:f2:65:
                    d0:56:9d:58:7a:f8:c9:54:7c:39:8a:22:1e:b9:4f:
                    ef:d1:91:e4:f9:a6:47:8d:ec:53:fc:81:4b:e3:21:
                    13:f0:f3:37:a3:bc:b4:e2:03:84:05:4a:44:fe:b0:
                    6b:d8:c9:67:12:6a:b0:93:e0:23:89:70:8c:42:e2:
                    62:78:c7:a1:7b:32:30:43:e2:bb:ac:a7:db:8e:e0:
                    d7:27:9f:a2:4f:77:83:96:50:cd:7a:1a:e9:dd:e2:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:56:47:58:F5:43:FB:0B:D1:AD:FD:CE:5B:54:BE:E7:C5:F7:B3:7D
            X509v3 Authority Key Identifier:
                keyid:17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cd:60:7b:78:49:2a:02:40:5d:8c:48:ba:4d:74:e2:88:3c:
         75:36:b0:26:2d:e7:5c:9c:a1:9e:7e:e1:cd:92:e7:10:b3:e6:
         33:4f:ea:93:07:5d:b2:09:c5:94:55:d0:f1:a3:00:3f:98:3a:
         9f:12:05:e4:7e:fa:57:63:d1:ea:d6:df:10:ff:67:11:6a:62:
         9b:12:d6:60:8c:5f:05:37:46:80:bf:ac:c3:50:8c:ca:55:f3:
         28:6f:7c:42:49:ee:d6:96:be:de:f6:55:e1:a9:ca:c2:f0:eb:
         e7:22:f9:fa:17:77:0c:6b:5b:db:52:0f:cc:31:80:52:e3:6a:
         34:91:0b:05:e2:bf:84:da:65:a0:31:66:7f:ad:1f:34:4e:b5:
         c0:c7:ac:0c:7e:83:23:33:ae:c1:c9:bf:d2:0b:57:bb:1c:a6:
         98:26:90:1f:05:93:47:5d:6b:2d:1d:41:b2:4d:54:c2:db:96:
         9e:8b:52:d3:10:74:e1:81:06:75:65:9a:83:d8:e0:c0:67:c0:
         55:aa:bf:80:20:fe:3d:f8:8d:31:e2:40:df:d9:02:0a:a5:33:
         4e:3b:66:5f:24:28:6a:a4:18:cc:a4:a3:02:78:1f:bb:7b:ac:
         e1:6e:b3:d4:10:87:ea:2a:4c:a3:c4:90:6c:75:56:44:f6:d7:
         8d:68:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:07:08 2024 by rpki-client on console-fra.rpki-client.org