Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
File:                     xqnvrGfjS7iro4n_jw16HFZUM_0.mft (raw, json)
Hash identifier:          RkTElrysNfLRmzlZVvSmZT09vkbgE966AywZLIHJqXY=
Subject key identifier:   F2:81:04:EC:BD:EC:8D:27:92:21:2C:11:2F:22:49:1B:CF:DD:8E:09
Authority key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Certificate issuer:       /CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Certificate serial:       018F87ED4487196C15636ABC51C82A3C84C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
Manifest number:          0884
Signing time:             Fri 17 May 2024 19:00:24 +0000
Manifest this update:     Fri 17 May 2024 19:00:24 +0000
Manifest next update:     Sat 18 May 2024 19:00:24 +0000
Files and hashes:         1: xqnvrGfjS7iro4n_jw16HFZUM_0.crl (hash: RYVGrdhddNDkjALYnaVlcVPvBY0/tmju5j/SM7F5LzI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:44:87:19:6c:15:63:6a:bc:51:c8:2a:3c:84:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
        Validity
            Not Before: May 17 19:00:24 2024 GMT
            Not After : May 18 19:00:24 2024 GMT
        Subject: CN=f28104ecbdec8d2792212c112f22491bcfdd8e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2a:96:9a:fe:62:ab:d0:d8:90:af:9e:9f:ff:
                    91:af:f3:99:fd:18:ae:07:80:be:05:78:33:71:30:
                    36:ee:7b:a6:d5:01:94:b0:7d:2f:ff:cd:5b:6d:19:
                    f5:61:88:c7:97:1a:7a:cb:a7:77:a6:6c:62:2f:0f:
                    ec:e8:a8:79:bb:b4:09:4b:be:ea:cc:ba:b7:c7:62:
                    d6:45:9c:f9:f4:a9:64:c7:1e:a3:81:36:1e:8e:4c:
                    23:26:7c:88:30:2b:69:84:37:2b:e7:93:aa:f3:9c:
                    85:33:4f:8c:c9:2a:33:fa:8f:ea:28:57:4b:87:bf:
                    a4:cc:b9:ac:d3:aa:2f:32:c1:34:30:66:46:55:2f:
                    3b:85:f6:82:bb:a3:44:52:96:a8:92:6e:b7:da:fe:
                    af:24:a9:31:23:4c:63:6d:62:9f:e8:62:04:90:52:
                    f0:09:0c:32:4a:7e:23:06:1c:41:7d:3a:69:d4:b5:
                    bb:53:cf:c6:53:97:db:4f:be:48:41:8e:78:4a:dc:
                    32:dd:64:62:53:5c:0f:c5:28:bb:c5:9c:32:53:cb:
                    38:51:31:4e:04:1c:c8:ec:3b:bb:b9:11:eb:51:c8:
                    16:6e:27:a1:af:99:ab:95:08:22:08:99:e4:63:a7:
                    59:41:ee:34:74:8b:a1:03:b1:3a:22:96:e7:89:9a:
                    b9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:04:EC:BD:EC:8D:27:92:21:2C:11:2F:22:49:1B:CF:DD:8E:09
            X509v3 Authority Key Identifier:
                keyid:C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4e:8e:a0:d6:71:ac:dd:fe:19:dc:7a:51:a2:5f:e1:e7:fe:
         3c:19:b9:40:fc:48:c8:c2:a8:97:2b:53:dd:08:8f:33:2d:51:
         88:68:14:77:18:5a:ea:e2:30:14:55:ed:e0:eb:1f:21:13:b0:
         be:f6:46:c0:4b:6d:10:cf:1f:9a:30:d8:59:02:14:35:01:4c:
         76:67:bc:28:1a:0b:0f:df:b3:d8:0b:de:ef:67:d5:32:f0:82:
         9e:1b:88:77:8a:8a:bd:f6:98:ce:a9:e9:4a:56:81:cc:e7:08:
         c7:8c:f1:33:cf:5f:52:3c:5a:f3:04:88:5f:a6:4e:da:4e:cb:
         46:26:58:9e:42:52:43:42:f9:82:60:66:86:62:4b:89:48:cb:
         1e:c6:54:e1:4c:2b:25:b6:d2:5a:f2:91:9c:2b:18:a3:14:6c:
         af:f4:6c:69:7a:c5:d8:07:ff:ce:27:a3:cf:7a:36:ea:54:d4:
         75:e5:c0:10:ab:a3:27:44:0d:37:cc:43:43:65:c3:84:ae:5f:
         f5:1c:cf:59:8d:12:c6:a3:98:33:35:77:ab:32:36:df:16:9c:
         16:9b:0a:22:74:2f:13:42:e3:de:aa:b5:e2:16:90:1c:3b:8a:
         d5:58:a2:d2:75:ad:c4:0c:44:e7:91:c9:c3:86:64:8c:e0:b3:
         76:4a:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:33 2024 by rpki-client on console-ams.rpki-client.org