Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
File:                     qCYCgPNU92LV7fNMisgW4cIHG1k.mft (raw, json)
Hash identifier:          1IexOyttVf+9GN0z4w0/sHqCYMLTOf5s1O1D5ura25E=
Subject key identifier:   EB:CC:3C:CC:15:24:C4:00:90:96:EA:75:57:41:DD:D3:40:C6:48:8A
Authority key identifier: A8:26:02:80:F3:54:F7:62:D5:ED:F3:4C:8A:C8:16:E1:C2:07:1B:59
Certificate issuer:       /CN=a8260280f354f762d5edf34c8ac816e1c2071b59
Certificate serial:       018F882459D3487284DB5F8B515FA5F0567D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 20:00:34 +0000
Manifest this update:     Fri 17 May 2024 20:00:34 +0000
Manifest next update:     Sat 18 May 2024 20:00:34 +0000
Files and hashes:         1: qCYCgPNU92LV7fNMisgW4cIHG1k.crl (hash: ZP55NPfhRnbz/CVhOHofylJtDf8Vtlc4HtP4N9ywkzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:59:d3:48:72:84:db:5f:8b:51:5f:a5:f0:56:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8260280f354f762d5edf34c8ac816e1c2071b59
        Validity
            Not Before: May 17 20:00:34 2024 GMT
            Not After : May 18 20:00:34 2024 GMT
        Subject: CN=ebcc3ccc1524c4009096ea755741ddd340c6488a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:23:35:b0:32:42:0a:d0:21:73:20:a7:cb:
                    16:8d:3c:fe:b5:e6:5c:4e:63:f5:b2:8d:08:49:e8:
                    e3:b2:fa:bd:22:d6:e1:1b:b9:a9:d2:1d:43:ad:b6:
                    42:ec:a4:e0:f0:51:47:47:f2:4d:07:cd:91:5c:14:
                    7a:18:24:7c:0c:ef:e3:3f:ae:db:c8:7d:79:11:3e:
                    c9:6a:ef:16:b7:bd:26:61:b1:53:a1:82:a2:eb:1e:
                    2a:5b:b3:2e:eb:74:b5:b8:50:cd:58:45:9e:62:4a:
                    03:6f:0e:65:31:1d:69:14:93:dd:dc:02:78:30:10:
                    5c:68:0d:44:ae:14:da:15:f0:1d:52:20:de:3c:fd:
                    4c:d3:bc:41:7b:7e:67:25:ed:97:bf:7e:6a:1f:20:
                    eb:8b:33:f5:c3:2d:fd:1c:db:f5:a6:de:1d:75:f2:
                    da:5b:87:70:05:19:76:2b:1e:2d:e8:92:16:40:6e:
                    7b:52:54:6b:bf:9e:ef:27:8c:4d:43:20:e1:74:9b:
                    3d:88:da:cf:17:63:a5:f7:15:c5:84:3c:aa:b2:03:
                    7f:43:c8:ec:63:19:b0:1a:81:44:37:a1:1c:af:2a:
                    7c:a4:96:d9:ea:f7:f2:eb:23:09:ed:24:fd:c2:95:
                    64:f1:c4:3a:66:ee:ea:b0:c0:e7:c5:0e:b5:28:19:
                    29:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CC:3C:CC:15:24:C4:00:90:96:EA:75:57:41:DD:D3:40:C6:48:8A
            X509v3 Authority Key Identifier:
                keyid:A8:26:02:80:F3:54:F7:62:D5:ED:F3:4C:8A:C8:16:E1:C2:07:1B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e7:63:70:9a:39:53:5d:f9:8b:8a:36:06:b1:f3:dd:fb:19:
         a8:2a:37:5c:9a:8c:6d:6b:59:32:d6:f3:49:c5:e6:b0:c7:3c:
         45:8f:6c:1b:c7:81:e5:c3:72:7c:5d:b7:5b:fb:9e:df:19:4a:
         60:c5:a2:06:93:73:55:52:83:fa:b7:eb:30:11:a5:16:a5:5c:
         6d:a1:66:82:7d:51:80:c8:32:a9:17:7c:53:43:5a:68:28:2b:
         69:3e:23:7c:79:80:fd:e2:82:65:c6:2b:90:8a:ca:2b:f8:05:
         44:b0:aa:b6:0a:57:21:4f:35:5f:55:45:4d:0f:1c:46:86:f5:
         a5:2c:3b:a4:07:50:5e:c5:f1:e0:c8:9c:47:27:23:6b:87:ce:
         27:bd:a6:70:a0:a6:eb:eb:6a:03:ad:8c:ff:ac:62:7f:9d:b1:
         2c:ef:e5:1e:c1:d5:56:cb:bb:72:27:4d:cb:a6:89:1b:03:4a:
         26:f3:71:a5:01:fd:03:49:7a:e5:91:8f:df:25:f2:2f:e2:72:
         35:67:9e:4b:34:cd:cb:34:33:75:36:2b:ca:a9:a5:f0:14:ae:
         42:ff:11:ea:bf:3e:89:70:8d:1c:46:99:f2:8c:75:0d:80:c5:
         e3:b4:a4:34:50:77:10:04:be:8c:aa:82:ec:ab:9e:5d:e8:9c:
         05:16:c4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:44 2024 by rpki-client on console-fra.rpki-client.org