Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft
File:                     evj4jBlvHAgVNQlOinGiRuhjitg.mft (raw, json)
Hash identifier:          t9y5RTKSwEH1yhn5FjcdVoFmefYURzEFBLk3khh5b+8=
Subject key identifier:   D3:C2:05:28:56:5F:66:25:63:DD:02:C4:AE:93:78:9A:F9:6B:77:1B
Authority key identifier: 7A:F8:F8:8C:19:6F:1C:08:15:35:09:4E:8A:71:A2:46:E8:63:8A:D8
Certificate issuer:       /CN=7af8f88c196f1c081535094e8a71a246e8638ad8
Certificate serial:       018F882477DBB9E8D5A0A15A046B27E7F5BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evj4jBlvHAgVNQlOinGiRuhjitg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft
Manifest number:          1047
Signing time:             Fri 17 May 2024 20:00:42 +0000
Manifest this update:     Fri 17 May 2024 20:00:42 +0000
Manifest next update:     Sat 18 May 2024 20:00:42 +0000
Files and hashes:         1: evj4jBlvHAgVNQlOinGiRuhjitg.crl (hash: nJ/nk7bf0a/OCddOQlzESIFD/NqZiKyXBopann9xQ78=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evj4jBlvHAgVNQlOinGiRuhjitg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:77:db:b9:e8:d5:a0:a1:5a:04:6b:27:e7:f5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af8f88c196f1c081535094e8a71a246e8638ad8
        Validity
            Not Before: May 17 20:00:42 2024 GMT
            Not After : May 18 20:00:42 2024 GMT
        Subject: CN=d3c20528565f662563dd02c4ae93789af96b771b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:e5:69:f4:88:46:39:05:51:74:74:67:a2:
                    27:c4:cf:41:56:07:17:4f:06:32:06:d4:fa:4c:cd:
                    7f:97:5a:2a:46:4a:19:5b:7c:3e:43:3c:bb:be:b1:
                    ab:56:36:68:44:0f:f5:82:02:a9:90:1d:68:31:61:
                    ec:5d:22:88:de:84:d2:5f:c6:2c:05:56:05:cf:30:
                    9e:d1:36:41:8b:86:3c:1c:3a:95:21:01:7d:3a:b9:
                    6c:94:1c:f2:9a:ab:ce:e7:67:37:74:b0:3a:90:d0:
                    62:eb:d4:91:dd:51:19:18:83:57:bb:36:3d:12:2b:
                    2f:6f:2b:e9:fb:51:4a:34:1d:f5:78:1e:6f:92:87:
                    c7:57:e4:c4:7d:c3:10:66:6a:15:74:2c:08:9d:d7:
                    70:9b:65:51:f6:df:0a:51:61:d0:2a:a4:96:a7:ff:
                    1c:ce:3a:b2:d1:e4:10:24:e6:b0:b6:df:99:e1:1f:
                    b6:91:08:13:d3:11:cf:52:56:fd:27:41:3b:3c:eb:
                    ed:15:e2:40:87:eb:77:70:25:18:cc:96:50:13:1a:
                    e5:24:9a:5c:01:17:40:c3:cc:b4:ee:38:b9:b8:fd:
                    77:95:84:5f:10:ca:e9:87:2a:04:4c:f3:1b:26:75:
                    cd:ec:89:c4:3f:e2:d5:15:0f:58:b7:d5:45:50:8c:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C2:05:28:56:5F:66:25:63:DD:02:C4:AE:93:78:9A:F9:6B:77:1B
            X509v3 Authority Key Identifier:
                keyid:7A:F8:F8:8C:19:6F:1C:08:15:35:09:4E:8A:71:A2:46:E8:63:8A:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evj4jBlvHAgVNQlOinGiRuhjitg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:2e:b5:78:5d:4f:83:74:b8:f9:12:c0:62:4d:87:b9:ef:c9:
         91:14:65:ba:63:c2:5f:56:d3:9f:12:d5:4b:1c:e5:bf:8a:42:
         cf:0e:00:cf:77:5d:15:43:9d:41:0a:eb:4f:77:db:da:4a:93:
         9e:2b:8f:ba:3b:74:d7:a3:ff:13:e7:51:ad:6f:2e:ea:41:7d:
         a4:0d:a5:85:a1:15:be:16:ea:c8:ca:c4:6e:ac:7b:a6:9c:85:
         92:7a:fc:81:18:76:84:91:06:31:8c:f2:03:31:db:78:48:97:
         30:d4:5d:c6:02:a9:71:d4:e9:91:89:f0:c3:ed:64:32:ea:8d:
         d0:01:c7:b0:0f:d5:ba:aa:8c:b3:a1:33:95:68:c2:b3:39:36:
         21:6e:05:f1:11:4d:07:e0:47:b0:54:5b:55:c3:1e:e0:e9:78:
         3f:21:3c:fe:68:52:8f:18:4f:f2:6c:5e:0f:aa:d6:df:ca:eb:
         ec:3e:b3:e4:68:25:49:d3:0f:0b:fb:37:e9:98:11:d4:7d:39:
         eb:4b:29:c3:4a:c0:23:64:38:3f:65:38:e8:69:8d:25:8a:e5:
         53:96:27:dc:dc:21:61:be:24:45:5c:a4:30:65:d6:9a:c6:39:
         22:40:96:36:68:3d:ef:cf:3c:23:c0:57:cf:e1:c3:07:38:bd:
         48:72:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:07:52 2024 by rpki-client on console-ams.rpki-client.org