Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
File:                     TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft (raw, json)
Hash identifier:          iWKoqGzWBfliJtabyy2lSyXl5m32bkYAuEfzcYs70UY=
Subject key identifier:   EB:77:2A:4D:6C:79:80:CA:A7:76:B3:AD:1E:12:74:2E:3C:9E:D7:FE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       018F88247764D0A36E734227B13254C10616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
Manifest number:          7A
Signing time:             Fri 17 May 2024 20:00:42 +0000
Manifest this update:     Fri 17 May 2024 20:00:42 +0000
Manifest next update:     Sat 18 May 2024 20:00:42 +0000
Files and hashes:         1: TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl (hash: ndcPrWX4ij4ZuDhS65QqX/lQfzsHUS4Dci2+YAAVANU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:77:64:d0:a3:6e:73:42:27:b1:32:54:c1:06:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: May 17 20:00:42 2024 GMT
            Not After : May 18 20:00:42 2024 GMT
        Subject: CN=eb772a4d6c7980caa776b3ad1e12742e3c9ed7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:48:27:5f:50:ab:c7:73:93:14:a4:b9:11:
                    74:81:d2:2e:a7:cf:e5:56:9a:fe:b3:a8:35:c1:4b:
                    64:04:35:b7:7d:fd:7a:4e:36:92:cf:b9:cc:c0:94:
                    1a:cb:96:7f:91:cd:99:af:f9:e0:87:01:b9:cb:34:
                    bf:84:a5:cf:90:e7:b2:a8:e3:a2:8b:27:24:a6:1a:
                    cb:27:1c:d2:30:b9:36:d8:00:46:d8:88:8a:af:64:
                    2a:1b:29:05:71:de:d8:84:35:a6:7b:9c:1f:a2:ae:
                    91:07:cf:ae:99:7c:00:a6:b4:b9:1b:97:12:43:1a:
                    4f:0f:0d:31:6c:ee:fc:9f:ef:85:32:6d:6c:96:e1:
                    80:62:2e:ff:d1:e3:fb:60:f2:a0:41:f6:a4:c5:19:
                    15:02:8a:71:4e:7f:45:8a:1e:54:54:02:91:ff:77:
                    50:7c:5b:b6:c1:b8:b2:3d:f5:08:b0:be:f7:be:10:
                    8b:83:d4:b3:bd:a9:9f:5e:51:52:23:20:ec:fc:38:
                    67:a4:7a:14:95:2e:6a:22:87:46:be:7d:7b:89:85:
                    04:4c:0e:90:49:cf:7b:b3:63:e9:1a:a1:e3:6d:cb:
                    47:ad:c0:94:5c:90:89:06:06:9a:e1:0a:44:70:36:
                    14:c8:86:fc:65:3d:4d:e1:97:4c:5c:d9:90:a4:f3:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:77:2A:4D:6C:79:80:CA:A7:76:B3:AD:1E:12:74:2E:3C:9E:D7:FE
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:b3:d0:0f:2a:17:4a:3f:29:10:dc:28:35:80:6f:b5:d8:f3:
         66:e7:ae:a5:1c:0d:39:73:eb:16:ee:eb:99:95:03:43:74:3c:
         38:b0:05:43:9c:47:9b:16:6e:25:e3:7e:65:47:0d:77:e1:51:
         14:fa:d3:c9:77:92:a0:a5:94:b4:5e:20:5e:74:a4:52:04:2c:
         c3:95:ff:7f:d0:54:60:e0:de:ec:b3:5c:81:5d:7f:aa:ba:f7:
         aa:dc:d5:77:02:b8:d1:4e:e6:de:e7:22:ce:5b:24:eb:f5:12:
         92:af:97:e3:92:d3:3c:fd:dc:49:73:96:21:19:a8:26:5c:ae:
         13:91:cd:6e:d7:3b:ab:cb:80:a2:5f:06:e5:63:c1:d5:b7:ad:
         85:a5:9a:70:c5:40:b5:e4:02:1a:68:07:a2:2c:f4:66:2d:8c:
         11:36:6f:d1:94:cf:8d:b9:9d:9e:8f:8d:02:74:e9:f9:9c:5d:
         c3:62:fe:14:b9:42:6c:14:bc:79:61:b3:6c:d7:72:0a:d0:b3:
         dd:00:6d:8d:ad:18:2e:6d:92:95:53:31:eb:12:25:7b:03:95:
         86:1c:26:f1:40:7a:73:5c:e9:49:ce:dd:d9:44:96:03:83:05:
         78:c6:76:8f:f4:24:2b:58:d4:d2:4c:ac:90:5e:51:85:c8:7f:
         53:9e:a5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:46 2024 by rpki-client on console-fra.rpki-client.org