Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File:                     b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier:          tX8KBXZm9CWgnDgRME2pIhpLQurjBwDn5Nu+dng0kII=
Subject key identifier:   9A:A6:A5:5E:C5:82:EF:3F:BC:E9:67:B1:39:5D:B4:83:E9:E7:8E:5E
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer:       /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial:       018F87491B731B18A93DD5D55B73D9D6DB17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:06 +0000
Manifest this update:     Fri 17 May 2024 16:01:06 +0000
Manifest next update:     Sat 18 May 2024 16:01:06 +0000
Files and hashes:         1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: HNlAtr9uZl49jofUszqy/k2wVisYAhuENBrGQy78DBo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:1b:73:1b:18:a9:3d:d5:d5:5b:73:d9:d6:db:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
        Validity
            Not Before: May 17 16:01:06 2024 GMT
            Not After : May 18 16:01:06 2024 GMT
        Subject: CN=9aa6a55ec582ef3fbce967b1395db483e9e78e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:b1:7f:76:88:46:c5:5a:1d:2a:ca:69:ee:
                    55:f3:ac:99:af:61:d4:40:be:ec:1a:99:25:d8:e3:
                    27:f9:97:33:d0:70:36:3b:fd:67:bd:29:ad:58:67:
                    1f:93:3e:1b:43:a4:a4:ed:c6:d9:0a:0d:49:fa:ad:
                    9b:11:1c:1b:95:2d:40:58:3c:1a:19:88:e6:10:83:
                    10:0c:03:a2:35:71:aa:ad:f9:c7:01:28:7f:54:25:
                    3a:96:ae:70:9b:1f:1b:18:d6:df:90:e0:3e:3a:02:
                    2d:c4:63:b2:1b:17:83:64:b8:a1:2e:63:ec:28:6b:
                    a2:91:57:ae:a0:65:94:67:6c:29:fb:58:22:a7:ac:
                    d5:c4:dd:e9:8c:52:6c:ee:25:7f:1c:11:f4:12:71:
                    c1:42:8e:d4:69:08:bc:6f:f8:21:e4:7f:0e:c9:0f:
                    40:9c:0d:72:1b:73:ba:06:9a:26:4f:a5:43:fa:5e:
                    39:99:25:bf:f4:b7:03:72:91:3a:81:7f:37:90:c6:
                    0b:2c:47:0b:7f:a2:a0:e3:91:8e:ed:75:d5:df:e8:
                    f4:6e:77:c6:f2:b6:cb:a1:b5:9a:61:b2:b6:4c:0b:
                    30:99:38:cb:b9:e5:52:e7:6a:71:f0:fd:4f:67:7c:
                    4d:33:19:69:0a:9b:2f:86:fe:7d:9c:28:a1:fd:4f:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A6:A5:5E:C5:82:EF:3F:BC:E9:67:B1:39:5D:B4:83:E9:E7:8E:5E
            X509v3 Authority Key Identifier:
                keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f9:bb:e0:6e:7e:ae:7a:b6:8f:cd:bc:69:e3:4f:9d:f3:56:
         cf:ad:67:38:4e:27:a1:af:2d:3d:b5:41:06:e6:b5:ff:13:45:
         65:a2:58:21:39:5b:10:c5:9c:eb:76:7e:8e:0d:91:80:69:37:
         7d:b1:1b:ce:cd:a3:ba:76:90:9d:79:b2:6b:b6:a3:21:3b:e1:
         47:65:6a:6a:c0:3b:72:d9:73:bb:99:35:9b:72:bf:f6:87:ba:
         c5:5a:20:2f:15:53:a8:3b:97:1a:3c:f2:53:19:d5:de:c8:66:
         e9:c5:eb:c9:22:91:90:92:15:85:79:04:61:6d:cf:df:20:c3:
         d1:05:5e:50:bf:2d:7f:8f:47:86:97:02:30:42:76:0f:7a:5d:
         a0:32:9f:82:a9:61:2e:09:ca:3b:39:00:cd:4f:75:56:86:c1:
         40:12:1a:cb:60:92:3f:9e:43:5e:a7:0f:19:df:83:fd:02:64:
         29:54:25:37:fc:9b:6b:14:43:14:cf:65:66:2c:78:14:36:35:
         52:70:d3:d9:ad:66:5c:01:2b:b1:67:9f:db:38:70:70:38:34:
         ae:45:1a:ec:e7:f2:83:21:d0:f7:24:0c:a0:e2:4e:9d:a0:f3:
         52:ce:b9:47:69:7f:f6:0d:af:01:07:e3:d2:b7:12:94:44:c7:
         8a:4a:ea:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:08 2024 by rpki-client on console-fra.rpki-client.org