Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
File:                     mupW9uHBw1kAHsImfvD-4bRW3f0.mft (raw, json)
Hash identifier:          tPCIqOPCM05Z7gCnGE79UaeTnShPrNQxmqEwuOOukv8=
Subject key identifier:   FD:F5:69:C8:31:5E:8A:6A:E3:BF:F3:C5:36:24:D0:AB:87:E2:52:50
Authority key identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
Certificate issuer:       /CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Certificate serial:       018F874976AF639972488A7080E18E74A178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:01:29 +0000
Manifest this update:     Fri 17 May 2024 16:01:29 +0000
Manifest next update:     Sat 18 May 2024 16:01:29 +0000
Files and hashes:         1: mupW9uHBw1kAHsImfvD-4bRW3f0.crl (hash: sapJxA7eGhASibXOX0AEYmH57qE4K13EBC7aSWelpbY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:76:af:63:99:72:48:8a:70:80:e1:8e:74:a1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
        Validity
            Not Before: May 17 16:01:29 2024 GMT
            Not After : May 18 16:01:29 2024 GMT
        Subject: CN=fdf569c8315e8a6ae3bff3c53624d0ab87e25250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1a:6d:f4:e5:f2:5f:02:d5:69:65:e1:f8:94:
                    b7:36:a6:40:46:67:85:88:0f:91:b8:49:22:e2:2c:
                    b0:ac:36:ee:4a:a2:41:a0:15:1b:21:a3:8e:fc:b9:
                    4b:73:a4:a9:af:c8:2c:48:78:fb:ae:22:08:24:01:
                    e9:a0:3d:be:ba:89:77:bd:ca:74:6f:6c:0a:fe:92:
                    22:ba:13:2e:bc:e0:d4:b4:56:0d:b5:a6:5f:91:e5:
                    49:27:72:0b:f9:e2:17:81:93:cf:f7:ea:ef:24:a3:
                    66:10:d3:12:ef:e4:43:5c:92:66:5c:05:cd:d8:b4:
                    b9:44:e7:37:89:2f:f1:e5:a4:3e:34:25:af:f4:cc:
                    87:32:6e:e0:ce:aa:c6:e3:f5:d9:b4:17:9c:92:ed:
                    61:21:c2:4c:f0:52:79:bf:da:ca:51:6d:5c:73:ec:
                    57:cb:0f:e7:83:50:8b:32:39:60:e6:48:6a:c4:e1:
                    4d:eb:f1:54:ab:15:33:1a:f7:7f:e0:2d:74:b1:7a:
                    bb:45:98:80:60:52:26:17:a6:58:ce:45:c3:54:df:
                    18:1b:f7:23:80:ba:96:ff:f5:0b:fb:10:0b:1a:16:
                    c8:3e:0e:fa:60:f4:f8:cd:fe:d4:68:6c:99:ec:11:
                    d6:53:71:f0:94:f6:4a:c9:b7:45:2e:be:7a:8f:69:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F5:69:C8:31:5E:8A:6A:E3:BF:F3:C5:36:24:D0:AB:87:E2:52:50
            X509v3 Authority Key Identifier:
                keyid:9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:85:fd:1e:2a:74:2e:fa:2d:98:cb:1f:0b:51:2b:0c:17:45:
         bf:3d:d8:30:a7:1a:af:44:7a:05:5c:d4:ac:57:86:a0:8d:8f:
         e3:4f:c6:bd:59:80:5d:3d:42:50:00:41:3d:a1:7f:16:c7:f2:
         b3:da:47:76:68:74:86:cd:5b:94:1a:ef:88:5a:e9:75:d7:03:
         91:91:0b:81:cb:a6:c3:fa:af:50:d9:48:aa:7b:14:71:89:74:
         32:c3:a3:5b:89:f9:69:21:12:8e:d2:ca:18:ef:32:f0:51:fc:
         9a:48:2e:32:3f:0e:13:63:bb:5f:ce:b3:dd:52:40:88:ee:b7:
         4d:3f:00:1c:eb:b5:9b:61:9e:27:89:13:b3:45:84:0e:f0:e8:
         4c:7c:17:9b:d6:53:92:21:49:68:af:7f:e1:15:92:60:9d:7c:
         ac:1d:a8:5a:19:23:ea:25:3e:c7:4d:8d:94:3d:ed:80:fe:2c:
         43:f6:a1:dd:23:fc:48:52:fb:c2:43:84:89:a1:06:bd:e8:cd:
         a2:c1:27:9c:64:e5:6b:6d:ea:38:d6:9f:4c:88:0d:37:73:d9:
         27:d0:5a:d8:be:79:d2:92:86:9e:a7:16:81:ee:dd:fe:8d:e3:
         47:60:97:9c:8a:36:8c:2a:1d:5d:48:f0:cb:f8:01:4a:d7:8f:
         67:c3:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:09:24 2024 by rpki-client on console-ams.rpki-client.org