Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
File:                     FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft (raw, json)
Hash identifier:          HrnA+79dMgAhKG4pNINIcKR8QKHj/cffRpHWvHVltE8=
Subject key identifier:   75:2A:01:44:5F:F9:F6:7B:E5:3F:DD:CA:0C:52:9A:87:86:36:86:C1
Authority key identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
Certificate issuer:       /CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Certificate serial:       018FD8D2B93B858D9C1DCA7275A69FEBE180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
Manifest number:          119F
Signing time:             Sun 02 Jun 2024 12:00:39 +0000
Manifest this update:     Sun 02 Jun 2024 12:00:39 +0000
Manifest next update:     Mon 03 Jun 2024 12:00:39 +0000
Files and hashes:         1: FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl (hash: 6w9jMBNNqeaR872gjBmG57GR0tWbU/Iu9IoVdlUPDEQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:d2:b9:3b:85:8d:9c:1d:ca:72:75:a6:9f:eb:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
        Validity
            Not Before: Jun  2 12:00:39 2024 GMT
            Not After : Jun  3 12:00:39 2024 GMT
        Subject: CN=752a01445ff9f67be53fddca0c529a87863686c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:4f:ac:40:bd:0c:87:4c:be:b3:d7:da:04:1a:
                    36:eb:d6:16:3e:f0:68:9c:38:fc:6f:ba:99:94:35:
                    11:b1:04:c5:f2:2b:ab:38:bb:f4:6b:a5:bb:bd:a6:
                    1d:47:de:22:42:a9:32:69:39:7f:61:d6:bf:52:a0:
                    80:94:a9:d1:9a:71:35:91:54:94:e2:ed:ce:a8:0b:
                    a3:b4:95:70:8d:7d:a0:ef:96:4f:d3:4b:32:63:3a:
                    17:fe:99:04:17:80:67:61:2e:d2:5a:41:34:f9:5c:
                    4f:53:6d:ec:a9:f6:c0:db:55:c2:35:af:23:83:b5:
                    8f:85:15:c2:c7:8e:b0:3d:fb:6b:c5:88:7b:90:f6:
                    99:8e:70:e0:14:e2:9f:44:06:b9:ab:24:93:d3:06:
                    17:37:31:9c:ed:ff:3c:00:a9:d4:c5:11:41:03:05:
                    f1:95:b9:5b:c2:ef:14:9b:9d:d0:e4:1b:a9:17:25:
                    2d:95:6f:2a:79:51:7d:08:ab:f2:d0:83:22:e4:99:
                    f1:9a:cd:c3:74:01:d9:e6:3e:96:c7:e1:d2:ba:71:
                    09:79:e6:13:c8:89:cd:07:3b:2e:90:b1:e6:e0:27:
                    0b:85:6e:15:1a:cb:26:e9:32:b3:a2:38:76:be:74:
                    6d:63:74:e8:f5:08:45:08:de:01:f4:96:d0:5c:6f:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2A:01:44:5F:F9:F6:7B:E5:3F:DD:CA:0C:52:9A:87:86:36:86:C1
            X509v3 Authority Key Identifier:
                keyid:15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fb:83:0d:c8:98:7d:2c:da:a6:8e:72:72:63:60:98:da:50:
         8e:0f:98:04:bf:da:7f:e5:a4:04:5e:17:0f:72:d3:0a:6f:7c:
         88:bf:fc:2b:1f:7b:47:d3:61:a2:bb:5c:37:16:ba:94:83:b6:
         ae:35:63:42:4b:8e:02:d5:13:58:85:53:26:56:77:ec:b0:07:
         30:73:8e:7c:d0:83:03:a8:93:99:dc:55:7a:92:6f:b2:64:67:
         0f:fc:bd:d5:cf:62:86:6b:0a:f8:c4:03:26:b4:b4:ba:45:c3:
         38:29:f2:1d:f7:93:25:c7:09:70:1f:8a:36:4e:d8:83:a1:31:
         53:19:64:ad:5b:7f:dc:3c:6e:ae:53:5f:70:4a:51:da:c4:8c:
         f5:62:ca:a4:4d:94:4a:94:e0:b4:79:54:59:a0:8b:47:0b:46:
         ba:e7:c3:9a:8b:3a:11:48:f9:37:1e:64:7d:f3:a8:af:6b:fa:
         1d:d2:b3:36:28:28:1d:20:f0:9b:9b:da:93:f4:d7:e5:27:f7:
         19:fe:27:4d:aa:26:02:b0:9c:18:40:70:a6:6b:a5:60:ad:d8:
         f6:f0:38:5f:c0:d4:7c:8e:bd:34:e4:64:71:0d:e9:ec:24:ab:
         4d:e9:0b:e2:48:78:9b:55:b1:ad:f7:89:58:b2:1a:4b:1c:6b:
         cc:0d:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:14:11 2024 by rpki-client on console-ams.rpki-client.org