Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
File:                     7rB4916j1TWPzKRmx1XXXRIw-Ng.mft (raw, json)
Hash identifier:          2k+V/AuoDX7VYeLyRukgA2tiejSrF/Tz9SAD2zF8Uz0=
Subject key identifier:   3B:14:07:FB:48:D3:CF:B0:83:9D:E1:01:D7:AF:57:A9:23:B7:C3:E7
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Certificate issuer:       /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial:       018F4E35B85179AFF086305B0D30544307D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
Manifest number:          1158
Signing time:             Mon 06 May 2024 14:01:34 +0000
Manifest this update:     Mon 06 May 2024 14:01:34 +0000
Manifest next update:     Tue 07 May 2024 14:01:34 +0000
Files and hashes:         1: 7rB4916j1TWPzKRmx1XXXRIw-Ng.crl (hash: xtEKIJ4KrmU3YI9OnAu+oLT9uEyMoDiQCZ8MJMNLVDM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:b8:51:79:af:f0:86:30:5b:0d:30:54:43:07:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
        Validity
            Not Before: May  6 14:01:34 2024 GMT
            Not After : May  7 14:01:34 2024 GMT
        Subject: CN=3b1407fb48d3cfb0839de101d7af57a923b7c3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:2c:84:43:81:6d:e5:b2:e6:03:d7:e8:8b:
                    91:a2:d2:9e:3e:20:a6:92:a7:e8:54:ea:01:ac:d8:
                    22:48:9c:20:d2:e3:bf:89:d2:54:0e:14:12:1f:a7:
                    9b:eb:d1:96:7a:4b:44:a5:97:b2:f8:27:0e:f4:ae:
                    17:43:c6:92:fc:46:d3:6d:28:e6:2d:11:be:64:60:
                    fa:ca:d9:d5:68:2b:c7:72:68:3d:32:21:b5:98:22:
                    92:55:87:2a:32:5e:05:27:0f:95:60:2c:5c:01:eb:
                    a7:d2:d7:e3:a3:6d:15:71:ab:d6:59:8d:ad:b0:9b:
                    37:62:58:00:75:69:bd:62:19:ba:b3:7a:28:b8:00:
                    fe:06:42:53:d3:72:99:af:88:b8:f9:79:77:a3:03:
                    7b:00:da:3f:dd:f8:6f:06:25:23:ad:64:d9:66:27:
                    92:8c:2a:47:68:d2:c8:49:4f:86:90:2c:fd:d6:91:
                    3d:5b:69:07:17:cc:c9:d6:f9:9b:b2:4f:73:41:51:
                    e4:a1:e5:75:d0:30:fd:91:34:6b:f0:9e:90:cd:df:
                    07:42:83:bf:86:ed:78:c8:3c:fc:60:07:fc:23:77:
                    d5:86:64:8a:4a:03:0f:dd:0b:cb:da:47:22:51:82:
                    bd:1d:0d:60:35:8d:7b:ae:a6:90:f5:ac:2a:2f:20:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:14:07:FB:48:D3:CF:B0:83:9D:E1:01:D7:AF:57:A9:23:B7:C3:E7
            X509v3 Authority Key Identifier:
                keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ec:4c:4f:a7:d6:e5:88:83:a3:6c:90:84:cb:65:d5:13:0c:
         65:bf:c5:c4:af:a3:9f:5d:46:0a:1d:ba:fb:9d:c7:f8:35:02:
         ac:54:6b:34:85:79:42:b0:d2:3e:16:9c:83:a6:fa:76:c1:bd:
         33:61:46:92:cb:ca:8d:f5:2d:1e:c9:ad:80:03:01:f9:aa:cd:
         36:47:16:57:85:26:3c:5e:eb:d5:7a:83:e6:db:85:69:57:e0:
         36:9c:c9:15:d9:c8:17:40:76:a9:2f:38:00:a7:cc:76:92:69:
         6d:46:5c:38:83:d6:3d:5e:d9:ee:d9:59:45:d9:27:61:66:7f:
         2b:53:be:44:8c:25:6c:e5:32:62:0a:12:b1:22:95:34:a4:cd:
         9d:30:a0:f1:d5:93:f2:04:d0:0f:cd:76:88:5d:9f:c5:43:a4:
         97:81:83:89:af:fd:5e:58:ad:39:4b:9f:bf:a0:bc:f0:be:47:
         56:b8:66:c7:df:01:da:ef:e2:3e:51:97:14:a2:c8:14:b4:b2:
         03:4e:b1:31:07:69:68:0e:dd:e0:9e:d7:00:86:c0:c2:e8:d6:
         45:23:0e:95:a1:d3:a2:ea:97:50:89:bc:87:7a:40:40:52:c4:
         31:bb:43:58:f2:83:8a:d3:a3:15:8d:3f:67:9d:55:71:be:26:
         a4:4f:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:42:16 2024 by rpki-client on console-fra.rpki-client.org