Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
File:                     jixqlU7QBSEWyinuD89V91LY5HY.mft (raw, json)
Hash identifier:          rTGE+RqKm90LHFAc53FOtKhhRrkfePuPS2AP98PZJnU=
Subject key identifier:   FF:65:67:3B:89:BB:6C:E9:67:36:6F:EF:59:92:68:86:2B:C1:12:0D
Authority key identifier: 8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
Certificate issuer:       /CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Certificate serial:       018F874AEDAF5D9D8545B5267BE3B7A964B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:03:05 +0000
Manifest this update:     Fri 17 May 2024 16:03:05 +0000
Manifest next update:     Sat 18 May 2024 16:03:05 +0000
Files and hashes:         1: jixqlU7QBSEWyinuD89V91LY5HY.crl (hash: R+E7R7CTeVH+AarxgERPH1scdN7VwWnqq7hwJiftWZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ed:af:5d:9d:85:45:b5:26:7b:e3:b7:a9:64:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
        Validity
            Not Before: May 17 16:03:05 2024 GMT
            Not After : May 18 16:03:05 2024 GMT
        Subject: CN=ff65673b89bb6ce967366fef599268862bc1120d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:1d:ad:dd:1b:35:4d:c0:da:08:ee:2d:64:
                    17:68:8b:14:34:7b:59:58:97:0f:95:4c:08:0a:1f:
                    e1:88:0d:9e:52:5f:fd:99:15:a6:f0:92:c2:ae:d5:
                    28:06:2e:c0:43:8d:42:f1:8d:24:26:0f:fd:52:0f:
                    c1:0c:17:67:11:a0:29:99:4d:c9:8a:a0:da:6c:d3:
                    1e:8e:d4:5e:10:9b:ea:56:df:bc:62:4b:7b:d7:0c:
                    36:1b:65:bb:d0:61:92:0d:d1:e9:53:a3:62:ea:2a:
                    b4:15:01:7d:a1:49:59:08:09:07:1d:ba:59:a0:ff:
                    57:46:20:23:46:81:f1:17:0a:fd:7f:c0:c5:78:f1:
                    da:cc:31:54:f3:3b:bb:84:ff:0f:5a:76:ea:7f:4a:
                    81:b0:b3:98:50:21:2b:1e:d2:ac:bc:a0:91:0d:c6:
                    3a:99:3a:a5:36:3a:1c:5d:1b:1a:62:a6:83:7d:c2:
                    89:6f:08:50:b2:b4:86:ee:bd:05:a8:b7:9e:37:a5:
                    06:a3:81:2b:0d:a2:ae:75:10:8b:b7:6f:85:5c:86:
                    da:15:e3:46:11:76:e8:5e:d3:89:e6:f8:dc:3f:65:
                    67:7e:64:5b:28:44:f9:f6:ae:a0:ad:b4:53:5b:00:
                    62:77:dc:26:57:7f:af:79:93:25:a7:b4:c9:8c:a1:
                    9a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:65:67:3B:89:BB:6C:E9:67:36:6F:EF:59:92:68:86:2B:C1:12:0D
            X509v3 Authority Key Identifier:
                keyid:8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:98:55:a5:df:8d:9f:9b:e1:d5:21:a4:35:c9:19:f3:dd:9a:
         1a:c1:fd:32:82:29:8e:66:a6:a0:a5:05:2c:e5:ab:cb:ca:56:
         9d:a0:b1:96:52:9d:a0:34:d9:44:4b:ca:4e:8f:62:0a:83:bb:
         43:8d:31:e4:fd:3a:39:0e:6c:1e:82:16:32:a3:ec:8c:5c:de:
         53:e8:08:64:95:32:76:38:29:d3:69:8a:7c:14:19:65:b1:6f:
         cf:4d:0b:80:c1:84:70:bf:0b:29:69:04:9b:56:09:d3:41:6f:
         5f:1c:28:27:3c:3a:34:bd:f0:5c:27:eb:47:a1:e2:72:08:53:
         c3:cc:ee:73:1a:c5:ea:2a:18:68:7e:e5:5c:13:03:53:08:3f:
         d8:16:11:fe:f7:c3:2f:cc:3e:cb:bb:d7:40:70:d6:3f:5b:85:
         d6:da:7e:bc:52:ab:30:b7:f2:3d:7f:f0:91:76:74:dd:7b:68:
         5e:56:74:dd:e1:97:9d:d0:6f:5d:a3:85:cc:6f:58:57:a6:ce:
         4f:62:44:42:1f:80:b1:5d:bc:25:16:aa:36:48:81:03:5f:a0:
         c3:75:42:47:8a:9a:f8:47:c5:cc:37:47:81:0b:b9:27:f5:bf:
         eb:93:79:2e:73:72:7c:53:07:54:8d:bd:a6:c6:e8:f7:27:55:
         af:b1:a7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:52 2024 by rpki-client on console-fra.rpki-client.org