Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File:                     ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier:          3vd0SgcAg3UYBMk3mQyJ3sQWF4bvF/2e0cc9lyc7yrw=
Subject key identifier:   C2:9B:6D:E1:2B:B1:98:60:D6:9B:97:5B:2E:52:DF:6C:EF:2A:C4:E6
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer:       /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial:       018F41C3D2A7222C69953CD1AA7D06EFFC45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number:          1152
Signing time:             Sat 04 May 2024 04:01:43 +0000
Manifest this update:     Sat 04 May 2024 04:01:43 +0000
Manifest next update:     Sun 05 May 2024 04:01:43 +0000
Files and hashes:         1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: cMwAWqNDIjjnrFtLm9MyLpwYsC+TAP7Q+47fZPabi0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:d2:a7:22:2c:69:95:3c:d1:aa:7d:06:ef:fc:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
        Validity
            Not Before: May  4 04:01:43 2024 GMT
            Not After : May  5 04:01:43 2024 GMT
        Subject: CN=c29b6de12bb19860d69b975b2e52df6cef2ac4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:56:a6:75:dd:c0:b5:25:9d:81:b2:fe:ba:20:
                    9f:1a:b6:10:36:4e:0f:9f:07:17:a4:98:36:e6:57:
                    e2:92:ea:cc:cd:0f:13:8f:9d:cb:d2:d5:b0:71:fd:
                    be:4f:41:02:a5:ac:5f:8b:e4:76:fb:23:df:57:48:
                    d2:cf:80:14:db:1e:0b:22:b7:c3:a1:8d:21:cc:8c:
                    ed:fd:33:9c:ad:d1:66:2c:f3:2e:0a:ff:37:6f:2c:
                    80:76:46:3a:91:bf:08:92:7f:75:8c:40:32:7c:dd:
                    cd:08:23:ae:0c:7d:2c:e9:a9:8b:bf:88:43:c9:e4:
                    80:0f:2f:dd:81:ce:12:e7:e0:02:ed:ed:f0:a1:96:
                    b0:a0:66:10:68:54:c4:e3:66:62:a7:77:eb:32:01:
                    9b:35:f7:84:95:a5:b9:dc:be:3d:6b:80:af:90:bf:
                    27:c4:e1:03:07:dd:7c:19:f3:54:69:f8:cc:fa:f5:
                    db:bc:dd:0e:6e:61:d1:ac:1e:aa:40:c9:19:43:43:
                    91:96:98:d7:bb:b8:4e:ec:3c:d9:c9:05:25:f1:69:
                    11:91:1b:75:f4:c7:b5:12:9a:96:18:92:c2:aa:f1:
                    95:b3:b1:19:21:f6:53:64:d1:37:1f:8b:01:99:db:
                    c5:c4:05:36:ac:af:c4:07:a3:3f:89:5f:83:8f:b3:
                    6b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9B:6D:E1:2B:B1:98:60:D6:9B:97:5B:2E:52:DF:6C:EF:2A:C4:E6
            X509v3 Authority Key Identifier:
                keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:53:c3:22:6c:96:4d:0d:64:47:f8:2b:97:0a:03:4e:53:5e:
         7c:bc:1c:85:62:6b:f9:da:31:a6:a9:88:85:cf:c7:df:b9:36:
         cd:89:e3:58:f9:51:e7:f1:64:1c:d9:07:b8:30:60:5a:e5:17:
         57:b2:2f:ba:0b:c9:8a:59:af:10:cb:30:04:22:81:c4:7b:66:
         9e:c3:61:13:95:df:c9:1d:29:01:2c:5d:3a:95:6a:f9:71:82:
         31:9f:81:a6:2b:72:37:b1:9b:de:e5:97:2e:e3:42:76:ac:f7:
         6f:89:df:bc:0e:00:e7:da:a6:e8:fc:6a:b8:76:38:4a:cf:87:
         d9:6c:17:1d:6d:ea:4e:7d:aa:28:f4:10:4e:76:64:27:15:30:
         2b:77:ec:99:a0:df:35:d6:a4:56:d9:f5:d9:c5:e0:e2:81:d6:
         c4:52:b5:ab:96:6f:60:56:d3:f9:bc:af:72:73:8e:ec:b8:0b:
         0c:0c:9d:a5:4a:8f:4d:f6:a1:86:7d:12:7d:a2:ef:0e:97:32:
         11:7d:8b:38:37:57:c8:92:af:ed:b3:27:12:de:4b:f5:f3:24:
         88:a7:5a:18:3c:49:ef:79:b2:2e:c2:9d:e0:ba:2d:e7:a0:ae:
         46:94:bd:58:21:16:7e:36:38:1d:93:9d:ff:47:ff:1f:1e:fc:
         bd:a6:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:19:05 2024 by rpki-client on console-fra.rpki-client.org