Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File:                     JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier:          4/kq3zQUsNy0Qm6JFb2btwadqJvPzAzRagN0G4ki+rI=
Subject key identifier:   2A:7E:95:DE:D8:14:4A:46:0A:C5:89:7A:B4:FC:D0:F0:39:7E:AB:2B
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer:       /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial:       018F87B60E0109E0F188D2A7090FCF775514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 18:00:06 +0000
Manifest this update:     Fri 17 May 2024 18:00:06 +0000
Manifest next update:     Sat 18 May 2024 18:00:06 +0000
Files and hashes:         1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: DbH3tlVe/OcE851bLMzTMMJ8TLtqDlyzfeqZ1acUIyw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:0e:01:09:e0:f1:88:d2:a7:09:0f:cf:77:55:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
        Validity
            Not Before: May 17 18:00:06 2024 GMT
            Not After : May 18 18:00:06 2024 GMT
        Subject: CN=2a7e95ded8144a460ac5897ab4fcd0f0397eab2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:f5:c7:9a:fc:b6:40:52:ba:43:2e:8e:22:
                    74:61:72:c1:1e:03:5a:b9:ed:03:a9:90:24:31:7d:
                    f0:1f:d8:4a:73:b7:5d:f3:54:35:f1:d7:84:12:18:
                    00:d2:c3:f4:1c:d2:fa:6d:61:d6:9b:49:4f:59:80:
                    b2:66:10:15:4c:fa:4b:0f:b3:bd:41:f7:f8:db:23:
                    a8:cb:65:37:65:24:ac:e7:4c:b0:f6:10:de:e7:b5:
                    b0:4c:be:39:c6:a0:5b:b8:75:a5:52:2f:f1:ea:7c:
                    39:00:52:20:97:11:cf:8e:f3:82:4e:a9:96:5b:49:
                    68:5a:c8:88:17:aa:fb:f3:5f:a6:72:28:15:ad:a4:
                    d5:8f:02:91:b7:bd:99:c9:79:d4:ea:2a:79:9e:5c:
                    7e:16:20:c5:ac:c6:cb:01:5a:93:14:8b:d3:0d:85:
                    7b:00:48:28:26:f7:5e:a8:f0:3b:76:e2:e4:1b:02:
                    50:f4:3a:f5:e8:37:16:c3:94:ee:9f:ff:9a:e1:b2:
                    89:5d:88:5c:9e:47:4f:5d:ca:cf:88:5b:1a:0f:a8:
                    d9:3b:5e:90:b3:74:31:9a:18:65:25:ab:c8:11:46:
                    f9:11:54:e9:56:ff:66:b7:a6:fc:75:e5:48:ce:ad:
                    08:fe:4e:33:c2:28:b6:14:02:49:1a:47:b6:81:d3:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7E:95:DE:D8:14:4A:46:0A:C5:89:7A:B4:FC:D0:F0:39:7E:AB:2B
            X509v3 Authority Key Identifier:
                keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d3:b3:e0:cd:fa:3e:3e:be:4f:d8:23:db:eb:d1:78:eb:4e:
         02:10:23:ca:93:c6:9b:fa:4b:f6:73:2c:64:b7:4b:38:1d:5a:
         be:27:ab:93:bc:82:6c:9a:e4:9f:ad:bd:65:c1:33:8f:19:f8:
         3a:46:1c:3a:ce:61:63:b2:e1:57:9c:98:10:9b:cb:b9:3c:c5:
         f9:48:dd:c3:0a:c6:cc:c9:34:b5:fb:cb:08:8d:93:1b:94:5e:
         88:90:97:11:a7:10:57:15:76:48:1c:9f:3e:9a:83:21:94:db:
         04:d8:58:36:7f:3e:43:a3:a7:a9:55:05:9b:1d:30:46:95:72:
         ab:f6:a1:b5:f4:32:3e:41:df:92:4a:50:38:0c:bb:25:69:44:
         ea:b0:de:80:c2:ff:da:39:0a:c3:eb:dc:61:62:3e:18:36:29:
         36:27:44:13:0e:ad:94:ff:b3:54:de:74:1e:05:66:4e:46:dc:
         9d:ba:60:c5:7c:4d:80:a2:61:c1:68:75:7c:b2:31:3d:2d:cc:
         ce:74:7e:e2:09:62:61:ad:40:81:ec:04:34:e4:c4:d6:4b:8c:
         70:33:d9:26:79:bc:b0:64:db:17:7f:ee:d7:a5:c0:cb:4a:99:
         54:b7:93:8b:f9:51:fb:81:26:2b:68:bf:38:94:db:87:40:6b:
         20:c6:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:54 2024 by rpki-client on console-fra.rpki-client.org