Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File:                     ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier:          AinDm3X2LFjVMi+xH8X8EyyCmY34Jvg76WhrG28EZrk=
Subject key identifier:   17:9D:FE:18:81:CA:C8:B3:0A:E8:43:FD:AB:90:44:33:8F:A0:BA:5B
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer:       /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial:       018F4C10367D876DD776D6B2CDB1F68C94A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number:          1154
Signing time:             Mon 06 May 2024 04:01:21 +0000
Manifest this update:     Mon 06 May 2024 04:01:21 +0000
Manifest next update:     Tue 07 May 2024 04:01:21 +0000
Files and hashes:         1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: 03ZA1X+B7lm7i7rzI8kIEcERZnpB0A/wxLjHLc5q9fI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:10:36:7d:87:6d:d7:76:d6:b2:cd:b1:f6:8c:94:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
        Validity
            Not Before: May  6 04:01:21 2024 GMT
            Not After : May  7 04:01:21 2024 GMT
        Subject: CN=179dfe1881cac8b30ae843fdab9044338fa0ba5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:19:42:b6:0c:ed:63:36:9d:a4:9c:40:3c:
                    a6:e0:33:06:5a:95:61:9e:b1:20:17:c6:a9:26:12:
                    fb:79:90:51:d0:62:00:31:02:3a:22:f4:1d:a2:9b:
                    78:6b:e8:7a:04:db:03:84:e9:9e:6f:aa:83:dc:08:
                    6c:dc:e8:0c:24:4c:f0:26:e5:26:ca:45:b5:52:5f:
                    71:dc:96:7b:b7:91:e5:df:cd:7f:ec:5c:da:c9:dd:
                    f8:72:0f:99:51:de:39:7f:27:57:6d:ef:9e:4c:6c:
                    1b:cf:01:1f:4c:32:2e:56:6f:a0:41:e2:c6:e3:98:
                    fa:20:75:01:09:fd:67:af:c9:9f:23:fc:d9:f3:b8:
                    7f:1e:e1:dd:bf:ee:58:71:35:92:c1:1c:00:79:18:
                    1e:a6:b0:7c:92:15:b6:80:4a:79:6c:4d:32:11:a3:
                    d3:fb:5f:44:37:eb:44:08:95:19:47:86:c4:c2:f1:
                    09:53:2d:8d:03:73:6b:48:a8:5a:9b:99:68:19:93:
                    4f:2d:de:8b:a7:4e:4a:07:45:ab:39:0a:6f:63:f4:
                    ce:1d:6b:de:ca:55:6d:1f:17:44:28:16:de:66:ff:
                    45:60:1f:50:1f:8f:d3:5b:d6:4f:8d:ab:08:d7:bf:
                    fb:ef:5c:4a:93:be:fa:b0:59:86:ea:a8:14:0b:59:
                    ba:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9D:FE:18:81:CA:C8:B3:0A:E8:43:FD:AB:90:44:33:8F:A0:BA:5B
            X509v3 Authority Key Identifier:
                keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b2:30:5c:9f:a4:12:2c:0d:47:a4:85:56:1f:61:d9:9c:cf:
         b1:a8:d7:38:20:13:06:4e:39:b5:07:fc:e2:b6:1b:6a:17:d6:
         20:fe:3c:87:4d:de:90:92:0f:15:bd:c3:b3:61:58:c8:ac:26:
         4e:01:f9:88:a4:27:93:e9:bf:65:41:0f:e0:6d:4f:6e:f8:29:
         2f:01:15:68:49:54:c2:d8:fe:59:65:6e:9e:4d:74:d4:97:07:
         2b:94:1f:34:ef:e3:fd:72:7f:e6:32:f4:4c:ec:8f:e0:e5:54:
         49:9b:01:1c:48:f3:11:c2:3c:76:f1:05:1c:87:b0:2f:06:eb:
         fb:0b:a6:30:c4:35:75:58:29:33:8a:77:82:df:32:7e:09:c1:
         5c:16:27:2a:4d:5b:82:b3:a9:0e:e9:65:8a:ff:2a:84:a7:56:
         4e:b5:6a:c6:14:26:6c:23:23:49:4e:8d:ba:b0:f8:27:47:df:
         cb:70:be:24:79:52:a1:b3:55:26:2f:cd:7d:39:d4:c5:54:2b:
         e1:9b:18:be:44:9e:be:97:ac:a7:21:d9:d2:14:9d:ca:58:5d:
         31:e2:97:46:16:d1:da:c6:3e:9c:57:6e:c3:b9:e0:e1:a7:87:
         cc:0f:f0:0e:5a:64:02:e1:4e:20:9d:b5:9c:29:6a:a7:8d:e3:
         b6:19:13:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 13:39:27 2024 by rpki-client on console-ams.rpki-client.org