Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File:                     7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier:          E6SfmKwzC5Jyu/7N+jjQaAZtbloOVunYrqVJr4Lehlg=
Subject key identifier:   DD:34:40:E5:B1:DC:3F:F7:81:01:B1:1B:C7:F3:45:34:7E:72:61:13
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer:       /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial:       018F49EB2C3230C25EC8C2C748E8A3055873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number:          1154
Signing time:             Sun 05 May 2024 18:01:40 +0000
Manifest this update:     Sun 05 May 2024 18:01:40 +0000
Manifest next update:     Mon 06 May 2024 18:01:40 +0000
Files and hashes:         1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: CeTuCv1YPo3Xc0ZXYi3nawnzBH2PS+UloOR/jqU/Vis=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:eb:2c:32:30:c2:5e:c8:c2:c7:48:e8:a3:05:58:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
        Validity
            Not Before: May  5 18:01:40 2024 GMT
            Not After : May  6 18:01:40 2024 GMT
        Subject: CN=dd3440e5b1dc3ff78101b11bc7f345347e726113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:2f:d0:fb:e2:c5:0d:84:6a:05:3d:9b:3f:
                    10:d5:78:07:cc:d4:21:ce:23:8b:f6:b6:9a:3c:c7:
                    76:b1:2a:a7:50:00:c7:59:bb:dc:b5:4c:e4:ec:a1:
                    7d:14:87:26:8f:53:0c:bb:84:8a:0e:75:64:35:34:
                    71:4b:5e:5a:2d:af:19:6b:ae:f1:32:73:23:e8:ec:
                    d3:55:49:4c:30:52:17:61:d5:a2:22:45:85:ce:26:
                    8c:1a:e4:84:12:38:27:21:31:4d:9f:cb:5f:a2:4e:
                    32:3c:8f:5d:0b:d6:1e:3a:0c:34:c7:5a:ed:81:6f:
                    fe:2d:53:42:45:1b:4f:52:d3:f8:d2:14:a4:02:40:
                    5b:9f:5b:05:d0:c9:de:72:6e:80:7a:f2:13:57:59:
                    02:d6:b2:41:51:79:01:aa:08:50:06:f5:e1:16:d5:
                    89:01:ec:91:47:60:cd:ae:5b:29:8d:45:8a:73:ec:
                    54:e3:92:70:f9:a1:87:77:18:6c:0f:1e:45:ad:52:
                    88:b6:ab:10:ac:15:20:18:7b:ff:ea:80:2b:74:bf:
                    08:43:48:7b:56:c5:97:f9:75:1c:b8:52:8f:32:bb:
                    2a:1b:89:f4:79:79:5d:b7:b0:e5:ea:31:67:83:18:
                    35:ed:82:a2:2e:92:29:0c:61:94:c7:0e:1c:72:92:
                    31:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:34:40:E5:B1:DC:3F:F7:81:01:B1:1B:C7:F3:45:34:7E:72:61:13
            X509v3 Authority Key Identifier:
                keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:74:0b:15:9b:ec:0b:38:b4:bc:c1:e1:b6:16:d5:33:bf:d2:
         d9:25:0e:04:be:35:6d:7e:3e:69:09:9a:13:38:fc:23:96:79:
         40:eb:a6:38:a8:8e:8b:9c:3c:13:98:99:77:f8:d2:88:6b:6d:
         c2:55:bd:58:fa:85:42:6b:07:c8:d8:af:68:65:4d:76:d6:30:
         95:95:cf:ba:b7:17:ed:22:df:c9:97:f9:7a:2a:6a:26:57:f1:
         51:d9:c4:d1:7c:36:97:09:5d:27:cb:37:08:33:b8:7b:14:b6:
         70:60:8a:00:f4:99:2c:cd:c9:6b:57:23:be:65:23:b9:0a:74:
         89:a8:5e:3c:08:ac:60:f2:30:85:37:c2:00:ef:ea:70:2f:a1:
         54:0c:7e:74:13:2e:7e:ed:59:6a:40:e8:bf:98:e6:ac:34:16:
         60:93:fd:ae:99:ad:ca:1d:fb:22:05:b6:bb:4b:89:36:54:09:
         6e:05:a9:5f:d2:c7:3c:fb:f9:0d:ca:53:06:61:7c:d9:3b:78:
         96:2c:0d:a7:c2:38:fb:3a:3e:e9:80:90:80:00:f9:75:07:de:
         49:00:d4:9c:c7:4c:e4:5f:6a:00:2e:a6:9c:43:76:98:0c:43:
         27:c5:43:f0:d2:d0:10:3d:3a:e4:49:d8:46:64:71:ce:2f:a4:
         b2:83:8d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:01:23 2024 by rpki-client on console-ams.rpki-client.org