Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File:                     9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier:          8QBmh1MSMggA8W/sI12K+jy1fVn99+GhANuT5mUejYY=
Subject key identifier:   42:EA:24:F3:35:F1:32:BA:1F:25:0D:F0:2B:80:11:F4:C8:8D:C5:B8
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer:       /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial:       018F904BF9B47FABE19A590471EB070D2154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number:          1179
Signing time:             Sun 19 May 2024 10:00:49 +0000
Manifest this update:     Sun 19 May 2024 10:00:49 +0000
Manifest next update:     Mon 20 May 2024 10:00:49 +0000
Files and hashes:         1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: u2F74Gy8824RUHA2jQcmemNiYU9fKidhGVX5imkzcKw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:4b:f9:b4:7f:ab:e1:9a:59:04:71:eb:07:0d:21:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
        Validity
            Not Before: May 19 10:00:49 2024 GMT
            Not After : May 20 10:00:49 2024 GMT
        Subject: CN=42ea24f335f132ba1f250df02b8011f4c88dc5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:ca:72:5c:2f:4e:43:a3:78:da:0b:83:fa:
                    1c:60:a0:23:47:f9:9b:9e:05:fe:56:dd:fa:bb:1d:
                    01:fe:c8:6e:24:a4:c9:21:02:63:79:82:47:6b:b7:
                    1c:73:45:ec:00:55:48:ab:cd:cf:fe:c9:a5:3b:c6:
                    0f:84:4c:ba:43:da:ab:5b:cb:e1:bf:01:fc:52:a8:
                    7b:02:af:c6:3a:84:c5:f6:c7:7e:eb:5f:45:2c:83:
                    4d:c3:ca:6d:53:b5:53:4f:2e:f7:d1:eb:86:f0:4a:
                    ec:15:dc:9a:bf:1d:e3:96:ce:8e:6c:be:c2:e9:9b:
                    9f:91:87:c8:79:4f:81:81:4c:dd:a3:42:bf:02:84:
                    d9:fd:c2:90:f0:1b:91:84:d7:88:f7:03:b2:5d:e9:
                    74:7b:d4:e5:6b:02:39:d1:2d:71:8b:56:4c:6f:d5:
                    6b:73:e1:dd:9e:9a:3b:bb:44:a2:98:b8:bd:b7:53:
                    68:3f:8d:58:58:53:79:c5:2b:7f:e4:02:6a:8c:fb:
                    a8:0f:06:e6:e8:e0:b4:25:6d:65:d9:81:5e:0b:b0:
                    65:3d:7a:2c:4a:1c:87:ae:7a:cb:34:41:02:43:fc:
                    1c:78:37:7f:fb:b8:88:e3:59:a2:e0:d5:02:bf:d4:
                    c6:4e:e6:56:7b:c5:af:62:55:33:17:61:f2:14:e4:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EA:24:F3:35:F1:32:BA:1F:25:0D:F0:2B:80:11:F4:C8:8D:C5:B8
            X509v3 Authority Key Identifier:
                keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:63:d2:41:5f:12:4d:85:88:71:ea:74:17:7b:d8:f8:6d:3a:
         24:d3:6d:1a:68:cb:33:57:2d:c1:2b:81:48:d1:4d:d9:81:5a:
         6d:c4:a0:77:80:44:c2:65:e9:87:d0:62:d3:8c:07:a5:6d:23:
         70:bc:fe:9c:52:42:13:10:ce:c3:09:75:70:f9:d2:bc:74:35:
         4f:b3:dc:93:94:36:30:63:b0:e1:bd:36:cb:00:26:6c:e0:ca:
         7f:e4:93:d0:4a:43:2f:c4:46:bb:4b:14:97:71:f3:42:ce:61:
         7c:fd:f0:d0:27:44:23:9c:21:15:98:8b:e5:db:47:f2:6d:11:
         8f:bf:ad:b8:a0:5f:e2:cb:ff:88:41:ad:54:d6:ca:da:ee:89:
         51:01:3d:ab:50:e3:4a:29:cc:d1:5a:ba:a2:71:33:96:af:81:
         a4:67:ce:3c:25:17:fb:71:88:ae:f6:e4:89:b6:bd:b5:47:af:
         55:e9:29:48:cd:bf:d1:7a:55:04:b9:c8:eb:4d:52:83:8c:7d:
         95:37:e4:63:ab:23:e0:e5:e6:17:f6:d0:87:27:7e:8c:43:28:
         c1:7f:d9:00:04:76:c9:cd:2f:c0:68:ba:a7:22:58:82:82:c6:
         2b:59:41:26:4d:25:d7:b2:1e:c1:a2:40:7d:7f:6f:1c:b2:e1:
         2f:0a:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:45:21 2024 by rpki-client on console-fra.rpki-client.org