Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft
File:                     xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft (raw, json)
Hash identifier:          J/EAzcQcxzXm7Ya1r0sTrtYhy4klgoqu1/8SJRhN6T0=
Subject key identifier:   A5:6F:F7:49:5B:E9:5B:ED:F8:F6:A5:29:03:E2:61:5A:4D:F7:AB:36
Authority key identifier: C6:8E:E4:F9:68:E6:0E:0D:3C:A8:87:F7:07:3D:C9:7E:A6:DF:44:4E
Certificate issuer:       /CN=c68ee4f968e60e0d3ca887f7073dc97ea6df444e
Certificate serial:       018F87B6B3428367B1E5257428D01716FFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xo7k-WjmDg08qIf3Bz3JfqbfRE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft
Manifest number:          72
Signing time:             Fri 17 May 2024 18:00:48 +0000
Manifest this update:     Fri 17 May 2024 18:00:48 +0000
Manifest next update:     Sat 18 May 2024 18:00:48 +0000
Files and hashes:         1: xo7k-WjmDg08qIf3Bz3JfqbfRE4.crl (hash: 7JzxtTKk8O4A/vrKLDwk/mkbw7K5IgSYy96uiG297aU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xo7k-WjmDg08qIf3Bz3JfqbfRE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b3:42:83:67:b1:e5:25:74:28:d0:17:16:ff:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68ee4f968e60e0d3ca887f7073dc97ea6df444e
        Validity
            Not Before: May 17 18:00:48 2024 GMT
            Not After : May 18 18:00:48 2024 GMT
        Subject: CN=a56ff7495be95bedf8f6a52903e2615a4df7ab36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c4:1f:c5:99:b4:d8:12:79:48:6c:b4:bb:89:
                    ce:be:ed:9b:3f:96:87:b7:c3:be:0d:0c:57:ba:e0:
                    30:a2:bc:02:8b:65:bf:ce:09:4f:bf:7b:97:51:24:
                    b6:e4:9c:f0:2a:c2:04:ba:da:60:e3:c8:93:00:60:
                    39:dc:c8:07:9b:aa:0b:5a:6e:44:73:e7:19:2c:82:
                    ff:ef:a3:7c:b4:e6:fb:51:45:2f:a2:6e:c5:fc:0c:
                    40:8c:1b:8c:47:ec:bb:88:2e:01:f7:2e:de:97:02:
                    0b:c4:f2:18:5a:fa:79:6d:e8:0f:b8:09:27:f4:37:
                    74:5d:07:4d:55:7e:50:5a:9e:8b:4a:af:5c:ca:20:
                    18:ea:e8:61:53:e0:df:0f:3e:fc:2f:ad:f9:10:46:
                    7d:39:91:2a:9b:16:09:75:ab:18:2a:6e:0d:c5:9e:
                    33:4a:de:4a:5f:2a:5b:02:64:75:db:c9:7a:51:15:
                    4f:c5:14:28:9b:5a:41:02:14:57:8e:21:bc:40:7f:
                    8c:93:72:b4:6a:2f:5c:4a:cf:e2:04:04:ec:76:32:
                    a5:fc:37:74:81:92:66:da:a7:fc:54:82:bd:2b:6d:
                    16:7e:97:87:b9:a3:41:9b:7b:48:8d:9e:87:d7:a5:
                    c3:44:9c:48:d4:b6:b2:fb:cb:56:c8:45:16:23:25:
                    e1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6F:F7:49:5B:E9:5B:ED:F8:F6:A5:29:03:E2:61:5A:4D:F7:AB:36
            X509v3 Authority Key Identifier:
                keyid:C6:8E:E4:F9:68:E6:0E:0D:3C:A8:87:F7:07:3D:C9:7E:A6:DF:44:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7k-WjmDg08qIf3Bz3JfqbfRE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/38f308-20ea-4e51-9204-70bc1c7da8d7/1/xo7k-WjmDg08qIf3Bz3JfqbfRE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a8:96:7d:e2:90:dd:cd:4a:25:36:cf:e0:d2:43:0f:61:6c:
         93:82:3e:96:36:5f:72:13:4a:b0:10:8b:06:d1:7a:09:79:bc:
         ad:ed:b2:b1:cc:26:f1:1a:17:28:fb:a5:41:79:74:62:f1:98:
         02:5f:b0:e4:ce:86:a5:ff:e4:76:d4:a3:ce:2b:3e:87:d3:b6:
         9d:c7:6e:7a:47:02:31:e8:ce:f2:24:62:cd:f5:fd:42:1a:61:
         fd:0c:e7:1a:dc:4c:25:2f:ba:44:9c:b9:58:76:88:7e:5c:ef:
         7c:2c:ab:c4:29:5a:e2:65:bf:53:d0:08:1c:a2:0b:2b:17:16:
         fe:f6:b2:c1:3c:7a:19:31:88:c9:ac:65:70:6a:90:7d:cb:52:
         ff:39:dd:03:40:92:76:e1:1c:3c:be:f7:63:f8:85:78:74:99:
         e9:17:31:dc:36:27:69:1b:9f:2a:0b:9a:bb:70:ba:13:fa:1e:
         2e:a2:b6:44:b1:36:6d:c0:f6:2a:69:11:83:2c:59:10:da:d5:
         f3:7d:14:aa:78:8d:ef:bf:72:50:03:15:d7:db:a3:e4:0d:60:
         ed:23:4b:fb:ed:27:f0:b5:85:e6:16:98:b8:75:46:c8:a9:70:
         e4:24:2a:10:66:ee:d9:51:40:79:d1:fd:22:73:49:28:f4:e7:
         29:de:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:27 2024 by rpki-client on console-fra.rpki-client.org