Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
File:                     FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json)
Hash identifier:          wqmlNY5gnH1/1gEGHVfP19ZUsGh2gq4JE3WEUIyWjIU=
Subject key identifier:   68:D7:9C:77:50:6F:59:A4:01:42:52:85:02:9C:67:F2:78:52:52:AE
Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
Certificate issuer:       /CN=17279aad17df6bf657565ae5a93eb90985374a3c
Certificate serial:       01906F08E78F4F2059C334826C2D7470808F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
Manifest number:          1180
Signing time:             Mon 01 Jul 2024 16:02:52 +0000
Manifest this update:     Mon 01 Jul 2024 16:02:52 +0000
Manifest next update:     Tue 02 Jul 2024 16:02:52 +0000
Files and hashes:         1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: mZIju6/YqcL1xfvarrVNVMv7hAGT6X9rPRWePPlsisA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6f:08:e7:8f:4f:20:59:c3:34:82:6c:2d:74:70:80:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c
        Validity
            Not Before: Jul  1 16:02:52 2024 GMT
            Not After : Jul  2 16:02:52 2024 GMT
        Subject: CN=68d79c77506f59a401425285029c67f2785252ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:9e:ab:e2:37:a4:a3:01:2e:83:6e:dc:67:
                    52:b4:a0:24:37:f5:ee:61:f2:b3:55:42:bf:db:f3:
                    bb:0b:81:c1:25:10:bb:d8:6a:cd:fb:69:ab:ec:27:
                    95:6f:55:56:8b:1a:76:3a:34:10:b9:73:fd:76:8d:
                    1d:c8:bf:46:36:6d:b7:c9:93:97:8b:76:9d:b4:62:
                    aa:be:82:ce:88:c3:fa:93:83:d9:f8:46:0a:26:46:
                    26:cd:6e:c6:4d:1b:4c:ff:82:15:1c:03:c2:37:91:
                    40:e1:d0:a9:6d:b0:1f:66:a9:48:da:a1:82:d4:fb:
                    1b:05:38:e1:12:4b:e0:99:37:9a:63:b4:e6:a8:55:
                    fc:93:ed:a4:1e:13:7c:5d:c0:c3:bb:d6:71:26:28:
                    f6:3a:03:8c:77:56:8b:6a:bf:b9:60:99:b3:a9:d8:
                    b9:82:40:91:36:83:ab:66:c2:a5:c1:76:56:30:b1:
                    8a:9f:cc:c1:0b:95:97:c6:5c:47:57:a4:b7:b4:92:
                    4b:e8:a4:b0:0d:c5:43:65:1d:d7:74:b3:f3:a2:55:
                    61:92:9c:4e:f6:ff:15:4e:2a:ca:4f:e5:71:bf:62:
                    ac:f4:e4:3c:76:7b:3f:2e:51:be:da:66:f2:e9:37:
                    ab:c6:f6:3d:5e:5a:ca:f1:d2:d5:e2:37:e8:df:84:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D7:9C:77:50:6F:59:A4:01:42:52:85:02:9C:67:F2:78:52:52:AE
            X509v3 Authority Key Identifier:
                keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:10:ae:b7:83:0b:61:e1:79:28:ec:f1:26:e7:a2:db:c1:4d:
         5f:9e:a1:36:04:cc:53:a8:df:1b:b3:f2:4f:91:09:85:99:1c:
         4f:4c:76:f4:c9:e6:d4:a5:e3:10:36:f6:de:d1:2c:48:c3:ef:
         e5:9e:d3:42:e1:83:55:81:56:b9:b6:87:81:00:bf:18:4a:73:
         04:a5:d7:4b:01:ce:07:4d:1b:50:dd:ff:08:e0:ff:65:cc:ab:
         c3:a5:5a:7d:1b:1c:7f:21:65:b9:ea:c2:4c:65:59:3a:85:d6:
         db:d1:c5:18:b5:c7:c4:bb:f8:a9:1a:ad:65:43:2b:6f:29:f6:
         14:0f:35:76:0e:03:76:ac:88:4b:9f:2e:24:5b:86:e8:2d:e3:
         e6:d1:09:e0:c7:c0:6f:68:6f:ef:b0:f4:d3:b8:22:54:3c:b5:
         7a:8d:10:11:70:7f:a3:c8:f9:7d:c4:4c:9b:3c:fd:ca:fd:43:
         84:ad:97:68:83:c4:76:bd:a0:fa:70:a2:3b:cd:7a:b0:22:e9:
         1a:9b:e6:a9:10:1e:20:fd:46:03:5c:2a:66:98:5b:d2:f7:35:
         38:82:8f:1a:7a:f7:25:cf:61:29:77:98:7f:42:7a:71:13:8d:
         36:39:09:b3:fa:fa:1f:e6:c6:26:e7:51:8d:27:db:97:aa:ef:
         ba:90:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 19:32:51 2024 by rpki-client on console-ams.rpki-client.org