Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File:                     oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier:          A3fhQWNaq2pF6npqyLmITtlNbLMKFUkv8Jhxx0sL5jM=
Subject key identifier:   78:62:D4:A2:18:C4:2D:36:AE:ED:B2:0B:07:24:02:52:38:5E:02:33
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer:       /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial:       018F874AC4D091F3AD83897E448C8401D8D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:02:55 +0000
Manifest this update:     Fri 17 May 2024 16:02:55 +0000
Manifest next update:     Sat 18 May 2024 16:02:55 +0000
Files and hashes:         1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: OL4av5IyDKwRRVh7FG677HuPse5KTv5IK6TyStp1WAs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:c4:d0:91:f3:ad:83:89:7e:44:8c:84:01:d8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
        Validity
            Not Before: May 17 16:02:55 2024 GMT
            Not After : May 18 16:02:55 2024 GMT
        Subject: CN=7862d4a218c42d36aeedb20b07240252385e0233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:7b:9b:8c:78:12:8f:0d:51:13:96:18:73:
                    dc:c5:a1:93:fe:ac:8d:74:c7:d1:12:89:a7:5a:f2:
                    a9:48:d7:29:9f:66:b4:9b:6b:89:0e:e0:14:a5:f9:
                    db:7d:f6:32:b9:92:18:2d:5c:87:45:0f:44:3a:3e:
                    31:93:e5:de:f2:98:dc:c7:71:93:17:46:d4:7c:e7:
                    cf:63:95:40:77:d6:f4:66:e9:c2:cb:12:1b:14:12:
                    5f:6e:bc:54:f6:ea:16:2b:42:2c:d9:d1:d7:15:34:
                    be:97:25:e3:96:b4:40:92:ee:c4:40:8d:bb:b3:1c:
                    61:11:ce:34:70:88:24:c3:e8:55:d8:fc:45:3c:51:
                    88:12:23:62:23:ba:95:0f:c2:5e:4c:e5:3d:82:a5:
                    76:18:1f:df:5c:1a:22:54:ca:4a:a9:75:3c:0b:b5:
                    07:78:7c:72:96:5c:2a:ab:9f:6b:f8:7a:e4:73:76:
                    37:97:55:e7:25:0c:1e:f2:ed:d0:48:24:9e:1c:e9:
                    db:79:aa:1a:ca:b4:f6:e0:19:4a:06:e3:27:6d:d9:
                    92:6f:7d:dd:36:31:cb:8e:bf:7b:bd:b7:8d:54:0a:
                    5e:6e:a3:69:4d:f5:57:bb:04:19:0c:36:dd:a3:7c:
                    78:71:47:f1:8b:66:bc:10:a2:3a:1d:a7:bd:48:c8:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:62:D4:A2:18:C4:2D:36:AE:ED:B2:0B:07:24:02:52:38:5E:02:33
            X509v3 Authority Key Identifier:
                keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:97:95:a7:18:e7:bd:1c:ff:d5:49:9e:7c:32:e6:5c:a3:71:
         ea:43:e3:c4:d1:e6:c3:d5:80:e3:fe:25:e2:13:92:5e:2e:73:
         21:25:8d:ea:cd:aa:32:87:ee:07:6b:9a:d1:f2:c1:4c:6b:0a:
         1c:e1:80:0d:65:89:0d:36:79:18:30:ac:fb:4c:35:ce:6f:cd:
         56:9b:78:03:a8:c1:5a:6e:f9:2d:fa:fe:bc:95:2f:74:ea:5e:
         01:5e:5c:af:42:76:5d:10:0f:03:3d:61:bb:84:0b:0a:7a:f5:
         59:6a:a2:12:43:ba:2b:5f:74:9d:07:16:2b:22:3d:3a:b2:d1:
         45:40:97:1a:24:6a:b6:19:48:72:99:df:e5:6d:57:4d:13:dd:
         59:9b:3c:95:95:42:f3:5d:6d:08:d3:43:54:57:27:2a:3f:17:
         5f:51:72:af:29:f6:cc:9a:22:85:39:75:2f:fb:12:9e:ff:e3:
         06:d0:10:65:08:e8:1b:22:d9:4a:2a:28:3c:0f:14:a1:f7:a3:
         fc:96:96:8a:ad:49:b4:33:d8:ef:bc:bf:c6:41:85:ce:02:b0:
         66:12:3e:e9:ea:c3:23:2d:41:2e:f8:fa:5a:f9:58:23:d0:44:
         78:9b:7f:b6:5c:b4:3f:5e:52:9e:67:19:d8:c8:c6:98:c4:f6:
         b5:75:b4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:48 2024 by rpki-client on console-ams.rpki-client.org