Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/Fkwq19YOy_iTAOPn1OyF8UkxRm4.mft
File:                     Fkwq19YOy_iTAOPn1OyF8UkxRm4.mft (raw, json)
Hash identifier:          Kfr6NuFoXQolZDnyYsOBL8PXtYXzxTUCR3LceWGp0rI=
Subject key identifier:   53:68:8A:71:FF:0C:95:22:65:18:17:EC:6B:2F:1E:EF:2A:53:09:66
Authority key identifier: 16:4C:2A:D7:D6:0E:CB:F8:93:00:E3:E7:D4:EC:85:F1:49:31:46:6E
Certificate issuer:       /CN=164c2ad7d60ecbf89300e3e7d4ec85f14931466e
Certificate serial:       018F893934F1ACD1372CD4709056389F52DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fkwq19YOy_iTAOPn1OyF8UkxRm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/Fkwq19YOy_iTAOPn1OyF8UkxRm4.mft
Manifest number:          022F
Signing time:             Sat 18 May 2024 01:02:58 +0000
Manifest this update:     Sat 18 May 2024 01:02:58 +0000
Manifest next update:     Sun 19 May 2024 01:02:58 +0000
Files and hashes:         1: Fkwq19YOy_iTAOPn1OyF8UkxRm4.crl (hash: Dm9eU+krucBzKg2fEorEIHzTd2NvcDDp/PlvOLCngGU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/Fkwq19YOy_iTAOPn1OyF8UkxRm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/Fkwq19YOy_iTAOPn1OyF8UkxRm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fkwq19YOy_iTAOPn1OyF8UkxRm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:34:f1:ac:d1:37:2c:d4:70:90:56:38:9f:52:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164c2ad7d60ecbf89300e3e7d4ec85f14931466e
        Validity
            Not Before: May 18 01:02:58 2024 GMT
            Not After : May 19 01:02:58 2024 GMT
        Subject: CN=53688a71ff0c9522651817ec6b2f1eef2a530966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b7:95:b3:c8:6c:4b:b3:ac:27:0d:81:21:19:
                    66:90:6b:32:70:66:25:48:c5:91:ea:59:4c:aa:09:
                    dc:6f:c4:e9:77:21:06:20:76:b6:29:7a:bd:c5:19:
                    a5:aa:04:64:69:ad:9c:d1:da:d5:3c:ec:f8:29:ce:
                    21:c6:ab:0b:8a:75:a6:9d:fe:1f:e8:f6:07:1f:56:
                    be:2a:0b:f2:4a:d7:1b:66:11:ed:16:d6:76:51:75:
                    35:80:a8:9e:33:3a:44:43:af:95:0f:22:1b:f0:c4:
                    e5:80:0d:e7:fa:0a:71:ef:dc:5c:35:19:d9:03:f2:
                    56:c2:0d:12:82:99:e9:e9:f3:8b:11:0e:6a:38:72:
                    38:44:86:b2:39:a3:b0:88:ed:bd:a6:4e:7e:29:91:
                    e9:91:aa:8b:e6:fc:28:2d:66:ba:5b:c4:fb:2e:d4:
                    b4:df:a3:ec:40:79:d7:dc:a1:f3:b0:a7:81:4d:8c:
                    2c:e1:32:d4:d6:63:59:6e:84:ff:b1:2c:42:a2:f9:
                    6e:ab:ff:69:44:13:89:37:f8:71:62:d2:83:82:03:
                    0f:4c:9b:9d:8d:9f:42:3a:5d:6b:4a:79:26:bf:51:
                    65:b8:e1:4f:c9:84:72:3d:92:a2:38:6f:ac:8e:f6:
                    a5:d7:f2:05:90:39:b9:29:7f:67:76:a4:d1:1e:1c:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:68:8A:71:FF:0C:95:22:65:18:17:EC:6B:2F:1E:EF:2A:53:09:66
            X509v3 Authority Key Identifier:
                keyid:16:4C:2A:D7:D6:0E:CB:F8:93:00:E3:E7:D4:EC:85:F1:49:31:46:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkwq19YOy_iTAOPn1OyF8UkxRm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/Fkwq19YOy_iTAOPn1OyF8UkxRm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/Fkwq19YOy_iTAOPn1OyF8UkxRm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9a:e5:85:84:65:e2:9a:0e:34:bb:fb:1b:9a:ab:84:d9:5c:
         43:43:9b:60:c2:cc:21:f9:b1:4b:15:8b:f3:40:38:c9:f7:25:
         f1:ff:c3:48:1d:c4:fa:46:5d:6a:22:e3:49:2a:03:32:91:83:
         a4:2d:10:12:3d:6f:e4:72:aa:17:69:f5:e9:d8:f6:64:3c:c4:
         16:a0:64:a1:18:69:b6:58:55:c2:88:c7:72:0f:fb:e3:7f:e3:
         7d:51:65:2a:bf:07:be:c1:1f:e5:ff:be:86:7d:6b:07:9c:eb:
         fe:62:10:c2:f9:ef:a9:b4:6c:2d:ff:88:63:0a:50:04:d3:d7:
         76:fb:33:13:1b:06:cf:31:c5:c9:b4:a7:89:0f:52:4c:d9:99:
         0d:41:37:3e:e1:b0:e9:1a:da:77:ae:4c:b0:2f:d2:64:1b:bd:
         dc:ba:57:ac:e9:e7:e0:32:eb:20:71:e4:8b:16:56:3f:f2:f0:
         e1:c7:c6:64:e4:05:6f:65:93:c9:b1:b8:e4:cb:4b:e6:68:5c:
         fb:af:c2:da:4b:45:64:54:65:80:f3:7e:66:92:bc:db:e5:a7:
         93:b9:06:ac:ad:b4:3d:6e:72:6f:1e:d0:19:62:b7:aa:48:31:
         ff:7f:dc:e7:2d:a7:73:16:63:37:9e:4e:e0:74:82:24:0d:f4:
         50:0e:f1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:53:25 2024 by rpki-client on console-ams.rpki-client.org