Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
File:                     FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json)
Hash identifier:          sRbTZC5hBRHqtztkroAFB4ZOj+ehu1sJMXVhChHRvSg=
Subject key identifier:   05:DE:A4:36:10:E2:4D:1E:8F:9C:41:AE:7B:AB:D2:A9:2E:17:12:A2
Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
Certificate issuer:       /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Certificate serial:       018F343F50583A58E5DA93091EEE6787D32B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
Manifest number:          1149
Signing time:             Wed 01 May 2024 13:01:55 +0000
Manifest this update:     Wed 01 May 2024 13:01:55 +0000
Manifest next update:     Thu 02 May 2024 13:01:55 +0000
Files and hashes:         1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: 6EgWxE2DltoOuPRWrSmQPP3pX0Jh7gVl+yHk5DtxjDM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:3f:50:58:3a:58:e5:da:93:09:1e:ee:67:87:d3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
        Validity
            Not Before: May  1 13:01:55 2024 GMT
            Not After : May  2 13:01:55 2024 GMT
        Subject: CN=05dea43610e24d1e8f9c41ae7babd2a92e1712a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6a:a1:26:5d:21:f5:3e:83:41:17:99:c5:ae:
                    47:54:b4:d1:a0:7f:4a:bf:e0:10:15:59:52:6c:29:
                    bc:84:b2:2f:0c:db:82:b7:23:70:84:88:0d:17:7a:
                    5e:63:67:01:64:9a:ef:28:e1:e3:36:6c:b5:38:fc:
                    6d:bb:36:6f:10:2d:b7:cb:3f:79:c7:5b:94:4d:80:
                    f2:df:89:ff:52:f2:c7:14:04:90:20:9f:67:5c:98:
                    eb:69:ee:99:fc:96:fb:55:02:00:ea:8e:87:2c:e9:
                    4e:42:3c:ff:b7:23:12:0e:49:b8:97:ff:3f:13:49:
                    a0:85:77:89:be:b4:7e:66:ba:3f:69:2c:93:b2:8e:
                    40:fe:e2:e4:34:76:6e:79:8a:9e:1c:e3:f1:56:34:
                    72:d7:97:35:22:26:0e:e6:b8:58:c9:ac:ad:5f:53:
                    2f:4c:53:5e:88:d7:0e:a1:fc:be:dd:82:a6:e1:e5:
                    7f:33:4c:e7:5b:df:c7:58:6f:76:a7:e7:31:46:9f:
                    7a:cd:c1:be:68:fe:59:93:cb:4c:ce:c9:ef:2f:2c:
                    37:3a:25:ba:e6:1b:56:e3:bd:2d:e7:85:18:ee:40:
                    d5:c2:a4:cb:82:dc:98:f3:e8:12:eb:3c:30:ae:89:
                    ba:5e:c1:fa:01:45:c2:04:03:88:46:43:e1:de:20:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DE:A4:36:10:E2:4D:1E:8F:9C:41:AE:7B:AB:D2:A9:2E:17:12:A2
            X509v3 Authority Key Identifier:
                keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e8:b7:91:1c:ea:8e:5d:4f:91:68:2e:98:b4:23:ea:b9:64:
         ac:36:4e:a0:57:f8:5c:f6:9a:82:1b:c4:86:db:37:28:4f:4d:
         31:8d:2c:f2:3a:90:3e:0f:e8:29:fe:6d:5c:06:a6:ee:5c:6c:
         67:d5:5d:73:5d:e6:39:8e:4d:09:4b:c1:34:61:e1:c7:59:48:
         d1:88:9e:77:03:31:08:8e:9f:49:78:62:73:94:32:2a:b8:0d:
         c1:59:2d:36:8e:20:93:65:d5:6b:17:cb:10:3a:16:6f:8d:54:
         88:2b:49:22:2e:e0:80:72:24:3d:ae:ff:48:a7:1b:ab:e7:71:
         02:00:77:75:4f:09:88:9d:dc:7e:ac:79:41:09:13:0b:9d:99:
         10:79:72:fc:d5:4e:3e:b5:f4:8f:57:e6:7d:e8:19:d9:ae:76:
         12:10:15:93:0b:11:5d:50:05:db:a6:b4:e4:95:98:c3:b3:4c:
         b8:3c:07:d4:41:3f:41:93:c4:87:6a:14:b9:11:ed:10:ec:b8:
         f9:cc:a8:74:4f:8f:d9:c9:3c:33:41:71:15:e3:46:c1:9f:ca:
         de:72:1b:39:b0:a2:26:ae:3f:5e:9d:a8:1c:fb:4f:f4:6e:94:
         14:fa:2f:67:48:35:5e:37:7a:74:ad:0c:0d:f6:f6:6b:9a:d4:
         ba:14:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:46:58 2024 by rpki-client on console-fra.rpki-client.org