Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File:                     987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier:          faJ57yZkx3ACyBu/cEoeu/uXuexsIeRf9vkBvta5PdQ=
Subject key identifier:   80:8A:86:28:B5:98:B6:2F:76:FE:E6:A4:E3:B9:3A:5B:1D:3A:4D:CE
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer:       /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial:       018F41C54037BA2F6A1CC0CCDC05122D350E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number:          0913
Signing time:             Sat 04 May 2024 04:03:17 +0000
Manifest this update:     Sat 04 May 2024 04:03:17 +0000
Manifest next update:     Sun 05 May 2024 04:03:17 +0000
Files and hashes:         1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: +Y0D8LFNBLizU3k5PgtaewmuW6QTCTGmfkr/oqSLT8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c5:40:37:ba:2f:6a:1c:c0:cc:dc:05:12:2d:35:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
        Validity
            Not Before: May  4 04:03:17 2024 GMT
            Not After : May  5 04:03:17 2024 GMT
        Subject: CN=808a8628b598b62f76fee6a4e3b93a5b1d3a4dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:cf:21:c0:8f:72:13:59:94:62:81:ac:76:
                    1b:71:4f:f0:9e:01:a6:6f:ee:19:a1:14:f1:01:08:
                    e0:18:88:e3:04:bd:fd:e1:aa:29:30:16:9b:a9:79:
                    73:2f:fc:65:cb:9f:1a:68:88:ad:3e:aa:9b:58:77:
                    eb:7c:c6:d3:67:0a:ed:ae:77:08:d4:6c:e0:88:0b:
                    32:a0:2f:cb:4b:cc:bc:94:ec:04:dd:f2:f3:a4:dd:
                    c8:e5:fc:12:5a:86:1a:81:0c:c6:9d:16:7d:9f:6f:
                    dc:d4:ff:9f:4b:8d:02:5e:66:33:5b:e3:47:27:68:
                    81:ee:8f:29:bf:5a:5a:e7:58:1f:69:59:bc:69:58:
                    ca:02:cd:56:53:67:ac:b3:87:5a:df:df:87:fc:53:
                    d2:11:c9:55:55:81:c3:13:79:5e:63:af:7f:dc:0b:
                    3f:ca:10:01:b3:3e:ff:45:0d:13:1d:e5:50:fc:d4:
                    0a:51:34:a0:b6:3c:ff:44:3f:72:a7:97:07:df:9f:
                    07:9e:2b:13:ff:75:ad:2b:46:83:40:30:2d:89:76:
                    4f:da:ca:94:08:17:ee:ca:61:15:78:cd:e2:b8:8a:
                    3e:b1:72:80:4f:94:86:d7:7b:9b:54:e9:74:c5:4d:
                    dc:b7:4a:94:61:9e:50:6a:b9:b3:37:27:4d:a3:32:
                    4f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8A:86:28:B5:98:B6:2F:76:FE:E6:A4:E3:B9:3A:5B:1D:3A:4D:CE
            X509v3 Authority Key Identifier:
                keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:aa:e9:d3:89:76:3a:75:cf:cf:4d:24:d3:b8:d9:a4:c7:
         7b:a6:0f:19:47:c7:b9:fb:bf:fe:c2:ca:5b:ca:d2:db:d5:94:
         c5:1c:07:7c:5a:8c:bb:0a:64:52:e1:bc:7f:fd:a8:0a:41:9e:
         f1:9f:1d:1c:7f:29:2d:6a:1f:6a:7f:dc:72:69:33:04:eb:d6:
         29:01:66:3f:0d:f7:a2:8f:6c:c6:d2:e2:3e:c3:1c:ff:84:39:
         6a:88:75:3d:43:1d:6b:90:42:71:26:81:06:40:b8:6b:30:ae:
         b8:7f:22:e4:17:60:9a:90:e1:db:5c:e0:1f:29:4c:f7:e0:5c:
         22:6a:b7:07:16:ab:c4:b5:cb:21:e8:4d:23:16:94:ec:b3:7a:
         8c:27:63:96:4a:8e:37:a2:02:88:6d:78:f8:0e:f7:67:94:74:
         a3:e2:ac:84:72:a3:fe:b8:5c:b3:6c:71:2b:55:9b:7d:f9:48:
         1c:db:77:89:e4:44:29:a2:1b:f3:6f:55:a4:05:91:ef:2c:0c:
         55:34:01:da:21:3d:2d:a7:43:b7:a1:51:18:5b:de:3a:00:83:
         bb:ba:ae:b9:3d:69:2a:bc:eb:15:ee:07:01:b3:cc:10:6a:f2:
         8e:90:1f:b6:45:b3:c4:b1:02:96:e5:19:7d:54:33:9d:93:ba:
         61:83:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:55:56 2024 by rpki-client on console-fra.rpki-client.org