Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File:                     RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier:          eHLv53Yx2mXbFZydoV8FzDlsyMTNw3q3RUBXOuMQ0GE=
Subject key identifier:   F4:F9:5A:ED:1F:C3:63:8E:4C:79:E2:31:DA:92:85:34:F5:54:31:12
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer:       /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial:       018F88243BEF33E2A57FF3B4D28137291A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 20:00:27 +0000
Manifest this update:     Fri 17 May 2024 20:00:27 +0000
Manifest next update:     Sat 18 May 2024 20:00:27 +0000
Files and hashes:         1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: cXD71JixvZsYJ05OAKxW33e0gz5pActUkHDRIjuwDrg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:3b:ef:33:e2:a5:7f:f3:b4:d2:81:37:29:1a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
        Validity
            Not Before: May 17 20:00:27 2024 GMT
            Not After : May 18 20:00:27 2024 GMT
        Subject: CN=f4f95aed1fc3638e4c79e231da928534f5543112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:b3:29:51:3f:c3:b9:90:0e:0f:ed:1d:fa:
                    32:03:9e:bc:64:4d:22:b3:4e:b1:aa:dd:81:52:a1:
                    c7:77:ec:e0:86:a5:e2:13:f8:98:26:e8:ec:81:a3:
                    3d:fa:29:bd:d6:71:a0:e5:48:68:31:c2:b7:76:07:
                    eb:dd:ff:0c:3a:c0:da:29:12:25:69:e7:dc:59:26:
                    61:2d:13:a8:c5:1d:21:8d:2c:82:eb:b8:42:c7:fe:
                    53:36:e5:14:f8:3c:b6:d0:d9:a6:df:65:6e:c9:e4:
                    3b:fe:d0:a3:b9:64:e5:90:53:46:d0:40:26:4f:fe:
                    c7:db:c5:5e:79:3f:69:8d:4a:2b:41:00:4b:0a:da:
                    57:9c:1d:96:ff:81:9b:59:d4:d2:bb:aa:6d:a5:ea:
                    60:ff:bf:22:56:53:2f:10:c4:95:f9:71:53:89:5c:
                    46:72:77:c9:c5:d7:bd:79:97:fa:24:b7:c0:d1:f8:
                    90:2c:25:2c:5c:e0:23:ba:39:f2:81:ef:d5:cf:8a:
                    8d:b7:6d:b8:db:ed:fb:86:c6:3c:54:16:56:12:c8:
                    53:18:3e:f9:2a:be:1d:cd:52:c3:39:55:9f:38:bd:
                    f3:5d:65:55:57:9c:28:59:07:96:e6:0e:57:fe:c3:
                    63:20:a4:67:8b:28:b2:59:27:0f:aa:90:59:d1:3e:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F9:5A:ED:1F:C3:63:8E:4C:79:E2:31:DA:92:85:34:F5:54:31:12
            X509v3 Authority Key Identifier:
                keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8e:33:d7:5c:73:b5:a4:c9:25:de:f9:bf:fe:33:80:98:6b:
         7b:2d:d2:30:c1:21:01:a8:a4:a1:2a:0c:c7:e9:7e:cd:72:a2:
         a7:99:8f:1f:3d:31:de:58:6f:f7:11:6f:23:7a:ca:32:c9:1f:
         09:20:67:c2:a8:1f:be:04:b4:4f:26:93:50:24:ee:3b:e8:10:
         7f:99:04:72:f1:74:c1:27:03:e0:66:63:dc:3a:3b:37:56:ad:
         74:95:f0:a8:c3:57:29:d0:67:8d:9d:49:d5:5e:36:a6:bd:81:
         e7:fe:cf:c6:e2:de:12:cc:36:99:e7:48:c7:75:32:a2:a6:21:
         55:3b:a2:bc:62:15:8a:d1:fa:d7:b2:22:b0:c6:7f:82:f0:0e:
         ff:ff:36:1f:97:4a:d2:7a:52:ee:fa:0c:12:6d:69:39:3d:ab:
         e7:85:a4:3c:84:4f:37:4b:68:0c:ed:1c:b7:40:78:28:2b:ae:
         75:c7:61:90:72:fa:80:26:4f:03:f8:93:f0:98:0c:a8:3e:ee:
         0b:aa:2a:33:50:80:f4:78:ea:08:fe:af:f3:0d:11:93:22:23:
         a9:56:49:59:34:9d:47:47:d8:54:af:24:59:bc:06:d8:6a:af:
         87:e1:cf:b6:93:af:7d:36:97:6a:80:40:62:e8:ac:6a:bc:47:
         11:b5:ee:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:31:49 2024 by rpki-client on console-ams.rpki-client.org