Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File:                     1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier:          qHFWWrp09XB4ThX7G3D1vMJ+t9VAZqqQhVzhwi/i1Fc=
Subject key identifier:   38:50:62:1E:54:A6:9C:57:B5:03:39:69:AC:14:CA:9C:E7:1B:BF:14
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer:       /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial:       018F24CB690B17CAA131CCE83E72EBDE3374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number:          0675
Signing time:             Sun 28 Apr 2024 13:01:01 +0000
Manifest this update:     Sun 28 Apr 2024 13:01:01 +0000
Manifest next update:     Mon 29 Apr 2024 13:01:01 +0000
Files and hashes:         1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: 9qcFdWE4wKRztBno2HabN61ykDky7QUWjH5zH6ZwHyg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:24:cb:69:0b:17:ca:a1:31:cc:e8:3e:72:eb:de:33:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
        Validity
            Not Before: Apr 28 13:01:01 2024 GMT
            Not After : Apr 29 13:01:01 2024 GMT
        Subject: CN=3850621e54a69c57b5033969ac14ca9ce71bbf14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:6d:a3:fe:59:fc:15:4d:07:f8:e7:db:76:
                    7d:ee:9b:91:d5:d9:2f:ba:31:f4:a4:c6:7b:c5:a5:
                    17:fe:21:83:dd:5f:1b:e1:4a:ad:df:86:90:e2:12:
                    db:e3:4d:35:f1:4e:88:70:36:6b:b3:31:6d:c2:2a:
                    de:33:7d:46:57:c6:80:88:31:58:7d:24:49:c8:34:
                    6a:ee:38:b7:c9:87:ae:a3:2a:5d:14:80:59:9b:aa:
                    ba:58:c6:a2:28:3d:00:49:8e:33:a7:0b:1e:55:0e:
                    d0:6d:68:0e:38:7d:9a:b1:a6:06:26:a4:09:7b:63:
                    73:dd:37:7e:9c:c4:6c:54:0e:d6:32:47:70:96:1c:
                    81:43:c4:27:60:43:84:ed:5b:08:91:8e:af:7f:a3:
                    a1:e5:d0:0d:d0:da:e3:10:43:fa:99:c9:86:17:76:
                    f8:68:57:1f:a0:22:e1:3a:0a:65:5e:60:8e:da:a7:
                    83:1e:8f:41:75:a0:1b:1e:a3:66:45:87:79:9a:e7:
                    c9:07:2f:e6:bf:bd:58:f8:13:e9:10:f1:f3:9f:61:
                    a4:2f:e0:ef:c5:67:07:f3:84:9e:30:03:cf:80:eb:
                    bd:d3:f0:55:0f:09:17:e1:5a:aa:b6:b6:ab:ca:5f:
                    ab:e9:ca:ac:9d:9b:13:40:c0:cc:53:22:d0:79:50:
                    22:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:50:62:1E:54:A6:9C:57:B5:03:39:69:AC:14:CA:9C:E7:1B:BF:14
            X509v3 Authority Key Identifier:
                keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bc:69:00:83:64:19:08:2b:a3:e3:2f:fa:dd:8e:1b:94:99:
         9f:f7:0d:fa:48:6a:d0:79:8d:91:0c:46:57:22:3f:57:c1:39:
         a1:fd:f9:1d:89:95:3c:4f:c2:29:d4:37:b1:80:ea:8a:5b:8a:
         ee:1c:41:e8:b3:5d:ef:2e:6b:f9:d8:82:67:43:89:89:c3:f8:
         bc:23:d8:58:f4:b6:22:28:02:31:81:f0:2d:06:b6:88:ee:c1:
         8b:2c:52:b7:e6:e0:b0:db:54:01:55:15:2e:98:68:a4:c5:f9:
         ff:6b:34:76:24:11:17:04:e6:ea:4b:54:37:5e:5b:21:43:48:
         d5:44:7f:0a:4b:88:f5:a8:e5:e6:57:17:05:f5:bf:74:a9:ef:
         03:67:ab:41:32:6e:b9:06:a9:d8:fe:a4:9c:2a:20:d7:22:cf:
         66:3b:a7:34:96:15:b9:39:0f:75:82:41:e7:ac:8e:9e:67:fd:
         ce:86:8e:8a:45:ed:71:21:ca:fa:68:08:d2:17:09:5f:50:57:
         04:ac:0f:e0:bf:60:18:8d:8d:6d:95:63:19:88:15:fb:6e:40:
         1a:7a:0a:dd:7b:4e:c6:c3:f8:94:d4:77:31:5c:44:92:ae:16:
         77:93:16:c6:85:ce:db:36:12:44:be:38:92:3a:0e:02:8e:d2:
         86:c3:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:38:09 2024 by rpki-client on console-fra.rpki-client.org