Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
File:                     FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json)
Hash identifier:          xnpqHQjjzgpvLLEt4qrV8xtOtr51A2gXhSqOkaY+sVU=
Subject key identifier:   F5:D5:7A:84:28:08:00:F0:C9:27:ED:9D:A6:31:8B:C6:66:82:A5:B2
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Certificate issuer:       /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial:       018F430D886067072961C129BCD755C163CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
Manifest number:          1151
Signing time:             Sat 04 May 2024 10:01:51 +0000
Manifest this update:     Sat 04 May 2024 10:01:51 +0000
Manifest next update:     Sun 05 May 2024 10:01:51 +0000
Files and hashes:         1: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: eaIDfCDkyXd65IyJiSSOyXeb7PKCANZ37M7nbkq/Y8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 10:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:0d:88:60:67:07:29:61:c1:29:bc:d7:55:c1:63:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
        Validity
            Not Before: May  4 10:01:51 2024 GMT
            Not After : May  5 10:01:51 2024 GMT
        Subject: CN=f5d57a84280800f0c927ed9da6318bc66682a5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:a6:7a:40:d2:3b:68:0f:6d:2a:f4:9d:02:
                    e5:01:76:b2:3e:58:09:dd:cb:9e:cd:13:d0:21:d5:
                    52:bd:9e:32:67:29:3a:ba:b2:87:46:07:c8:51:3b:
                    6b:db:a8:90:d8:b8:04:7e:be:75:8b:68:07:36:74:
                    ff:76:3c:5a:5f:0f:49:c2:c3:7a:bd:d5:22:09:43:
                    33:b1:c5:85:9d:b7:e9:54:00:64:af:d9:3e:47:c1:
                    5b:03:1c:c0:a6:55:0d:4b:ac:50:23:42:2b:47:41:
                    92:34:eb:bc:ca:52:ea:a8:0e:c5:d7:40:00:0b:c6:
                    f3:e7:70:af:95:1b:60:a1:33:82:01:59:9f:54:8b:
                    bc:b8:57:8e:c2:ca:8f:16:14:f6:2f:3e:12:18:69:
                    22:5a:d1:70:9b:e1:98:9b:b0:81:03:6c:fc:cd:68:
                    0f:9e:b2:36:17:21:3a:79:8c:85:f3:b5:31:64:2c:
                    b7:5f:1f:7b:09:e1:59:41:b4:f3:a7:37:a5:75:c0:
                    a7:4a:34:b9:99:79:5d:1b:18:23:3a:f9:6b:6e:65:
                    4d:26:5b:eb:a2:4d:2b:37:f5:af:6b:12:d9:7c:19:
                    77:e6:c8:ba:62:22:79:cd:e0:96:2d:4c:0c:17:8b:
                    7c:6f:d8:31:a8:ae:a5:29:d4:98:ed:33:d5:c2:15:
                    92:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D5:7A:84:28:08:00:F0:C9:27:ED:9D:A6:31:8B:C6:66:82:A5:B2
            X509v3 Authority Key Identifier:
                keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:cb:9e:00:1c:6c:12:bf:13:cd:36:2d:06:28:cc:0e:cf:c6:
         9a:d0:83:57:f0:f7:4d:49:17:d4:8c:bf:ba:32:f8:18:74:9a:
         e8:16:25:58:f2:e8:67:d9:aa:6f:87:17:9d:ef:42:d5:b7:f5:
         3f:66:9b:b4:90:bc:0f:b9:91:c0:36:7a:11:45:d7:5d:2b:4d:
         f3:34:ff:ff:1f:84:b9:09:ca:30:50:2d:31:a0:dd:c7:5b:be:
         f1:13:28:79:72:d8:61:48:12:c5:14:9b:e1:5f:2d:2f:af:32:
         72:c8:99:e1:6c:62:ff:e6:fd:3d:81:10:14:25:34:c4:f9:89:
         3d:12:1e:c6:14:c7:cc:4c:89:2f:c7:c9:87:d7:a6:87:49:aa:
         70:b3:dd:39:ff:b1:fb:cf:d7:c6:e5:fa:f7:6a:17:67:83:28:
         84:cd:15:5c:55:ed:c5:9a:49:4c:b1:20:a0:cc:f8:e8:8c:38:
         f4:ed:5c:2c:68:97:e6:eb:e4:e0:4f:ba:6c:7d:fa:82:1f:5a:
         d9:70:4e:65:ec:c8:4a:ac:51:e0:66:fd:b0:52:60:64:de:f6:
         df:5f:05:dd:09:7e:68:29:ce:5d:11:56:f2:25:06:67:91:f6:
         ed:14:33:31:80:0b:20:db:56:e3:2b:41:eb:da:fc:6f:77:6c:
         b2:85:63:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:41:11 2024 by rpki-client on console-ams.rpki-client.org