Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
File:                     j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json)
Hash identifier:          E2qlv7YtCqSI2fbLQ5drn6YTW5QAtF6Hf+9OskI1ogY=
Subject key identifier:   3D:3A:8D:1D:72:6A:1C:EC:5A:53:ED:F1:9F:36:63:1D:9C:5F:1F:5C
Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
Certificate issuer:       /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Certificate serial:       018F86363B029F36F0A4FD0769834AC97F96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 11:00:51 +0000
Manifest this update:     Fri 17 May 2024 11:00:51 +0000
Manifest next update:     Sat 18 May 2024 11:00:51 +0000
Files and hashes:         1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: S2rVmMhKiNMs0lQeOwUUfhPWmXFjY+nrlq1jttnsDxY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:3b:02:9f:36:f0:a4:fd:07:69:83:4a:c9:7f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
        Validity
            Not Before: May 17 11:00:51 2024 GMT
            Not After : May 18 11:00:51 2024 GMT
        Subject: CN=3d3a8d1d726a1cec5a53edf19f36631d9c5f1f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:03:9e:c7:94:e0:d1:b1:83:8d:ee:c9:d2:
                    40:74:59:4b:c5:3c:51:13:c3:e2:7a:cf:9a:c8:ad:
                    db:67:d5:4c:e8:c0:4e:7f:55:32:69:e5:57:d1:67:
                    32:3f:d3:d4:fc:0f:ab:46:d0:c7:2b:37:94:77:55:
                    4c:8e:85:57:93:12:35:94:cf:6f:86:c1:1d:cd:0a:
                    28:77:38:9e:b5:05:62:ce:10:66:a2:2f:92:da:b8:
                    77:3e:a2:86:26:c7:0e:b2:8f:fe:a5:77:03:ad:94:
                    a3:96:5a:5f:55:b9:b4:25:25:ed:8a:eb:29:c3:fa:
                    ac:43:3f:27:6c:e4:3c:51:c4:9a:a9:ba:d0:0a:f5:
                    89:6a:60:af:d4:20:ee:cb:e9:41:f8:97:e7:d5:b8:
                    e9:21:48:e3:5e:cb:82:ca:37:65:fe:1f:e2:93:51:
                    c9:d9:02:0b:48:e3:45:d6:fa:25:93:4e:ac:fb:67:
                    7d:57:12:74:c9:00:83:4a:e1:58:3e:c0:67:dc:2c:
                    14:0c:42:07:2a:ae:58:b9:42:db:99:f5:a6:c8:01:
                    d8:35:36:12:13:0e:16:8e:e2:7b:1f:2b:5c:d9:a6:
                    13:dd:70:4a:c7:95:e6:6a:00:17:17:40:31:a1:58:
                    17:ae:8d:5c:97:be:0d:44:5b:41:11:fe:9e:36:71:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3A:8D:1D:72:6A:1C:EC:5A:53:ED:F1:9F:36:63:1D:9C:5F:1F:5C
            X509v3 Authority Key Identifier:
                keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:9b:18:62:65:dd:6f:7a:87:7f:a3:4d:69:51:7d:0d:68:50:
         82:09:a9:60:53:6d:75:ad:3c:7e:c7:ed:ac:cb:d7:c2:b6:e4:
         9c:9c:9b:72:e3:b3:cc:97:c2:f2:00:c3:e0:d0:8d:69:3a:ea:
         84:61:c5:1c:1c:c1:06:13:34:33:62:52:bc:ae:84:e6:50:2f:
         db:2f:26:aa:4a:62:d7:3c:ab:5b:f4:a3:d6:74:db:a5:50:5d:
         81:31:de:83:b1:ce:91:2a:d1:9a:5a:ea:e6:96:00:bd:fe:22:
         f1:0c:7a:07:f1:a6:24:e8:74:6c:b9:83:96:7b:87:7e:2c:4d:
         20:1b:7c:4a:58:80:43:3c:c8:12:67:c5:1f:7c:05:47:4f:57:
         5d:55:bc:d6:8b:46:14:da:ba:ed:a9:74:da:c5:7f:32:2f:6f:
         b9:32:09:e8:55:5c:48:56:93:26:50:7b:fe:e3:d0:24:75:b0:
         9d:89:55:e3:20:ed:62:1d:8e:d6:04:11:a6:f6:86:77:b5:2f:
         46:4c:23:4b:fc:58:25:50:ff:cf:13:67:4d:07:32:f5:23:c2:
         5a:db:29:18:b9:e7:dc:58:7c:e9:62:77:40:4e:86:84:01:32:
         86:db:73:cc:0b:89:63:3b:a7:2a:d6:d1:a7:48:07:58:d6:15:
         9a:50:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:47:28 2024 by rpki-client on console-ams.rpki-client.org