Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File:                     4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier:          aUtonKrEZEg/x0vZ1GSG3VGDK2OoJZQMP6h4AjrGYrw=
Subject key identifier:   1F:42:DC:4E:EF:E6:AE:40:56:5B:C5:ED:FC:96:DF:A1:99:89:BE:DE
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer:       /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial:       018F86A3BE6F01EA74D5C3D7178E334F3FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number:          02FA
Signing time:             Fri 17 May 2024 13:00:29 +0000
Manifest this update:     Fri 17 May 2024 13:00:29 +0000
Manifest next update:     Sat 18 May 2024 13:00:29 +0000
Files and hashes:         1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: +SUtbz8EfUdn7fYrgc4FQmYWNJqQ9SpMjJoFB68dwRI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:be:6f:01:ea:74:d5:c3:d7:17:8e:33:4f:3f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
        Validity
            Not Before: May 17 13:00:29 2024 GMT
            Not After : May 18 13:00:29 2024 GMT
        Subject: CN=1f42dc4eefe6ae40565bc5edfc96dfa19989bede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3f:46:6a:74:00:a6:92:5d:6e:d1:ce:da:eb:
                    b8:b7:8b:d0:09:59:1c:d2:9c:35:d7:e5:1d:72:15:
                    8d:87:35:f5:63:e0:35:9f:75:a0:d9:71:92:9e:3e:
                    e4:07:c7:c0:d6:39:5d:e6:74:c9:c3:09:ac:02:e6:
                    13:ed:bb:44:1b:bc:72:36:c8:b9:89:c4:d9:6f:ca:
                    e2:0b:d2:df:9b:af:3b:57:37:38:cf:14:35:88:bd:
                    64:fa:b8:06:f7:16:09:71:3a:f1:f8:ac:51:17:f4:
                    ae:8f:3e:fb:b2:90:33:75:57:f3:25:0f:66:cd:7b:
                    e2:6e:7d:8b:22:03:7d:bb:e5:d7:83:50:4d:b7:c1:
                    d4:3c:95:b3:77:fc:60:e8:24:38:93:62:2f:7a:c6:
                    33:d1:1b:af:c1:b3:fc:c0:5b:32:75:45:de:27:98:
                    8a:8d:db:54:30:67:0b:b6:5a:3c:c1:81:70:bb:33:
                    3d:5b:3b:8f:a8:aa:84:81:17:fb:95:95:4f:d9:50:
                    55:46:10:51:f0:67:74:7d:72:bc:2f:27:e1:a3:41:
                    9f:42:0d:31:f9:cc:d8:fd:fc:a3:8c:ec:46:5c:5b:
                    7f:98:a3:5a:0d:43:84:0d:dc:49:de:69:08:4f:5e:
                    4a:d5:d0:5f:4a:6a:6d:a1:a4:39:1b:b5:bb:4f:a5:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:42:DC:4E:EF:E6:AE:40:56:5B:C5:ED:FC:96:DF:A1:99:89:BE:DE
            X509v3 Authority Key Identifier:
                keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:51:db:fd:2c:7c:91:6f:62:47:b1:9d:64:7f:c5:81:b3:10:
         a6:bf:b2:fa:56:d0:86:00:d7:ef:7c:82:fe:cb:89:f6:4d:2c:
         1f:a4:2d:10:5e:f6:ee:38:c8:2e:c5:75:83:ff:28:30:75:80:
         71:ae:8e:d8:8a:93:19:54:1d:94:26:51:17:bf:1d:0d:6f:8f:
         38:56:4b:59:51:f2:f5:4a:fc:2c:f7:be:ee:64:bc:cd:42:76:
         7a:ef:0c:6e:64:9b:1a:b8:7a:da:41:e7:f5:67:c0:bf:1f:c7:
         03:77:bf:79:1a:b1:fe:c9:b6:9a:9a:49:79:de:d0:1e:8a:ae:
         50:a3:06:2f:fb:98:9b:37:88:f9:a1:cc:7b:f8:61:4c:51:de:
         50:11:b1:e9:a7:c1:4f:b1:c1:89:d1:37:cf:1d:c8:af:bd:56:
         c2:9e:2d:11:9a:e4:04:0b:e9:54:37:55:2e:19:f1:7f:85:f9:
         1f:fa:30:5a:b6:4a:42:a5:55:8f:56:b5:d7:28:af:8d:fa:69:
         13:e2:31:99:9b:ac:6d:23:2e:63:76:9a:c8:0d:09:2f:03:6a:
         7e:2a:70:b5:ec:17:95:5b:b0:b8:9d:2e:95:d8:6f:b0:d7:51:
         1b:8a:82:c5:1a:f9:21:c9:86:08:f8:4b:a9:03:93:1b:ef:5c:
         b3:e3:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:47:48 2024 by rpki-client on console-ams.rpki-client.org