Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
File:                     c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json)
Hash identifier:          OCLAqVRSH7LGQqFulhfGiCNpn44z3v0dXB5iR62uTWc=
Subject key identifier:   39:5B:92:DE:A6:EA:D1:88:47:E3:90:3E:A4:92:FA:64:88:97:01:51
Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Certificate issuer:       /CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Certificate serial:       018F87498AEFAD56E835278765F831F58C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:34 +0000
Manifest this update:     Fri 17 May 2024 16:01:34 +0000
Manifest next update:     Sat 18 May 2024 16:01:34 +0000
Files and hashes:         1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: REWjNXT0Fl/KclnbWdOTLr8/gsFJpQsMsSx4CEc11i8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:8a:ef:ad:56:e8:35:27:87:65:f8:31:f5:8c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
        Validity
            Not Before: May 17 16:01:34 2024 GMT
            Not After : May 18 16:01:34 2024 GMT
        Subject: CN=395b92dea6ead18847e3903ea492fa6488970151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:e0:24:b5:ee:34:d0:15:d9:c6:69:05:0e:
                    2b:10:d4:5d:48:1f:30:b1:ea:70:ca:1b:e9:ea:5b:
                    4c:ef:5b:46:95:cc:93:76:47:52:c4:e9:77:7a:7b:
                    a1:89:49:56:0d:4b:5e:e8:a2:ff:1d:e8:2a:2b:87:
                    3b:a3:35:70:68:58:9d:50:72:a2:fb:27:ab:32:d5:
                    b2:34:23:70:c8:b1:0d:80:8c:db:27:f9:1f:90:19:
                    90:a5:c1:79:4e:92:26:d9:9e:c8:8f:0d:28:cf:2e:
                    7a:15:c5:d7:cb:c5:e6:0a:73:18:15:d4:e3:f7:20:
                    4a:cd:cc:59:a8:89:55:92:d9:05:0a:40:ad:7c:de:
                    6d:96:53:de:e4:92:0b:96:93:42:a8:1a:31:18:18:
                    69:06:1c:7b:2f:63:ff:8a:96:14:a3:6a:1c:58:44:
                    b9:33:1a:42:d3:c7:dd:8d:cf:6d:00:22:08:19:53:
                    f9:bc:ff:4d:d2:94:89:26:04:eb:6b:7a:97:a5:18:
                    09:a3:91:8c:b2:10:ee:09:27:4a:5e:8e:30:d2:2e:
                    2a:5a:e3:94:5f:93:61:e0:8b:ca:b3:6f:ff:40:b4:
                    0d:d0:e8:31:08:b8:01:71:43:9c:21:20:02:6b:88:
                    68:c1:27:72:dc:9c:8e:bf:84:e1:40:cf:94:a5:8c:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5B:92:DE:A6:EA:D1:88:47:E3:90:3E:A4:92:FA:64:88:97:01:51
            X509v3 Authority Key Identifier:
                keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:6b:d3:d1:40:c6:8b:e9:9b:ce:ad:76:dc:a9:05:fe:ee:ce:
         9b:80:fd:59:df:e8:2e:6c:3a:e7:a4:5a:6a:c7:63:d3:54:34:
         21:72:48:14:b1:15:93:04:66:60:57:c5:98:ec:d9:05:55:cf:
         db:da:16:73:21:0b:80:ac:a2:62:f5:52:8c:bd:c8:36:34:49:
         64:b9:36:10:ae:0d:4a:cd:b6:c3:c4:ed:cf:37:2b:da:f1:5b:
         36:d1:f6:92:1b:92:06:0e:59:1e:1b:10:2a:da:ec:46:27:5f:
         0a:e2:a5:31:75:af:f8:74:aa:93:3a:fa:b6:35:ce:04:b9:de:
         69:ab:79:8a:0a:89:b2:65:33:52:de:72:46:98:86:db:b6:bf:
         47:f8:54:cf:d4:20:f3:c9:9c:e1:fb:7c:f8:25:91:00:20:17:
         92:f2:08:e2:fd:01:4a:b5:69:6f:68:fd:c3:66:85:7d:e6:a8:
         ae:6d:6c:2c:bb:67:db:8c:06:b7:0e:61:71:cd:26:dd:57:8f:
         2a:ce:d8:0a:8f:98:7d:06:de:90:ac:25:b0:0f:71:1a:4c:a1:
         23:81:90:41:1b:5d:b4:c4:48:c0:f6:28:78:3a:df:26:8f:37:
         d8:fb:93:5a:88:b0:ef:96:f0:f8:e0:59:c9:d1:73:44:e9:4b:
         7d:a2:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:23 2024 by rpki-client on console-fra.rpki-client.org