Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
File:                     aaEKEpVYyDgLwT2axFQB0h2rnfA.mft (raw, json)
Hash identifier:          FjsjxA/lzAcYIIRPU4pjJHVG0FiJIcBfkw8c8rWpboc=
Subject key identifier:   98:CB:3E:B0:34:90:F3:E5:5E:DA:D4:C9:DD:86:C1:FA:D3:F8:76:EA
Authority key identifier: 69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
Certificate issuer:       /CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Certificate serial:       018F8749570A4575C3B7D8B63281B306BA1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:21 +0000
Manifest this update:     Fri 17 May 2024 16:01:21 +0000
Manifest next update:     Sat 18 May 2024 16:01:21 +0000
Files and hashes:         1: aaEKEpVYyDgLwT2axFQB0h2rnfA.crl (hash: +mk2Ik3lO5EMTFVhkxGm92LpCxSaUNh1Hk5JvWAI2QA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:57:0a:45:75:c3:b7:d8:b6:32:81:b3:06:ba:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a10a129558c8380bc13d9ac45401d21dab9df0
        Validity
            Not Before: May 17 16:01:21 2024 GMT
            Not After : May 18 16:01:21 2024 GMT
        Subject: CN=98cb3eb03490f3e55edad4c9dd86c1fad3f876ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:e3:79:a0:70:7d:8b:19:ea:0a:e2:fa:5f:
                    d9:7d:14:e8:ba:2c:75:9b:93:8c:2a:90:51:ad:fa:
                    06:f4:80:ce:8b:29:1f:a8:87:ff:05:15:a9:a3:d8:
                    d6:a1:5f:1b:5f:77:74:b1:33:1b:df:fc:05:10:a2:
                    0b:f8:6f:83:7c:bc:7a:ce:0f:02:fe:c7:41:54:5a:
                    20:c4:07:6c:d7:df:2c:b0:b7:fd:22:1c:3b:60:b0:
                    6b:18:a6:b2:d5:b2:c8:3c:5c:d8:34:e7:e8:73:c3:
                    b0:81:2e:fa:ad:65:90:13:d8:6c:d4:01:0f:41:b5:
                    5c:57:96:46:c6:61:3e:2b:10:af:ae:32:c8:2e:2e:
                    a1:16:66:26:a6:82:93:dc:f4:26:e0:2b:30:5d:85:
                    31:64:79:0b:a0:1f:89:3c:b3:74:f0:f1:24:dc:a6:
                    34:15:25:95:a7:4f:00:19:5f:1f:40:e5:c7:89:c5:
                    8b:1e:fc:0d:2d:11:94:fd:dd:d9:0a:60:09:29:fc:
                    3e:1b:b0:4e:b7:0a:35:d8:53:dd:99:53:d2:3d:d7:
                    0c:42:4f:cd:c2:e9:01:04:2d:04:0b:f5:f2:da:6d:
                    95:75:41:6c:55:cf:a5:08:ae:16:70:1e:ee:a8:b9:
                    58:51:cd:20:0d:b5:a9:b6:45:46:ef:12:2e:0a:1b:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CB:3E:B0:34:90:F3:E5:5E:DA:D4:C9:DD:86:C1:FA:D3:F8:76:EA
            X509v3 Authority Key Identifier:
                keyid:69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:86:1b:95:bd:8b:d3:64:48:af:26:02:7b:92:35:69:d9:5b:
         a6:e6:dd:43:27:25:4f:7f:01:56:ba:49:09:2f:9c:9a:98:fe:
         48:c5:dc:6e:4a:c8:50:9d:be:8c:4f:b4:d5:63:0e:5c:6e:32:
         34:c2:79:3b:16:e0:6f:dd:42:e9:36:d1:f7:dd:90:cf:3e:31:
         89:00:50:b5:f9:a5:5a:13:19:fb:93:3e:2d:33:d4:14:6c:96:
         82:d5:55:ad:0b:56:30:a1:4f:ac:7a:c9:f4:6a:3b:0d:ed:1c:
         b4:fc:01:4c:0d:13:5a:88:78:4e:be:92:52:53:3e:f9:76:e9:
         fc:cb:ce:67:a3:68:99:db:74:c9:4c:eb:ef:d6:d7:15:46:35:
         90:4e:00:db:a9:37:22:54:10:79:f6:c8:09:e8:92:20:13:09:
         a9:78:0e:b7:3b:86:12:ff:12:a1:c0:59:25:61:1b:a6:04:0c:
         11:09:00:e5:7c:aa:8c:49:32:17:ca:3d:f6:c7:51:2b:18:52:
         41:20:6a:9a:86:06:13:e4:d6:de:30:cb:1c:b5:3a:c5:0d:11:
         b2:5a:7c:18:b5:7c:48:9f:b3:73:0c:b9:90:38:3e:33:4a:84:
         6e:f2:89:c8:f5:de:5c:78:53:f9:46:45:15:e1:f4:e6:66:1b:
         2b:9a:68:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:35:34 2024 by rpki-client on console-ams.rpki-client.org