Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
File:                     j75VTMOkMzzW2uRAdo6cO4M0S44.mft (raw, json)
Hash identifier:          QgpqMU9EPFfLehv6Z73JEQvBI41/UNy40XUWZnVJp0o=
Subject key identifier:   3E:0C:7D:06:A2:62:FC:90:64:A3:19:F1:E6:70:D5:A4:5D:FF:29:43
Authority key identifier: 8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
Certificate issuer:       /CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Certificate serial:       018F9B744EC4543632C5790C1618F66DA436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
Manifest number:          1150
Signing time:             Tue 21 May 2024 14:00:41 +0000
Manifest this update:     Tue 21 May 2024 14:00:41 +0000
Manifest next update:     Wed 22 May 2024 14:00:41 +0000
Files and hashes:         1: j75VTMOkMzzW2uRAdo6cO4M0S44.crl (hash: 1eDygpH0q+EZYQbPM2ZGPegdFubc5R9JmHq87ASpQEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:74:4e:c4:54:36:32:c5:79:0c:16:18:f6:6d:a4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
        Validity
            Not Before: May 21 14:00:41 2024 GMT
            Not After : May 22 14:00:41 2024 GMT
        Subject: CN=3e0c7d06a262fc9064a319f1e670d5a45dff2943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:be:04:77:db:e2:9d:f5:04:ef:72:aa:05:
                    3a:60:c8:b3:0c:39:5d:5e:e0:99:11:58:78:ec:5f:
                    d8:8e:b0:18:61:2a:25:cd:a4:e7:ef:80:44:68:5b:
                    56:70:38:d5:bc:e4:af:34:04:46:f3:c1:02:af:f9:
                    20:fb:88:eb:10:9b:94:2d:0c:85:89:7c:fa:1f:d8:
                    82:e6:ad:3f:71:a2:57:1c:a0:5e:97:05:90:f6:4c:
                    2a:a5:7c:b9:65:e5:1b:da:02:71:8e:f3:5c:0c:bb:
                    1e:fd:53:77:4e:1f:a6:72:8f:9c:cf:68:a0:0a:83:
                    87:9b:22:4b:1b:b7:01:ac:be:34:e9:bf:8d:34:e9:
                    ab:cb:2d:2c:98:4b:fe:94:a7:16:3f:ed:97:06:35:
                    1f:6e:bf:45:f6:b6:78:4c:21:10:5c:77:3b:8a:53:
                    35:57:f9:46:89:a9:80:81:c2:44:a3:1a:a5:bb:e7:
                    6b:9b:a5:f3:d4:f4:2a:0e:e3:5f:03:f5:93:91:22:
                    70:ec:99:dc:12:47:c3:f1:6c:fd:bc:d3:27:49:f2:
                    69:2b:a1:58:01:7c:2b:dd:fe:2b:c1:f2:0d:9e:3f:
                    fb:49:33:d5:23:54:6f:44:94:28:2e:89:8f:bb:be:
                    81:c9:bd:ca:87:ff:88:02:6a:27:a7:43:9b:29:81:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0C:7D:06:A2:62:FC:90:64:A3:19:F1:E6:70:D5:A4:5D:FF:29:43
            X509v3 Authority Key Identifier:
                keyid:8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:76:e0:89:1c:5f:12:38:b1:96:84:e5:c0:89:0d:94:eb:3c:
         6b:c2:58:ca:14:4f:3d:bd:60:59:58:30:dd:ed:0b:c1:4f:02:
         f2:07:57:6e:ee:53:17:05:98:b7:6b:d5:66:ce:7f:4d:c5:cd:
         79:e5:6d:7d:b3:7b:18:18:09:32:fd:f1:2f:a5:6e:58:a4:47:
         4e:85:8a:0d:3c:42:d7:e0:9a:57:3c:20:73:eb:4c:60:9f:35:
         2e:b9:4d:31:16:84:90:2d:60:cc:24:a3:62:ba:ba:18:77:94:
         01:91:67:0d:cd:ac:69:c3:27:1b:66:66:27:30:2d:8d:08:9c:
         17:20:a1:97:4a:1e:81:49:3d:ea:51:90:a1:82:7d:a4:fa:fb:
         d1:29:0b:a9:fc:ee:d5:b5:61:9c:43:92:5a:1f:c6:0b:ee:78:
         6e:09:7e:7f:8e:e8:c8:e6:b5:65:cc:73:bc:6c:02:fc:c3:4e:
         be:89:0b:9a:d4:ec:0b:b2:cb:87:bb:43:22:5b:17:de:ba:5a:
         2b:98:1a:98:13:f4:9e:e9:bb:ab:d6:b7:5e:a5:43:38:45:29:
         ec:4d:a8:44:8b:c6:0c:a1:13:f1:bb:dc:4c:6b:c7:b1:ff:81:
         32:f7:23:1b:38:fa:8b:9a:9d:59:c3:d9:eb:f2:a1:1e:ec:2f:
         e4:d1:a6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 19:51:46 2024 by rpki-client on console-fra.rpki-client.org