Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File:                     q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier:          b10bvEOGTklj5yBEaU6nKBqXTcEtj6jgYyGqa883SUw=
Subject key identifier:   68:16:5A:78:4F:25:A0:24:AC:BE:83:72:60:D7:BD:47:D0:B1:C0:45
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer:       /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial:       018F874A4A585185F9B2253185964502D105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 16:02:23 +0000
Manifest this update:     Fri 17 May 2024 16:02:23 +0000
Manifest next update:     Sat 18 May 2024 16:02:23 +0000
Files and hashes:         1: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: dU6qc2j88IZj5UBreRd7NpUOsvt6l8fipDAomfYf5IU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:4a:58:51:85:f9:b2:25:31:85:96:45:02:d1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
        Validity
            Not Before: May 17 16:02:23 2024 GMT
            Not After : May 18 16:02:23 2024 GMT
        Subject: CN=68165a784f25a024acbe837260d7bd47d0b1c045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:4f:b3:92:92:64:ad:d6:c6:a4:b8:f1:5d:
                    df:bc:c1:a6:02:7a:02:c6:d9:3c:d1:62:53:05:fa:
                    78:07:17:86:fc:1f:58:4f:6b:e0:42:3d:17:a6:1f:
                    fc:1a:d8:16:5d:a0:39:02:e6:b4:f2:81:17:e9:89:
                    49:f3:72:24:7a:c4:12:eb:d8:a2:e2:83:3f:99:a0:
                    0c:df:52:f1:53:59:52:4f:6a:ad:6d:fd:c6:db:ac:
                    27:e2:50:23:5a:80:e0:ee:2e:10:aa:3d:3a:1c:34:
                    1a:c9:55:2b:c4:39:44:f2:3f:14:45:ac:12:1a:e8:
                    ea:a7:d5:ec:dc:a6:58:9a:89:92:75:9b:8a:d2:04:
                    d0:dd:62:1f:fe:1d:b9:ec:9b:64:54:01:af:5a:3d:
                    c3:1d:6d:3d:53:c0:89:ec:61:25:fa:12:f0:26:3c:
                    d4:fb:8e:31:03:0c:93:77:66:ff:81:c3:51:8e:2a:
                    1b:b8:45:b2:4d:bd:24:73:ad:97:19:8d:e6:e4:32:
                    97:c8:a7:3c:98:07:07:67:ca:c8:3c:7f:6d:05:38:
                    dd:ac:68:14:24:ae:17:bf:52:ab:22:a3:d0:26:3e:
                    02:4a:7a:a7:61:7c:ba:77:92:6d:cd:7b:41:c0:04:
                    5e:20:b9:a1:04:e9:42:d1:7a:9e:b6:fc:82:17:d1:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:16:5A:78:4F:25:A0:24:AC:BE:83:72:60:D7:BD:47:D0:B1:C0:45
            X509v3 Authority Key Identifier:
                keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c1:95:15:2c:dc:c7:0c:05:cb:36:e8:58:e3:f6:97:ce:37:
         a6:bb:52:c2:d1:58:56:7e:71:99:de:18:7f:b7:21:56:91:f7:
         79:af:43:23:1c:a5:e4:95:05:b3:a9:d0:5b:c1:3b:d4:ec:d3:
         50:3a:b6:1d:aa:a2:21:e5:0c:6f:e2:6e:40:db:fe:f9:0e:2d:
         65:f8:4a:55:22:a6:85:61:80:01:a8:00:02:10:f8:1e:4c:51:
         70:1a:bd:d6:aa:32:1a:13:a5:5b:08:b1:39:51:ab:05:12:0e:
         52:31:6a:e2:8d:86:79:09:62:ca:0e:ff:37:10:d1:c1:ce:51:
         cd:04:c8:67:96:97:87:d3:33:87:a2:8c:a0:0d:f5:eb:ab:4b:
         3b:88:e0:ff:c6:7e:ac:6d:1e:c3:af:30:ca:83:ca:67:0d:a4:
         25:74:61:25:69:bb:eb:fa:91:af:e8:43:b9:92:d9:fc:c5:bf:
         26:14:88:b2:cd:64:85:36:e5:3d:35:fb:a4:a3:b8:7e:ee:ba:
         03:9f:fe:6d:51:9b:22:88:4a:ab:74:d5:9d:ba:ef:8a:36:45:
         e9:b0:c6:17:f3:b3:1a:0d:53:b2:6f:62:42:5f:09:2b:87:14:
         b9:f9:4d:e8:d2:10:c4:eb:c9:23:8e:a6:4c:08:d5:30:b0:c7:
         17:92:ec:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:14:05 2024 by rpki-client on console-fra.rpki-client.org