Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
File:                     g-k154ofll0QiRUhXQ8Et2tzPlg.mft (raw, json)
Hash identifier:          ZtpmZGUen4zDydYwYhjsCQhNWFT02dRIOVoQyYjeW3k=
Subject key identifier:   15:DE:3B:8F:32:C9:77:24:E0:72:B3:30:F8:A9:CE:CE:78:44:2B:DE
Authority key identifier: 83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
Certificate issuer:       /CN=83e935e78a1f965d108915215d0f04b76b733e58
Certificate serial:       018F87493BAC11B3654DAFFD19EDA103A934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:14 +0000
Manifest this update:     Fri 17 May 2024 16:01:14 +0000
Manifest next update:     Sat 18 May 2024 16:01:14 +0000
Files and hashes:         1: g-k154ofll0QiRUhXQ8Et2tzPlg.crl (hash: QDjqNP/qKAPVny46rMavPcpxgZTyee7DxL247VnjGAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3b:ac:11:b3:65:4d:af:fd:19:ed:a1:03:a9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e935e78a1f965d108915215d0f04b76b733e58
        Validity
            Not Before: May 17 16:01:14 2024 GMT
            Not After : May 18 16:01:14 2024 GMT
        Subject: CN=15de3b8f32c97724e072b330f8a9cece78442bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:96:e3:70:c7:11:93:07:38:02:8d:23:15:
                    29:8e:0a:f6:e2:e1:ff:1b:53:73:53:65:64:55:ba:
                    3f:dc:e4:6b:52:22:ef:47:10:e9:11:15:0c:ec:ce:
                    04:de:24:16:03:9a:90:a4:ff:73:5d:57:45:00:9d:
                    fe:20:d0:24:69:2e:b7:76:9a:01:71:2d:ed:d5:c6:
                    e6:cc:e8:3f:b2:ef:2e:00:9d:02:87:45:05:9c:e2:
                    c0:91:9b:a8:f2:e7:11:07:76:54:0c:17:d0:0e:99:
                    2f:45:32:cf:ec:95:87:9c:42:75:2a:cd:b7:4c:76:
                    e4:77:4b:e5:20:79:66:ea:ed:14:54:62:f0:bf:17:
                    c2:ac:38:a9:ae:9b:0d:75:7b:30:c3:0c:d2:56:d4:
                    88:1c:17:23:0d:85:eb:6c:d8:6a:19:66:cf:c2:30:
                    4f:56:ac:36:b1:3a:ff:38:08:ac:f7:02:63:6b:14:
                    77:64:cd:07:88:d6:87:47:e8:c4:64:46:35:a9:f9:
                    fb:eb:87:55:c4:49:46:e4:14:4a:c7:69:2e:53:d7:
                    f3:61:bf:56:75:3c:ea:51:db:45:c3:16:78:2c:9e:
                    90:bb:a3:ab:96:74:dd:4b:f3:9c:cd:24:39:f8:32:
                    f8:88:6c:81:af:5a:8d:6d:42:3a:96:94:dd:b1:b3:
                    ca:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DE:3B:8F:32:C9:77:24:E0:72:B3:30:F8:A9:CE:CE:78:44:2B:DE
            X509v3 Authority Key Identifier:
                keyid:83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:35:a3:41:79:4d:58:9a:0f:d2:07:7d:91:2f:a3:80:d2:f1:
         78:ba:7a:ec:c4:89:c4:9b:72:ab:38:1b:a0:46:d0:de:61:4f:
         be:30:8e:fc:17:6d:26:8c:c6:c5:d9:98:da:7a:a5:72:23:98:
         fb:7b:7b:e4:00:c2:59:a6:07:b8:05:f4:8a:74:30:11:80:dc:
         89:84:a1:05:d9:90:d7:f1:b1:0b:51:73:08:c7:1f:88:ad:55:
         d6:d1:b8:12:ac:66:77:35:ee:4a:19:10:c5:4e:59:9a:4f:6c:
         47:58:66:20:92:d9:38:bb:55:fa:7a:70:86:9c:2f:8d:2c:cc:
         4d:82:b4:90:1c:84:a5:4c:13:9c:e3:a7:2a:63:3e:3c:1f:9d:
         31:a1:68:e4:ae:75:51:0a:65:0b:f4:ec:47:8b:8b:ac:26:db:
         3d:ab:4f:e1:18:7c:9f:ab:ec:2b:3a:4b:9d:22:87:e3:b9:f4:
         9b:fa:5e:c7:dc:8a:5f:b3:e0:85:60:68:f0:a3:7c:10:c0:c8:
         20:c5:be:d8:8a:43:3b:35:67:d5:06:4f:95:e6:3d:47:8f:bc:
         62:be:a8:4e:83:ef:61:02:6b:b9:df:fa:46:10:0b:24:6c:f7:
         bb:32:1c:34:5c:cf:1e:c5:16:1d:67:94:61:87:2d:9e:2a:dd:
         a0:49:76:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:31:46 2024 by rpki-client on console-fra.rpki-client.org