Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7e7248-099e-4233-9fa5-bbaa0977b732/1/ysWR6kZJxB7-b3x8YQgKIkM6C4g.mft
File:                     ysWR6kZJxB7-b3x8YQgKIkM6C4g.mft (raw, json)
Hash identifier:          EW3hJNsebu9t9LBWFyvc72hXd1WFiW6xsO8N4y1s22g=
Subject key identifier:   E4:3E:26:16:94:F5:81:39:29:F4:C5:0F:6C:A3:FC:DE:37:59:8A:EC
Authority key identifier: CA:C5:91:EA:46:49:C4:1E:FE:6F:7C:7C:61:08:0A:22:43:3A:0B:88
Certificate issuer:       /CN=cac591ea4649c41efe6f7c7c61080a22433a0b88
Certificate serial:       018F8749189753B6BB67BD156C35214616EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysWR6kZJxB7-b3x8YQgKIkM6C4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7e7248-099e-4233-9fa5-bbaa0977b732/1/ysWR6kZJxB7-b3x8YQgKIkM6C4g.mft
Manifest number:          1172
Signing time:             Fri 17 May 2024 16:01:05 +0000
Manifest this update:     Fri 17 May 2024 16:01:05 +0000
Manifest next update:     Sat 18 May 2024 16:01:05 +0000
Files and hashes:         1: ysWR6kZJxB7-b3x8YQgKIkM6C4g.crl (hash: 2skB4inGMCyUP2WxqLEzN6j74lYjRy4G6XyEs4ZofVc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7e7248-099e-4233-9fa5-bbaa0977b732/1/ysWR6kZJxB7-b3x8YQgKIkM6C4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7e7248-099e-4233-9fa5-bbaa0977b732/1/ysWR6kZJxB7-b3x8YQgKIkM6C4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysWR6kZJxB7-b3x8YQgKIkM6C4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:18:97:53:b6:bb:67:bd:15:6c:35:21:46:16:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac591ea4649c41efe6f7c7c61080a22433a0b88
        Validity
            Not Before: May 17 16:01:05 2024 GMT
            Not After : May 18 16:01:05 2024 GMT
        Subject: CN=e43e261694f5813929f4c50f6ca3fcde37598aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bf:6d:d6:0d:b0:44:26:a2:5d:81:79:97:09:
                    dd:d5:f0:77:45:a9:47:a0:06:1a:3d:a2:0a:6a:12:
                    07:34:ed:f4:5a:9c:48:82:c3:f1:92:1b:ad:83:10:
                    bf:d3:9e:fd:50:44:f9:b7:69:b1:2f:10:5b:1e:e8:
                    95:5d:15:82:95:89:0c:04:fe:9d:31:ed:d1:cb:71:
                    d1:0e:1d:f8:35:51:64:3e:5b:94:44:8b:0e:99:aa:
                    97:93:0a:c4:df:1a:e9:d7:fe:8c:0f:b5:94:d9:35:
                    d3:23:a7:56:11:c0:87:38:17:b0:f3:02:1c:cf:73:
                    45:c7:c4:63:59:ed:aa:bc:85:8f:29:87:28:67:c7:
                    cf:57:51:ac:cb:16:7d:4d:49:13:81:20:dd:ea:11:
                    52:67:d2:a9:bd:df:fb:db:ec:a2:4f:a3:8b:b7:77:
                    72:fe:91:16:b5:c1:25:7f:9a:fa:f3:e7:1e:64:8a:
                    81:c0:f3:15:62:0f:2a:fb:ca:ce:b2:0e:14:6a:81:
                    25:a4:b4:dc:64:35:e8:e8:ec:a4:5c:8e:a4:26:df:
                    1d:e5:f1:de:fe:51:10:d7:5e:91:e4:06:06:60:f2:
                    35:a1:5c:25:3f:fd:04:26:13:98:f2:87:7e:6f:e7:
                    9c:8a:66:7a:d7:3f:1f:d8:64:6f:2b:2d:e0:e1:f0:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3E:26:16:94:F5:81:39:29:F4:C5:0F:6C:A3:FC:DE:37:59:8A:EC
            X509v3 Authority Key Identifier:
                keyid:CA:C5:91:EA:46:49:C4:1E:FE:6F:7C:7C:61:08:0A:22:43:3A:0B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysWR6kZJxB7-b3x8YQgKIkM6C4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7e7248-099e-4233-9fa5-bbaa0977b732/1/ysWR6kZJxB7-b3x8YQgKIkM6C4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7e7248-099e-4233-9fa5-bbaa0977b732/1/ysWR6kZJxB7-b3x8YQgKIkM6C4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ea:33:43:71:90:47:0b:fd:34:94:1e:ce:46:44:8f:33:96:
         b3:e7:2e:b9:20:b3:61:0e:89:13:0f:68:6f:3e:1a:59:69:49:
         19:4f:e5:7c:c7:08:95:8d:eb:e8:3a:04:ef:3e:70:ef:c6:d2:
         ce:08:cd:f0:cc:bb:55:be:6a:c5:fd:f5:60:07:62:61:55:08:
         11:0a:e8:f6:eb:c7:7e:ed:22:6b:c8:c0:c7:68:c1:d1:f5:7a:
         5f:f9:98:3d:2f:39:3b:5e:28:aa:6b:22:12:20:e2:39:49:07:
         4a:1b:ac:f2:5a:f8:62:bc:01:91:02:c0:e6:2a:67:23:fa:c4:
         5a:74:9a:30:e1:0d:5b:6d:53:d5:4a:ce:ba:ab:95:51:55:53:
         8f:e6:35:f3:e0:ec:dd:8d:26:68:81:55:3f:88:3a:de:e3:87:
         da:80:42:f0:72:26:5f:1d:9b:2e:17:6c:62:b0:98:96:66:92:
         45:d4:34:dc:0b:ab:d6:6f:53:75:12:51:41:8d:8e:2c:7f:ae:
         58:9c:91:2f:92:ed:7a:99:e4:54:8a:a1:db:4c:6f:b4:d7:9a:
         18:53:34:7f:63:f0:3f:ea:c5:56:38:7f:03:26:6e:a3:cd:8f:
         fa:1c:3d:00:a4:67:23:9a:47:4b:f0:4a:27:27:9e:9c:35:8d:
         9e:c4:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:51:48 2024 by rpki-client on console-ams.rpki-client.org