Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
File:                     TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft (raw, json)
Hash identifier:          tzT5vvdQ9Ue8cuw7rTnSntgO9C9Du4bg66D/dmTXZiQ=
Subject key identifier:   D2:E9:FF:EC:1E:1C:5B:E2:C0:F9:D0:4F:96:F7:B4:C3:F5:0C:11:0E
Authority key identifier: 4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
Certificate issuer:       /CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
Certificate serial:       018F87B64DC0573E5A2204A988F93313D583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 18:00:22 +0000
Manifest this update:     Fri 17 May 2024 18:00:22 +0000
Manifest next update:     Sat 18 May 2024 18:00:22 +0000
Files and hashes:         1: TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl (hash: xdFqkR3IbYQRl5/dpEHgmCk5ZkoKqBXQ+NRQbI7uEqA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:4d:c0:57:3e:5a:22:04:a9:88:f9:33:13:d5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
        Validity
            Not Before: May 17 18:00:22 2024 GMT
            Not After : May 18 18:00:22 2024 GMT
        Subject: CN=d2e9ffec1e1c5be2c0f9d04f96f7b4c3f50c110e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:36:c0:75:7e:04:18:24:f5:a4:f2:4f:53:3c:
                    b6:fb:d0:5d:22:6f:94:3c:c9:7d:36:dd:f3:19:aa:
                    42:bc:6d:b1:3d:7a:93:54:b3:00:29:58:59:1d:b6:
                    52:ea:55:5a:7d:43:83:73:a0:4a:23:52:dd:59:11:
                    e1:90:31:f2:5a:ed:7f:9d:59:a0:6f:c1:cb:b9:49:
                    6c:66:4a:f7:a3:8d:d3:5e:16:3c:41:13:c1:7e:29:
                    23:4e:0b:93:fc:4e:f8:ce:b6:4b:62:a5:e8:31:91:
                    82:09:1e:35:41:4b:14:60:4b:96:45:82:be:63:bf:
                    ea:b1:72:10:fb:2c:fa:ac:93:8c:96:55:9c:d7:51:
                    bb:eb:d1:38:c5:62:ef:ca:2c:e1:82:32:4e:1b:6a:
                    d3:de:e9:ba:27:4e:1a:9d:a2:ac:65:9e:e7:db:55:
                    58:5b:71:89:1e:49:e6:f5:05:dc:3b:52:72:74:77:
                    15:49:22:bc:b1:c5:61:1c:42:04:5e:be:4b:4a:df:
                    b6:a0:84:aa:09:25:c2:4e:2a:b1:77:eb:b4:ec:da:
                    9c:a2:99:10:8b:19:37:6c:2c:ef:54:e1:6e:37:19:
                    3a:c2:9b:91:0f:08:5c:f8:d1:6a:74:a1:42:69:3f:
                    31:fa:d8:d2:c7:b8:e1:cb:36:ce:6f:d7:27:53:a6:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E9:FF:EC:1E:1C:5B:E2:C0:F9:D0:4F:96:F7:B4:C3:F5:0C:11:0E
            X509v3 Authority Key Identifier:
                keyid:4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c9:32:a6:5e:d8:46:15:6b:42:25:f7:ce:c3:dc:84:57:03:
         fa:44:14:93:27:a6:c8:6c:26:16:02:d8:06:4f:35:bc:13:bb:
         eb:57:e0:e4:30:b0:e8:29:35:ce:da:ca:bb:8d:35:5b:1a:78:
         9e:a1:dc:a6:d0:c5:ec:bc:9f:22:00:ab:7d:5d:f7:7f:34:bc:
         68:ba:a3:0c:61:27:95:1e:77:c7:7f:c3:e0:6f:62:1d:03:80:
         02:82:78:f3:dd:be:81:d8:3f:94:c3:74:a9:2e:ea:eb:4c:ad:
         b4:2d:5e:fe:65:9b:38:68:bd:1f:8a:3a:7d:2c:21:b0:14:20:
         2e:56:08:90:25:a5:f9:a8:aa:59:3f:22:24:3a:30:01:a6:b6:
         74:70:14:bb:57:de:fb:82:5f:5a:6f:ad:32:e8:50:cc:f9:75:
         b7:b0:7b:09:59:5d:f2:95:56:27:85:af:f8:ac:31:24:87:6b:
         b1:17:fc:c3:64:e1:31:64:df:75:63:3a:d5:0d:71:ca:93:c2:
         57:19:0a:bf:06:dc:7a:9b:cb:66:f1:38:a3:bd:77:d4:ec:d7:
         5d:97:b1:59:34:8d:57:09:9a:a8:8f:7a:92:7a:44:70:0d:30:
         68:a2:8a:67:8c:42:99:c6:16:78:1c:63:17:70:aa:22:3d:e7:
         a4:ef:78:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:57 2024 by rpki-client on console-fra.rpki-client.org