Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File:                     FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier:          v7a2sTBQHsE202l2kJqElcEJcxm+da8u899xuBcXE+w=
Subject key identifier:   84:2C:BB:03:FE:2B:49:A8:86:62:24:1C:FA:1B:6E:D4:D1:45:E2:1C
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer:       /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial:       018F5392EF558DD21748441CFE732FF0B478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number:          05EB
Signing time:             Tue 07 May 2024 15:01:29 +0000
Manifest this update:     Tue 07 May 2024 15:01:29 +0000
Manifest next update:     Wed 08 May 2024 15:01:29 +0000
Files and hashes:         1: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: w6LCd7+z7M55JageWRqaBNmMiTmkDjr/3/6somAL0s0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:92:ef:55:8d:d2:17:48:44:1c:fe:73:2f:f0:b4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
        Validity
            Not Before: May  7 15:01:29 2024 GMT
            Not After : May  8 15:01:29 2024 GMT
        Subject: CN=842cbb03fe2b49a88662241cfa1b6ed4d145e21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ca:4a:90:82:c2:4b:8c:18:2a:a7:c0:e1:b0:
                    d4:cf:f2:e4:8a:40:d3:17:c5:8b:17:55:76:fd:72:
                    13:13:a3:4b:f4:cf:c9:2e:07:ff:9a:ff:bc:c1:b2:
                    a7:c1:41:e8:5c:bb:41:8f:ad:39:01:2b:3c:18:13:
                    97:38:6e:07:b7:f7:9b:68:09:bb:42:c5:1a:37:23:
                    f3:0e:5e:22:6a:31:cd:e9:59:5e:4e:d0:2e:ac:65:
                    4c:ac:5a:90:d4:de:df:d7:d3:3f:44:4a:8a:7f:38:
                    b4:93:b5:16:74:67:5a:0c:ca:dd:89:b7:62:1f:5c:
                    2a:a5:40:73:87:a1:32:d3:bc:2c:e4:15:ee:c1:7e:
                    d3:49:c8:b0:32:72:06:62:ae:5c:43:4a:70:1a:dd:
                    4c:4c:f1:70:b8:a4:c0:8a:67:d6:ba:85:fc:64:d2:
                    67:93:7b:ce:e2:c7:3b:93:e6:f3:c3:ac:c5:28:72:
                    55:2b:2b:ff:71:c6:97:4b:8b:94:61:1f:b1:41:07:
                    5f:b4:6e:46:43:bf:d2:a6:ab:29:8d:d1:ee:b3:ec:
                    ab:a7:75:56:d9:cb:57:a7:ec:00:1e:79:23:cf:98:
                    5a:ef:ef:e2:4d:5e:ac:2e:00:80:c4:cc:15:a5:1c:
                    f2:ab:99:a9:f1:f1:af:82:d7:ab:76:1d:11:94:11:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2C:BB:03:FE:2B:49:A8:86:62:24:1C:FA:1B:6E:D4:D1:45:E2:1C
            X509v3 Authority Key Identifier:
                keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:aa:b4:dc:18:a7:bb:01:15:fd:a9:71:22:06:60:60:df:4c:
         fd:dd:b0:cc:fd:2b:3a:db:96:23:23:55:5d:12:27:26:e3:5d:
         19:25:bc:2e:cb:6c:88:c2:5c:74:17:57:9c:4b:1f:b7:a4:b5:
         b4:9d:84:dd:f5:5f:91:89:3b:59:2d:3e:8e:d4:37:fd:85:12:
         64:bc:7c:37:4d:a0:a4:c0:c9:95:a0:30:23:60:8b:61:d0:15:
         b1:c4:cd:9f:3a:69:1c:79:32:05:e7:12:47:1e:e3:6a:a3:26:
         90:95:b6:e4:22:72:35:48:65:c7:c0:f6:d8:f2:98:26:a0:47:
         47:6c:94:79:8c:3a:a2:df:fa:f8:d2:80:eb:cb:d3:99:e5:fc:
         e0:23:05:cc:f2:43:93:19:b5:2e:a0:78:3d:98:cc:0f:af:19:
         b4:79:bb:51:56:27:00:8c:95:7e:ab:a0:9d:d3:72:3c:0a:7a:
         44:77:f2:d1:73:7d:a4:a6:79:45:19:32:7d:c7:5b:21:c6:11:
         25:37:f0:45:e5:bb:b9:0c:44:ce:de:94:38:59:30:55:22:0a:
         9e:44:81:ee:18:59:35:92:9e:de:bc:23:c5:51:42:6f:5c:c1:
         4e:9f:ac:34:7b:28:90:b2:a7:f1:17:bb:07:15:b3:b5:c7:11:
         cf:ae:71:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:07:44 2024 by rpki-client on console-ams.rpki-client.org