Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
File:                     Sqk04w2mkOdRcTO30hJjJlWnS4c.mft (raw, json)
Hash identifier:          N3WyTUkWoPEjYnOduM4n5kRjFVAo3uWPxymlsAnXTJ8=
Subject key identifier:   A3:37:49:E3:88:D2:A7:43:02:3A:55:9E:4C:8E:A1:E8:DF:24:5F:CB
Authority key identifier: 4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
Certificate issuer:       /CN=4aa934e30da690e7517133b7d212632655a74b87
Certificate serial:       018F87493AAA52F6D4A362803AE0B2A6874F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
Manifest number:          0A74
Signing time:             Fri 17 May 2024 16:01:14 +0000
Manifest this update:     Fri 17 May 2024 16:01:14 +0000
Manifest next update:     Sat 18 May 2024 16:01:14 +0000
Files and hashes:         1: Sqk04w2mkOdRcTO30hJjJlWnS4c.crl (hash: rgXLbi/fjD+PI9Emif+nfTiKgoXVCjvS59J/VgHlcOE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3a:aa:52:f6:d4:a3:62:80:3a:e0:b2:a6:87:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa934e30da690e7517133b7d212632655a74b87
        Validity
            Not Before: May 17 16:01:14 2024 GMT
            Not After : May 18 16:01:14 2024 GMT
        Subject: CN=a33749e388d2a743023a559e4c8ea1e8df245fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7e:93:a7:61:97:bb:ba:57:e7:e1:42:4b:df:
                    ba:65:a0:bd:ea:0e:0e:65:4a:5c:2e:7a:48:ec:85:
                    c9:4d:4f:27:8b:aa:c9:be:02:a5:e7:7c:2c:82:85:
                    c2:13:23:32:90:30:bc:9a:d7:19:bc:5c:85:ff:a9:
                    e7:a4:0d:14:34:b1:8a:c0:83:ad:21:5b:fb:36:96:
                    26:41:72:3d:e1:e3:38:b8:c2:7d:68:df:e8:7a:55:
                    63:34:90:48:57:4a:5f:7e:27:55:cd:7b:9f:7d:31:
                    be:e6:2c:27:f3:e7:53:44:68:ee:88:da:98:4f:53:
                    88:3e:b9:b9:c3:57:96:42:41:cd:24:1e:db:ee:2d:
                    22:bb:62:f3:a6:bf:93:4f:6f:05:4e:c8:84:f4:8e:
                    a9:ad:04:3c:60:3c:e7:e8:b7:3d:9b:c5:3d:7f:0a:
                    a6:9d:bf:81:a5:3d:9d:51:5b:2a:08:c3:08:b0:20:
                    01:6a:51:3e:b2:60:1e:db:15:e4:43:e4:1f:0d:24:
                    cd:c2:9b:a2:58:60:57:a1:6d:a9:9b:49:67:f1:09:
                    13:b4:f4:4d:75:c0:01:c1:c0:f3:86:0e:2c:13:ba:
                    fc:96:f9:86:24:ef:17:dd:f3:b2:1c:c4:f2:bd:fd:
                    30:ff:46:2e:d7:ab:51:b0:2a:93:13:15:96:6a:b0:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:37:49:E3:88:D2:A7:43:02:3A:55:9E:4C:8E:A1:E8:DF:24:5F:CB
            X509v3 Authority Key Identifier:
                keyid:4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3f:09:71:37:1c:00:b7:93:b6:e4:a8:8e:5f:f1:77:a6:57:
         b9:4c:27:ff:fa:33:92:85:ef:28:15:f2:f7:ad:bc:7b:9f:62:
         bf:26:e0:4d:b2:26:0e:dc:2c:7d:c5:fc:82:55:8a:10:f8:f7:
         6f:c7:16:dc:af:42:8e:c7:86:1d:b6:77:65:21:c8:89:99:d1:
         ed:1d:b1:69:a1:a9:e5:1c:45:fa:1e:36:98:50:2d:db:66:fa:
         0c:15:12:54:92:ab:e0:1a:aa:89:7f:03:71:ec:bb:e7:2c:7a:
         8a:23:6a:40:7d:36:fa:68:b5:ad:15:2d:60:02:25:8a:25:44:
         5a:d0:48:e8:2d:48:c0:df:a9:3f:25:79:04:57:74:6f:5c:5b:
         40:99:81:43:c0:9f:42:ad:dc:73:ba:48:1c:98:37:cd:e2:8e:
         f2:81:be:70:cf:c3:32:41:79:93:42:a4:28:2b:f4:47:d0:b1:
         db:78:f0:e6:64:3d:d2:ed:43:02:82:28:0d:0f:93:4b:8b:03:
         6f:89:53:7e:e5:50:f3:a6:90:0c:91:38:cc:f5:75:b2:8f:a4:
         e4:fb:b2:96:11:62:24:00:7a:e9:12:7a:6c:13:f8:16:1e:a7:
         70:50:80:0b:18:48:36:89:53:ec:fc:d0:17:aa:aa:eb:b2:9c:
         b6:ea:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:05 2024 by rpki-client on console-ams.rpki-client.org