Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File:                     n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier:          MiDsXywW97AbuhxkRowMc8S/MFhIS42j5+w1LIu2nD4=
Subject key identifier:   A5:66:E2:92:37:18:2F:6B:3D:3E:10:8E:71:9D:18:6B:CC:1F:80:8B
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer:       /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial:       018F87483E30888A53DBAEF03BCB699C205F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number:          F7
Signing time:             Fri 17 May 2024 16:00:09 +0000
Manifest this update:     Fri 17 May 2024 16:00:09 +0000
Manifest next update:     Sat 18 May 2024 16:00:09 +0000
Files and hashes:         1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: nUxERji34Hu+0HqebtJT1rd5u17E5i0hGbGYSngUcus=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:3e:30:88:8a:53:db:ae:f0:3b:cb:69:9c:20:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
        Validity
            Not Before: May 17 16:00:09 2024 GMT
            Not After : May 18 16:00:09 2024 GMT
        Subject: CN=a566e29237182f6b3d3e108e719d186bcc1f808b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:72:3d:9f:ce:4b:01:6e:95:28:28:33:b6:
                    e6:7a:5f:2d:eb:19:eb:4b:3b:c8:66:3f:8e:92:14:
                    50:bb:96:85:8a:6f:9a:5f:f6:eb:ea:e8:02:6d:f6:
                    2b:a9:76:c3:59:d8:f0:d6:ea:fd:57:c1:d6:d3:4c:
                    c5:e1:a5:ed:7b:f2:0b:89:de:1f:35:f5:8e:eb:b9:
                    63:5a:47:0a:1c:56:3b:6f:77:29:bd:c6:0a:35:5d:
                    84:31:54:75:0a:69:a1:c2:33:3b:33:55:d5:fe:81:
                    f6:e3:5c:67:09:e3:2a:6e:22:e7:cb:9b:39:3e:e5:
                    c6:53:56:1a:2b:6b:65:ce:2f:18:ef:0b:01:fd:2a:
                    69:d9:65:f5:d4:4d:2b:67:c8:2d:0b:94:38:b7:e9:
                    e7:1c:37:2d:18:97:54:07:7d:95:9e:f7:32:3f:59:
                    a2:17:08:3c:61:ce:ab:48:79:8d:80:c9:52:de:6b:
                    09:73:38:9a:a7:66:c8:58:d0:5e:09:77:f9:0a:41:
                    e3:75:5d:97:02:8b:76:a1:10:bc:b0:2a:23:d4:0e:
                    77:b7:b2:54:34:26:7b:9b:f6:10:b4:e6:c8:6a:3d:
                    97:b3:63:d5:c2:78:b3:89:ec:71:cc:43:50:04:dc:
                    2e:9d:46:8b:1e:7b:12:6a:9b:44:8f:7e:94:31:85:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:66:E2:92:37:18:2F:6B:3D:3E:10:8E:71:9D:18:6B:CC:1F:80:8B
            X509v3 Authority Key Identifier:
                keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:45:32:49:ae:6c:00:14:88:29:e0:a4:30:a9:3d:87:f0:35:
         fc:6c:e0:9d:0f:28:5e:1f:43:17:cf:7d:c7:1d:ec:a5:d8:b6:
         ec:2e:c8:8a:ad:db:c0:7e:b7:1c:6b:d7:1e:1c:ba:6b:49:0b:
         9e:ab:94:b2:d7:d2:a7:41:a9:54:8d:83:41:e1:05:5a:fc:e9:
         45:4f:a6:6a:a3:d4:6a:6e:8b:f8:6e:0f:1b:59:5b:c7:be:5b:
         b4:8e:96:1b:0c:08:53:9b:1f:6e:f4:a4:cb:7a:c7:b6:a1:8f:
         55:da:c7:9b:d4:b7:21:3e:de:5b:f8:3f:59:fb:a8:62:45:96:
         88:27:91:db:57:51:c9:24:8e:7b:1e:1d:b4:89:cd:d0:85:8c:
         f3:e7:d5:1a:a9:f4:37:02:a9:c5:55:c6:28:67:49:fe:a0:6e:
         3c:ba:31:7c:d8:ae:41:69:3d:c8:41:b3:12:5e:6a:1b:bc:fb:
         47:b1:3c:28:81:12:44:64:8d:fb:7b:20:44:3f:1c:48:c3:1d:
         59:5b:86:96:47:4b:84:4c:59:df:e7:3d:28:cc:28:f2:78:56:
         b5:52:79:0c:7c:c2:ec:e8:90:46:e5:ea:7c:d9:0a:fb:e7:4b:
         65:5c:0a:16:64:01:5d:c2:6e:4c:54:e3:a1:7e:3d:4a:5e:3e:
         a4:de:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:24 2024 by rpki-client on console-fra.rpki-client.org