Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
File:                     Illqyngn2jIPE1xhMpnjWi4iJUM.mft (raw, json)
Hash identifier:          JyEzgcVNpQ1mXtfoKLXZBa+wrB3X+04GzMSMFb2jfRQ=
Subject key identifier:   12:E0:47:9E:9B:FE:37:69:F1:5D:96:11:75:9E:54:2E:8F:E6:4D:DF
Authority key identifier: 22:59:6A:CA:78:27:DA:32:0F:13:5C:61:32:99:E3:5A:2E:22:25:43
Certificate issuer:       /CN=22596aca7827da320f135c613299e35a2e222543
Certificate serial:       018F441FFB8B8D01FFAB46CCB1E2E188F7A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
Manifest number:          053E
Signing time:             Sat 04 May 2024 15:01:37 +0000
Manifest this update:     Sat 04 May 2024 15:01:37 +0000
Manifest next update:     Sun 05 May 2024 15:01:37 +0000
Files and hashes:         1: Illqyngn2jIPE1xhMpnjWi4iJUM.crl (hash: MYePnV2FBIiBkbAiki7fUaXRnieIK6Tif1OvcRQpiEA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:fb:8b:8d:01:ff:ab:46:cc:b1:e2:e1:88:f7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22596aca7827da320f135c613299e35a2e222543
        Validity
            Not Before: May  4 15:01:37 2024 GMT
            Not After : May  5 15:01:37 2024 GMT
        Subject: CN=12e0479e9bfe3769f15d9611759e542e8fe64ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:93:e4:24:ff:2d:6c:dd:3b:14:03:89:39:
                    a1:34:30:ee:0b:fa:73:ef:80:a9:3b:4b:fa:a0:94:
                    c2:8c:80:a1:49:69:2a:38:74:2c:4c:82:4e:c2:68:
                    9e:a7:e9:06:b5:55:23:4f:2a:d8:35:27:68:eb:13:
                    3e:b7:15:5c:2f:66:6a:0c:e8:87:f2:de:35:ac:a7:
                    a8:57:11:4d:94:3c:7b:8f:a7:09:1c:88:cd:79:18:
                    f0:9c:ea:f1:e0:f0:8b:e9:18:4a:6d:95:7b:fd:84:
                    45:5f:2f:95:5a:25:7d:7c:1e:81:fd:57:b3:f4:f3:
                    89:5d:71:ab:40:7d:10:17:dc:f2:7d:4e:13:c3:98:
                    c5:d9:48:a8:17:81:06:5d:c3:b7:f5:71:47:17:81:
                    e5:37:0e:bb:f4:86:71:23:58:73:1b:fb:97:df:80:
                    4c:39:e4:89:6b:a4:9f:88:4d:e5:3d:3a:d9:39:9b:
                    26:9e:40:29:a5:cf:d9:3d:60:d9:b0:ba:0a:78:7d:
                    8d:13:3a:a2:ab:8e:81:a2:95:84:fb:dc:e2:23:8b:
                    5a:a6:54:3d:8e:20:7c:d3:64:69:6e:1f:9f:2a:6b:
                    c0:41:d5:52:57:96:c5:56:d6:3d:04:61:05:7c:f7:
                    f7:90:d7:65:8a:13:f2:07:f2:39:7c:da:c7:d3:dd:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E0:47:9E:9B:FE:37:69:F1:5D:96:11:75:9E:54:2E:8F:E6:4D:DF
            X509v3 Authority Key Identifier:
                keyid:22:59:6A:CA:78:27:DA:32:0F:13:5C:61:32:99:E3:5A:2E:22:25:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:99:52:7a:73:e0:fa:72:79:b4:33:ab:67:e1:2a:80:f5:13:
         9f:3f:61:02:da:8d:29:97:ac:18:58:11:4e:e5:eb:4f:1f:b2:
         c8:0d:4e:c3:80:11:6b:f8:df:b7:76:3c:00:61:c3:ad:71:37:
         1e:d0:61:51:ce:76:aa:c9:7e:62:9a:8c:38:a3:e8:0c:2d:b9:
         9c:a6:1e:aa:ce:88:48:0b:32:e0:05:6d:a5:39:50:af:ae:cd:
         59:4d:b2:d5:18:9d:87:53:82:d7:85:52:13:42:92:11:a9:92:
         1b:39:a8:7e:c6:b7:d5:a8:50:ef:34:2e:43:55:1b:7b:0b:93:
         d7:0c:3b:11:8e:6c:90:b1:96:67:1d:2b:6c:34:48:a7:35:cd:
         b4:54:04:b7:fb:e2:b3:24:bc:d7:b4:d7:24:0e:6c:48:02:8b:
         1f:bc:42:68:91:35:95:3b:b0:81:f3:a1:c1:e2:61:9f:87:06:
         2b:3f:d2:da:61:68:15:9e:bd:d3:d5:94:9c:fb:a5:b9:a9:24:
         1b:3f:36:31:8f:9e:7b:9f:81:c1:48:5b:34:c9:1b:8c:53:cb:
         a8:48:4c:99:0a:e8:c4:19:d2:f5:35:b5:cd:98:b5:d9:ae:33:
         03:5a:3f:80:dc:c5:f6:68:a8:6a:88:e3:71:41:30:16:23:e6:
         e4:d6:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:31:16 2024 by rpki-client on console-fra.rpki-client.org