Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File:                     R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier:          tZEr1mjxbYh+QNr3sUCxfcX1vhjuDIvA+Zt4UHBFYW4=
Subject key identifier:   7E:50:BB:A1:57:91:6C:B9:F2:9D:8A:9A:01:A8:A9:32:DE:59:8C:25
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer:       /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial:       018F874A5F2201E614B7026BD8D12BED76C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 16:02:29 +0000
Manifest this update:     Fri 17 May 2024 16:02:29 +0000
Manifest next update:     Sat 18 May 2024 16:02:29 +0000
Files and hashes:         1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: SOpWXSe2nQDi0yc111cNmKfcJ1eKeo55Hg6w6VMYFhg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:5f:22:01:e6:14:b7:02:6b:d8:d1:2b:ed:76:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
        Validity
            Not Before: May 17 16:02:29 2024 GMT
            Not After : May 18 16:02:29 2024 GMT
        Subject: CN=7e50bba157916cb9f29d8a9a01a8a932de598c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:7a:69:cf:21:c9:82:b0:32:da:38:68:51:
                    7f:46:64:f6:96:e0:8c:93:9e:4b:d2:0e:2b:35:21:
                    f4:3b:17:ab:8e:b6:53:cd:6d:ba:b0:72:8e:b3:f6:
                    5e:2f:37:5e:78:fb:c1:91:5d:f7:bb:1e:08:bf:3e:
                    ad:2e:a4:3c:d4:a9:e6:2b:9d:b6:02:77:70:2e:63:
                    49:98:8f:84:71:4d:5e:2b:99:f4:0f:79:72:45:bf:
                    06:e2:8d:2a:c6:6f:a6:d3:e7:ff:11:aa:ef:ec:2e:
                    a4:0f:65:91:a8:39:9a:7e:03:3d:76:d2:01:44:af:
                    f7:18:cb:58:9c:43:9b:24:3b:91:8d:01:3f:c6:4b:
                    39:23:1e:5c:8c:71:fb:d3:1b:dd:42:ca:4e:06:06:
                    85:b3:76:ee:79:d0:75:72:21:78:54:57:10:fa:f2:
                    07:92:3a:58:61:70:7b:75:6b:ed:4b:58:9f:cb:80:
                    a8:6e:d5:db:df:ef:9c:68:49:85:0e:a2:d3:c0:11:
                    01:c3:88:6f:61:b1:1c:fb:cd:78:65:30:a3:96:12:
                    ff:f4:17:c4:19:9d:a4:9b:be:c2:34:86:8e:01:59:
                    be:2a:1a:8f:35:43:4f:88:71:27:0d:9e:59:a2:93:
                    d5:f6:8f:78:41:3f:5d:d6:0f:c8:8f:ed:73:b5:b4:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:50:BB:A1:57:91:6C:B9:F2:9D:8A:9A:01:A8:A9:32:DE:59:8C:25
            X509v3 Authority Key Identifier:
                keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:c3:fa:5f:e1:80:9c:69:e0:ac:61:1e:ac:4f:71:df:1b:
         e3:99:a7:f4:a6:dd:85:bf:bc:c8:cb:1c:dc:df:71:fc:c6:19:
         a4:9c:2c:ee:4e:72:77:28:69:e8:59:d3:ae:31:32:00:93:27:
         12:54:4b:70:5f:f5:81:cd:33:58:2a:25:3f:c0:2b:f3:ab:7b:
         08:5d:01:d1:08:58:0a:c3:14:67:bc:0a:ce:a6:79:a0:86:97:
         b8:7c:c2:55:87:9c:eb:19:ca:5a:e1:4f:2e:15:88:a0:b8:67:
         c8:a9:74:2b:ed:48:4d:b8:c0:58:81:4f:be:ae:80:46:fd:45:
         19:e4:76:a7:77:7a:2c:d5:36:35:b4:02:61:73:73:b8:e6:f2:
         ea:45:58:a2:9e:74:31:65:2d:af:52:a1:2a:6a:04:be:a8:40:
         da:71:b0:c2:9a:6e:8e:cf:f2:de:da:27:77:65:8e:63:23:6d:
         75:49:8b:ec:71:18:92:8f:29:92:77:ea:37:b9:e0:a9:9b:a5:
         91:83:0a:ca:4a:e3:3d:03:a8:3a:55:2e:65:95:87:d7:fe:ba:
         3c:8a:35:9a:f9:9f:e6:15:9f:0a:c6:61:29:e2:88:64:14:75:
         1f:70:9f:05:58:c6:c4:4a:5f:38:74:fd:b6:93:91:d7:5a:3d:
         e5:ad:38:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:43 2024 by rpki-client on console-ams.rpki-client.org