Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File:                     9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier:          9qSgmb7MoSOD4/MOKGaJ+XfmTan1A3+95w4hrcPMMIM=
Subject key identifier:   FA:88:9A:38:DE:73:BD:BD:E3:DB:C1:EB:46:D0:8D:C6:DC:F8:BA:B1
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer:       /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial:       018F58F192A4AC27119F67D999FD200F6E30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number:          115C
Signing time:             Wed 08 May 2024 16:02:57 +0000
Manifest this update:     Wed 08 May 2024 16:02:57 +0000
Manifest next update:     Thu 09 May 2024 16:02:57 +0000
Files and hashes:         1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: YBhew5Df/hjoPyadRcLpHm5miijcX3V5MVQnmxKh8Sk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f1:92:a4:ac:27:11:9f:67:d9:99:fd:20:0f:6e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
        Validity
            Not Before: May  8 16:02:57 2024 GMT
            Not After : May  9 16:02:57 2024 GMT
        Subject: CN=fa889a38de73bdbde3dbc1eb46d08dc6dcf8bab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:df:30:06:62:8f:b1:9b:01:ed:43:5d:bc:
                    51:f1:2d:4e:09:ad:91:37:8f:f3:45:14:6e:04:e5:
                    50:c4:23:24:50:22:de:cd:b6:df:90:6f:6c:57:d1:
                    b6:13:86:e0:20:0c:dc:1b:c8:73:0b:ae:4b:97:73:
                    d2:b9:dd:6a:f4:87:49:e7:5a:1d:2c:8a:05:b7:69:
                    bc:2d:65:73:ac:2f:da:1a:15:cd:56:1c:bc:cc:25:
                    7b:be:bc:0f:c4:78:89:7b:3c:24:8a:3d:67:14:51:
                    14:5d:36:38:52:10:dc:4f:5c:c5:e3:bc:59:83:e4:
                    98:a7:91:4e:98:5d:41:04:e7:f1:a9:27:74:77:b2:
                    1b:3a:96:5b:f8:a3:22:ca:1b:f0:9e:9e:99:25:ee:
                    ae:5b:e5:ed:71:71:d1:78:51:35:7d:46:48:16:b3:
                    15:8a:b9:85:1f:55:9c:a8:09:7d:8f:0b:66:f3:07:
                    78:4d:f9:e4:a9:3d:94:4e:fb:6e:65:11:eb:e0:1c:
                    68:ef:a9:aa:7c:fd:80:43:a9:6d:80:e6:be:15:b1:
                    10:94:19:45:a1:f3:13:24:6b:35:6c:c1:bd:08:27:
                    3d:e0:2f:58:64:a9:58:39:cb:95:e3:ff:cf:bf:64:
                    f5:c3:8c:4e:03:b3:24:28:94:7d:5a:29:a7:6d:5d:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:88:9A:38:DE:73:BD:BD:E3:DB:C1:EB:46:D0:8D:C6:DC:F8:BA:B1
            X509v3 Authority Key Identifier:
                keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:27:57:c5:8e:f4:ee:31:8a:1f:ca:84:fb:0f:40:6a:5c:0f:
         73:24:3d:69:59:cc:8a:bf:1d:70:63:14:8f:26:a4:f7:85:6e:
         85:54:3d:2d:1b:50:70:97:99:eb:17:3e:23:9a:5a:fc:7b:61:
         52:0f:c3:2a:54:62:a8:dd:52:eb:64:de:59:bf:f8:1b:9d:42:
         ed:a0:aa:06:01:d9:01:20:8c:b6:25:5a:6f:e9:11:d1:fb:85:
         1a:fe:a9:7b:ba:a0:bd:af:3a:07:27:13:30:e0:6f:8e:d9:c5:
         a8:8f:66:d7:69:d3:c8:a9:5d:14:c7:40:12:5c:a2:9c:b4:8f:
         61:24:3a:55:f8:f2:30:ca:ae:e5:1d:bd:02:22:f8:35:85:2f:
         84:14:d8:bc:75:47:59:9a:41:72:75:89:28:70:2e:73:7a:4e:
         37:9e:01:a4:08:2d:b1:12:13:8f:df:41:4c:25:b4:49:a7:04:
         47:78:97:fb:d2:99:4f:a6:ed:c9:0e:42:ee:b4:bd:94:b7:d8:
         50:2d:77:17:49:da:d6:6c:46:6c:f9:4c:42:08:34:73:34:e6:
         61:5a:f5:9d:83:5b:d0:c9:47:72:78:3d:0c:e7:57:b8:3a:eb:
         3c:bf:8d:a9:a6:e4:06:f9:c3:09:33:0c:74:d1:33:92:53:08:
         67:9c:ae:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:08:43 2024 by rpki-client on console-ams.rpki-client.org