Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File:                     0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier:          w1Yb5dWwhRBQVaNpWw2GDgRiq/DHuRtQQ+f9aCh8XOg=
Subject key identifier:   CE:6B:09:8D:61:4C:AF:05:E9:B2:1E:08:15:8D:6A:C9:4C:A0:02:6C
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer:       /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial:       018F874B1F3707B4518E7EC56A3C3DA1A7A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number:          012F
Signing time:             Fri 17 May 2024 16:03:18 +0000
Manifest this update:     Fri 17 May 2024 16:03:18 +0000
Manifest next update:     Sat 18 May 2024 16:03:18 +0000
Files and hashes:         1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: 2Bqh6pgIHpg7JFzDihpY7U6kRHZdzJ1e0vSYmfuQu3g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:1f:37:07:b4:51:8e:7e:c5:6a:3c:3d:a1:a7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
        Validity
            Not Before: May 17 16:03:18 2024 GMT
            Not After : May 18 16:03:18 2024 GMT
        Subject: CN=ce6b098d614caf05e9b21e08158d6ac94ca0026c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:05:a1:5c:b4:f0:0b:b5:d0:a1:bb:19:53:
                    4a:a8:1e:93:9a:b7:f3:c5:40:ae:1d:70:48:5f:6b:
                    38:a9:f2:d5:d1:ec:7f:c7:9d:fa:9b:1f:d4:ff:05:
                    7b:c4:c5:e6:a1:9b:f3:2e:44:e3:e3:0a:c5:7e:92:
                    bb:1b:62:2c:f6:19:36:38:3f:d7:4f:9d:be:68:16:
                    f8:ec:e4:bb:d5:5e:f5:5c:c9:f3:ee:11:01:29:dd:
                    b5:73:d3:2e:c9:88:5e:c0:d9:bf:07:a5:a3:ff:0c:
                    95:d6:a5:c8:60:75:54:7d:32:e5:48:78:12:d5:3d:
                    46:8f:bb:d4:35:7c:ed:9c:6a:b1:c3:41:cb:e9:7c:
                    2b:aa:99:0e:95:73:af:1e:b0:18:46:78:99:ed:8d:
                    d5:17:3f:c9:32:c3:ca:db:42:84:04:f4:16:bf:a8:
                    03:b3:ed:d3:1a:ea:30:0e:67:60:8d:3d:17:5b:28:
                    29:b1:fb:6a:cc:09:57:25:83:5f:37:55:92:b7:66:
                    bf:c0:8b:8a:82:b2:ff:e5:77:46:40:df:89:52:a9:
                    33:35:0e:17:3e:36:cb:22:f0:97:ec:8b:d4:ea:76:
                    f7:13:48:5e:bb:b4:02:03:ec:7e:c5:b9:40:cd:44:
                    25:8a:02:bd:6d:c8:c4:70:1f:52:3e:ac:4c:a1:f1:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6B:09:8D:61:4C:AF:05:E9:B2:1E:08:15:8D:6A:C9:4C:A0:02:6C
            X509v3 Authority Key Identifier:
                keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:30:0a:1f:83:1f:91:53:a4:2f:06:2b:6b:a4:8c:fc:eb:79:
         4d:69:89:af:aa:b9:4f:1d:22:9e:a6:13:e7:6c:6e:3a:82:6a:
         17:8c:50:f1:69:83:04:56:c8:aa:e8:15:db:56:fc:e1:f3:66:
         83:d2:17:35:05:55:3c:72:4c:9e:8c:8c:aa:93:53:e8:8c:e6:
         ed:98:0a:c8:8a:27:3f:c5:a0:55:3a:18:26:30:86:1f:4f:b1:
         58:0a:d8:9c:93:1d:f9:ee:55:f0:8a:9f:f1:e2:d7:93:8d:7d:
         b9:4d:e3:a8:3c:f6:31:4e:04:a5:16:4e:d9:a1:d7:9f:0b:5f:
         ea:00:52:f7:31:08:78:73:4b:0d:b0:46:bd:ef:2b:f6:01:b4:
         39:2a:fa:3c:ab:d7:9a:03:71:dc:33:3f:27:08:2e:4d:93:d7:
         0e:74:53:17:90:15:f6:28:8a:ea:87:9a:e9:27:d6:2c:75:54:
         59:ab:85:04:6b:3b:76:4f:2c:c7:a4:0c:2b:4b:de:d7:bf:df:
         cc:0e:de:6f:a1:9d:3b:fe:e5:b7:e7:75:35:dd:a6:77:ec:0c:
         a4:d8:b0:4e:10:05:06:cf:61:47:57:21:9d:44:b9:23:ff:bb:
         61:e6:98:2d:12:36:8a:05:4e:e4:ca:63:7d:8e:17:af:9b:d2:
         e8:d8:1d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:05 2024 by rpki-client on console-fra.rpki-client.org